Thursday, September 1, 2016

Linux bug leaves 1.4 billion Android users vulnerable to hacking attacks

Nearly 80% of the Android Phones are integrated with the fresh vulnerability which enables the attackers to end up the connection, and researchers from the Mobile security firm look out recently if the connections are not encrypted, inject malicious code or the content into the parties’ communications.


It was reported that this flaw was seen in the version 3.6 in 2012 in a Linux operating system kernel. The researchers of Lookout reported that, the Linux flaw was introduced into the version of Android 4.4 (alias Kitkat) and this would remain on all the future version including the preview of Android Nougat. This issue is totally based on the installation of Android base and this proved that 1.4 billion Android devices are vulnerable.

Lookout researcher Andrew Blaich reported that, by using VPN’s they are making sure to encrypt the communication for the Android users. If there’s somewhere they’re going to that they don’t want to be tracked, always ensure they’re encrypted.

This vulnerability made sure that it is possible for anyone to determine that two parties are communicating with the transport protocol connection with the internet connection that serves Webmail, DM and more. If at all, some users are encrypted, the attacker may still be able to determine a channel exist and terminate it. 

One more way to exploit the Android users is by inserting the JavaScript. It shows the message that falsely claims the users has been logged out of the application and then again ask to reenter the username and password. By these, it is clear that login credentials would be sent to the attackers. Similar vulnerabilities can also be found in the browser or e-mail or other apps that are targeted for the Android users.

One of the representatives of the Google said that the engineers are already aware of the vulnerabilities and are taking steps for the actions. Maintainers of the Linux kernel are already working on these patches. These vulnerabilities can also be incorporated into a new Android versions in future.

No comments:

Post a Comment