Android smartphone users, your device could be at risk! – Crypto News – Crypto News
Connect with us
The impacted phones include those from LG, Samsung, and the ones powered by MediaTek processors. The impacted phones include those from LG, Samsung, and the ones powered by MediaTek processors.

Technology

Android smartphone users, your device could be at risk! – Crypto News

Published

3 years ago

on

In a major security leak, certificates of several Android OEMs were exposed recently. The security breach has left millions of Android devices worldwide vulnerable to malware. The affected phones include those from LG, Samsung, and the ones powered by MediaTek processors.

The leak was reported by Łukasz Siewierski (via Mishaal Rahman), a Google employee and malware reverse engineer. He said that multiple platform certificates are being used to sign malware. He explains platform certificates as an application signing certificate which is used to sign the “android” application on the system image. The “android” application runs with a highly privileged user id – android.uid.system – and holds system permissions, including permissions to access user data.

These certificates are used to verify apps. Any other application signed with the same certificate can declare that it wants to run with the same user id, giving it the same level of access to the Android operating system, In other words, these certificates, if exploited by hackers, can be used to create apps that may look authentic.

“Applications signed with the platform certificate may declare that they want to share uid with the ‘android’ application, giving them the same set of permissions without user input”, says Łukasz Siewierski explaining the impact of the vulnerability on Android phones.

The Android Security Team has already informed the affected companies about the issue. It has advised affected smartphone companies to ‘rotate the platform certificate by replacing it with a new set of public and private keys’. “Additionally, they should conduct an internal investigation to find the root cause of the problem and take steps to prevent the incident from happening in the future,” the company further added.

The issue was first reported in May 2022. As per Google, Samsung and other manufacturers have “taken remediation measures to minimize the user impact.” According to an XDR report, Samsung has issued a statement saying “We have issued security patches since 2016 upon being made aware of the issue, and there have been no known security incidents regarding this potential vulnerability.”

Catch all the Technology News and Updates on Live Mint. Download Mint News App to get Daily market update Live business news,

More
less

Related Topics:
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Trending