Skip to main content

CERT-In issues advisory for Android users, says those not on latest version are at risk of being spied on

The Computer Emergency Response Team -India (CERT-In) has issued an advisory for Android users in the country. The body under the Ministry of Electronics and Information Technology has stated that everyone who is using devices that are not running the latest version of the Android operating system (Android 10) are at risk of being spied on.

Google Pixel 3a XL

Stating that systems affected are Android OS versions prior to 10.0, CERT-In has said:

An Elevation of Privilege vulnerability named ‘StrandHogg 2.0’ has been reported in the Google Android due to confused deputy flaw in the ‘startActivities()’ of ‘ActivityStartController.java’ which allow the attacker to hijack any app on an infected device. A local attacker could exploit this vulnerability by installing a malicious app on a device which can hide behind legitimate apps.

According to CERT-In, successful exploitation of the vulnerability could allow attackers to gain access to a victim's login credentials, SMS, photos, and phone conversations.

It mentions that the vulnerability could also allow attackers to spy on the user through the phone's microphone and camera and also track GPS location details.

CERT advises Android users to install updates and patches that have been recently issued. It has urged users to not download and install applications from untrusted sources and ensure to turn off the 'Unknown Source' option in the Security-Settings page.

Last month, CERT-In had issued a caution saying a mobile banking malware called "EventBot", which steals personal financial information, may affect Android phone users in India. According to the cyber-security agency, the Trojan virus may, "masquerade as a legitimate application such as Microsoft Word, Adobe flash and others using third-party application downloading sites to infiltrate into victim device."



Udimi - Buy Solo Ads from Firstpost Tech Latest News https://ift.tt/3dzGDsp
via IFTTT

Comments

Popular posts from this blog

9 VCs in Madrid and Barcelona discuss the COVID-19 era and look to the future

Spain’s startup ecosystem has two main hubs: Madrid and Barcelona. Most observers place Barcelona first and Madrid second, but the gap appears to close every year. Barcelona has benefitted from attracting expats in search of sun, beach and lifestyle who tend to produce more internationally minded startups. Madrid’s startups have predominantly been Spain or Latin America-focused, but have become increasingly international in nature. Although not part of this survey, we expect Valencia to join next year, as city authorities have been going all-out to attract entrepreneurs and investors. The overall Spanish ecosystem is generally less mature than those in the U.K., France, Sweden and Germany, but it has been improving at a fast clip. More recently, entrepreneurs in Spain have moved away from emulating success in pursuit of innovative technologies. Following the financial crisis, the Spanish government supported the creation of startups with the launch of FOND-ICO GLOBAL, a €1.5 billi...

Emulating USB Dongle – Introducing HASP Dongle Emulator Software

Information Technology Blog - - Emulating USB Dongle – Introducing HASP Dongle Emulator Software - Information Technology Blog Over the years the methods used by software developers and producers to limit the amount of users to a specific number in a licensing agreement have become more complex.  The aim of copy protection is to protect the intellectual rights and financial investment of the individual developers and manufacturing companies.   A way of getting around this protection is to reproduce the media through which you can deliver the application to other users,  meaning that the software can be replicated far in excess of that specified in the license. One of the most common methods has been to use hardware keys or dongles which will enable the user to activate an application, unlocking its full functionality without using a device.  In addition, it offers good protection against attempts to pirate the software. In this article, we will look at th...

Advantages and Disadvantages of using Vouchers in eCommerce

Information Technology Blog - - Advantages and Disadvantages of using Vouchers in eCommerce - Information Technology Blog To decide whether vouchers and coupons are the right tool to add to your online marketing strategy, it is essential that you consider the benefit and the cost of using coupons. In this article, we will use Gtech coupon marketing strategy as an example a successful coupon strategy.  Also check out these great books on coupon codes for ecommerce . Advantages of Using Coupons Increase Sales This is the obvious benefit. Coupons serve to increase sales especially for high ticket items such as luxury gadgets. Gtech discount codes is a good example as Gtech quality is reflected on the price of both the Gtech eBike and Gtech AirRam. In order to boost sales, the company releases 10% off offers certain times of the year when online sales would normally be low. Enlarge Email List Acquiring a customer can be expensive in terms of advertising and marketing. If yo...