Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
New Android Malware Strain Sneaks Cookies from Facebook
Newest First  |  Oldest First  |  Threaded View
lancop
50%
50%
lancop,
User Rank: Moderator
3/13/2020 | 12:13:44 PM
re: "planted in the device firmware"
Interesting statement further down in the article: "This type of malware, they say, is planted in the device firmware before it's purchased."

I would imagine that most people buy their smartphones from their mobile phone carrier, and the carrier's retail phone stores have the capability of flashing a phone's firmware before it is purchased. Is there any proof that this has happened with strains of Android malware at the major carrier retail level?

Other people buy their phones in the used/rooted aftermarket, where the vendor has the opportunity to flash the smartphone's firmware with whatever they want. I would guess that there might be evidence that this has been happening to some people. Are there any published security citations about actual documented cases?

The other infection vector mentioned is the universal "vulnerabilities in the operating system" catchall, so I interpret this as the usual cast of exploitable security holes that can be exploited via email attachements, browser drivebys, rogue applications, bad url links, etc. What Android endpoint security suite precautions should Android smartphone users be installing, and how much of a performance hit can they expect from running an endpoint security suite on a typical Android smartphone? Any articles on Dark Reading or elsewhere that we should be reading?


COVID-19: Latest Security News & Commentary
Dark Reading Staff 5/22/2020
How an Industry Consortium Can Reinvent Security Solution Testing
Henry Harrison, Co-founder & Chief Technology Officer, Garrison,  5/21/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
How Cybersecurity Incident Response Programs Work (and Why Some Don't)
This Tech Digest takes a look at the vital role cybersecurity incident response (IR) plays in managing cyber-risk within organizations. Download the Tech Digest today to find out how well-planned IR programs can detect intrusions, contain breaches, and help an organization restore normal operations.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-13438
PUBLISHED: 2020-05-24
ffjpeg through 2020-02-24 has an invalid read in jfif_encode in jfif.c.
CVE-2020-13439
PUBLISHED: 2020-05-24
ffjpeg through 2020-02-24 has a heap-based buffer over-read in jfif_decode in jfif.c.
CVE-2020-13440
PUBLISHED: 2020-05-24
ffjpeg through 2020-02-24 has an invalid write in bmp_load in bmp.c.
CVE-2020-13433
PUBLISHED: 2020-05-24
Jason2605 AdminPanel 4.0 allows SQL Injection via the editPlayer.php hidden parameter.
CVE-2020-13434
PUBLISHED: 2020-05-24
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.