Accessibility clickjacking: The new Android torment – Pplware

It is a recurring theme to talk about the attacks on Android but in fact the operating system from Google is a school for criminals.

Again, we have to return to the security theme in Android due to a new malware that hit the system in recent days, the Accessibility clickjacking .

and Android security problems …

a little over a month we gave Android.Bankosy the account, malware strain that was developed to address the security methods of banking services.

More recently met another security problem, was called Mazar Android BOT, propagated with a simple SMS and was so serious criminals who could hear the conversations and also erased all user data. All this and more confirms what has been said about the Android “Every 18/2 appears malware for Android.”

Accessibility clickjacking – 500 million in impact device

Thanks to Skycure security company, recently we learn that there is a malware that infected more than 500 million Android devices and allowed hackers access to sensitive user data, such as banking information, passwords, emails, text messages, and other device content

Android Malware -. What devices are exposed

the information is available on the site? Skycure and tells us that the malware we are dealing affect Android versions ranging from 2.2. Froyo and 4.4, KitKat. How to calculate, there are millions of devices across the world with these versions.

According to the company, all of which have devices with versions above these may be safe this malware. In principle there will be no cause for concern

But how does this malware

The virus has a way to operate very simple.? This propagates through a scheme that starts with ads advertising, which can be a banner or a link, and that lead the user to click. Then opens a web page so that a priori seems safe. This page, however, is malicious having code able to access the device data.

In addition to access to the data, the existing code in the page can infiltrate the operating system managing administrator privileges and this changes . security unlock the smartphone or tablet that gives remote access to criminal

you can see in the video is an excerpt from the modus operandi to see how it all happens:

Basically, and as in many other previous scenarios, the criminal creates a sham so that the user is conducted carelessly into a trap. Without giving account does exactly what the hacker want and gives access to the device, in the case presented in the video feature was a game and a few clicks on the screen.

The security company, as always, strongly suggests that have the latest version of Android installed (if possible), to take attention to the links that can be opened, what kind of applications are installed when the machine has permissions to install out of the Play Store and never rely on programs with unknown origin or little recommended.

Skycure