'Quadrooter' Bug Puts Android Devices At Risk

...

Android owners, beware: Security flaws found in Qualcomm processors serving Google's mobile operating system could put your devices at risk.

Researchers at security firm Check Point researchers recently discovered the vulnerabilities, which may affect as many as 900 million devices.

During last week's Def Con security conference in Las Vegas, Check Point's Adam Donenfeld revealed four new privilege escalation exploits—together dubbed "Quadrooter"—which can be used to remotely gain root access to Android handsets. An attacker simply needs to trick a user into installing a malicious app, and the cyberthief gains unfettered access to saved data. The attacker can also change or remove system-level files; delete or add apps; and access the device's screen, camera, or microphone, the security firm said.

Since the vulnerable drivers are pre-installed, they can only be fixed via a patch from distributors or carriers. Those companies, meanwhile, can only push the repair after receiving new driver packs from Qualcomm.

Qualcomm claims to have already fixed all four flaws, and Google said it patched three in an August update; the final debugging will come with the company's next security update, Android Headlines said.

Neither Qualcomm nor Google immediately responded to PCMag's request for comment.

Concerned Android owners can download Check Point's free QuadRooter Scanner app, which, as its name suggests, scans your phone to see if the necessary patches have been downloaded and installed.

Even the most secure devices are at risk, according to Check Point, which provided the following list of affected smartphones:

Qualcomm just last month unveiled its latest mobile processor, the Snapdragon 821, boasting 10 percent better performance than the 820; the latter just recently began showing up in gadgets like the Galaxy S7 and HTC 10.

Categories
APPLICATIONS
0 Comment

Leave a Reply

Captcha image


RELATED BY

  • 5300c769af79e

    Password Management Evaluation Guide for Businesses

    Download Passwords - and the need for effective password management - are at the heart of the rise in costly data breaches.To help businesses address these challenges, various password management solutions are entering the marketplace, each with different capabilities.
  • 5300c769af79e

    Encrypted 'Secret Conversations' Roll Out on Facebook Messenger

    The rollout of Facebook Messenger "secret conversations" is reportedly complete, providing end-to-end encryption and some Snapchat-like features to the 900 million users of the social network's messaging app.In July, Facebook announced that it was testing end-to-end encryption with select users to better support conversations about sensitive topics.
  • 5300c769af79e

    10 Ways Bots Can Improve Your Business Processes

    Businesses use bots to engage with customers, online and via social media, because they're a cost-effective way to respond instantly to simple queries.For example, enterprise software company Unit4 is building bots to improve the efficiency of travel requests, expenses, absences, time recording, and purchasing, for its employees and managers.
  • 5300c769af79e

    Feds to Car Makers: Make Sure You're Ready for Cyberattacks

    Car companies should "identify, protect, detect, respond, and recover" when faced with a cyber-security issue, according to DOT's National Highway Traffic Safety Administration (NHTSA).But automakers need to conduct self-audits and employee training, among other things, NHTSA says.