Irish Sun
27 May 2017, 07:25 GMT+10
CALIFORNIA, U.S. - Researchers from UC Santa Barbara and Georgia Tech have discovered a new type of Android attack, called Cloak and Dagger.
A report noted that the Cloak and Dagger takes advantage of the Android UI and they need just two permissions to get rolling.
According to the researchers, the Cloak and Dagger operates secretly on the smartphone, allowing hackers to log keystrokes or install malicious softwares without alarming the owner.
Researchers pointed out that since Android OS automatically grants these permissions for any app from the Play Store, this would mean that once a hacker is in the system, it is possible to trick the user into granting the a11y permission.
They noted that the app hides a layer of malicious activity under seemingly harmless visuals and lures users to click on unseen buttons and keystroke loggers.
In their report, the researchers noted, "To make things worse, we noticed that the accessibility app can inject the events, unlock the phone, and interact with any other app while the phone screen remains off. That is, an attacker can perform a series of malicious operations with the screen completely off and, at the end, it can lock the phone back, leaving the user completely in the dark."
Further, one of the researchers, Yanick Fratantonio, said, "We've been in close touch with the researchers and, as always, we appreciate their efforts to help keep our users safer. We have updated Google Play Protect - our security services on all Android devices with Google Play - to detect and prevent the installation of these apps. Prior to this report, we had already built new security protections into Android O that will further strengthen our protection from these issues, moving forward."
Get a daily dose of Irish Sun news through our daily email, its complimentary and keeps you fully up to date with world and business news as well.
Publish news of your business, community or sports group, personnel appointments, major event and more by submitting a news release to Irish Sun.
More InformationSACRAMENTO, California: Sixteen migrants from Venezuela and Colombia, who had entered the United States through Texas, were transported to California ...
GRAND ISLE STATE PARK, Louisiana: Almost two years after Hurricane Ida struck the barrier island and destroyed most of its ...
YANGON, Myanmar - A regime court sentenced to death five people detained for their alleged involvement in a deadly August ...
HARTFORD, Connecticut: Following a state Senate debate and vote to approve Connecticut's most comprehensive gun legislation since the laws put ...
SPENCER, Massachusetts: Spencer, Massachusetts Fire Chief Robert Parsons has said that a June 2 fire that burned down a 160-year-old ...
MOSCOW, Russia: Journalists from countries that are "unfriendly" to Russia will be banned from covering this year's St. Petersburg International ...
PARIS, France: European plane manufacturer Airbus is reported to be close to a record agreement to sell 500 narrow-body jets ...
DUBLIN, Ireland: Officials in Ireland have reported that 15,589 Ukrainian students were enrolled in schools last month.Throughout Europe, Ireland continues ...
MOSCOW, Russia: Journalists from countries that are "unfriendly" to Russia will be banned from covering this year's St. Petersburg International ...
WASHINGTON D.C.: The Pentagon said this week that the satellite communications service started by billionaire Elon Musk, SpaceX's Starlink, has ...
BRUSSELS, Belgium: EU tech chief Margrethe Vestager has said that a draft code of conduct on artificial intelligence (AI) could ...
MOSCOW, Russia: After a turbulent 15 months of store closures and declining demand, Russian designers and brands are assisting the ...