7 years, 10 months ago

Georgia Tech researchers discover combination of Android features that makes the OS vulnerable

Researchers from the Georgia Tech university have discovered an Android vulnerability that cannot be easily fixed. Instead, the vulnerability originates from a combination of features in the operating system, which makes it far more difficult to fix than a conventional security update. The vulnerability could lead to a new class of malicious strikes, which the researchers have dubbed as “ Cloak and Dagger ” attacks. Wenke Lee, a professor in Georgia Tech’s School of Computer Science, says “In Cloak and Dagger, we identified two different Android features that when combined, allow an attacker to read, change or capture the data entered into popular mobile apps. The two features involved are very useful in mapping, chat or password manager apps, so preventing their misuse will require users to trade convenience for security.

Firstpost

Discover Related