Live
- Miss Universe 2024: Date, Time, and Where to Watch the Glamorous Finale
- MUDA scam: Petitioner urges Lokayukta to probe documents taken away by minister to help Siddaramaiah
- Maharashtra: Tribal residents of Yavatmal realise their dream of 'pucca' house under PMAY
- FIIs to reduce selling in India towards year-end, fresh allocations to occur
- ESPN Tests AI Avatar' FACTS' for Sports Analytics
- Amit Shah accuses Hemant Soren of shielding Bangladeshi infiltrators
- I’m a fool essentially providing free funding to OpenAI: Musk once told Altman
- Have plans A, B, C and D in hand as there’s no certainty in the player auction, says RCB's Bobat
- ISRO to launch communication satellite aboard Elon Musk’s SpaceX rocket
- Congress opens shop of lies & loot during elections: Rajasthan CM
Hacking threat to 950 million phones
Highlights
Cyber security firm Zimperium on Monday warned of a flaw in the world’s most popular smartphone operating system that lets hackers take control with a text message.
Cyber security firm Zimperium on Monday warned of a flaw in the world’s most popular smartphone operating system that lets hackers take control with a text message.
“Attackers only need your mobile number, using which they can remotely execute code via a specially crafted media file delivered via MMS (text message),” Zimperium Mobile Security said in a blog post. “A fully weaponised successful attack could even delete the message before you see it. You will only see the notification.”
Android code dubbed “Stagefright” was at the heart of the problem, according to Zimperium. Stagefright automatically pre-loads video snippets attached to text messages to spare recipients from the annoyance of waiting to view clips.
Hackers can hide malicious code in video files and it will be unleashed even if the smartphone user never opens it or reads the message, according to research by Zimperium’s Joshua Drake. “The targets for this kind of attack can be anyone,” the cyber security firm said, referring to Stagefright as the worst Android flaw till date.
“These vulnerabilities are extremely dangerous because they do not require that the victim take any action to be exploited.” Malicious code executed by hackers could take control of smartphones and plunder contents without owners knowing.
Stagefright imperils some 95 per cent, or an estimated 950 million, of Android phones, according to the security firm. Zimperium said that it reported the problem to Google and provided the California Internet firm with patches to prevent breaches.
“Google acted promptly and applied the patches to internal code branches within 48 hours, but unfortunately that’s only the beginning of what will be a very lengthy process of update deployment,” the firm said.
Next Story
ADVERTISEMENT
