中国にて初めてのケースが発生。
アンドロイドも安心して使えないか・・・
http://www.bbc.co.uk/news/technology-23431281
Hackers use Android 'master key' exploit in China
A security firm says it has identified the first known malicious use of Android's "master key" vulnerability.
The bug - which was first publicised earlier this month - allows attackers to install code on to phones running Google's mobile operating system and then take control of them.
Symantec said its researchers had found two apps distributed in China that had been infected using the exploit.
Google has already taken moves to tackle the problem.
A fortnight ago it released a patch to manufacturers, but it will not have been sent to all handset owners yet.
Google also scans its own Play marketplace for the exploit, but this will not protect consumers who download software from other stores.
Premium texts
The vulnerability was first reported by security research firm BlueBox on 3 July.
All Android apps contain an encrypted signature that the operating system uses to check the program is legitimate and has not been tampered with.
But BlueBox said it had found a way to make changes to an app's code without affecting the signature.
It warned the technique could be used to install a Trojan to read any data on a device, harvest passwords, record phone calls, take photos and carry out other functions.
According to Symantec, hackers have now exploited the flaw to install malware called Android.Skullkey, which steals data from compromised phones, monitors texts received and written on the handset, and also sends its own SMS messages to premium numbers.
【このカテゴリーの最新記事】
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image
-
no image