Irish Sun
27 May 2017, 07:25 GMT+10
CALIFORNIA, U.S. - Researchers from UC Santa Barbara and Georgia Tech have discovered a new type of Android attack, called Cloak and Dagger.
A report noted that the Cloak and Dagger takes advantage of the Android UI and they need just two permissions to get rolling.
According to the researchers, the Cloak and Dagger operates secretly on the smartphone, allowing hackers to log keystrokes or install malicious softwares without alarming the owner.
Researchers pointed out that since Android OS automatically grants these permissions for any app from the Play Store, this would mean that once a hacker is in the system, it is possible to trick the user into granting the a11y permission.
They noted that the app hides a layer of malicious activity under seemingly harmless visuals and lures users to click on unseen buttons and keystroke loggers.
In their report, the researchers noted, "To make things worse, we noticed that the accessibility app can inject the events, unlock the phone, and interact with any other app while the phone screen remains off. That is, an attacker can perform a series of malicious operations with the screen completely off and, at the end, it can lock the phone back, leaving the user completely in the dark."
Further, one of the researchers, Yanick Fratantonio, said, "We've been in close touch with the researchers and, as always, we appreciate their efforts to help keep our users safer. We have updated Google Play Protect - our security services on all Android devices with Google Play - to detect and prevent the installation of these apps. Prior to this report, we had already built new security protections into Android O that will further strengthen our protection from these issues, moving forward."
Get a daily dose of Irish Sun news through our daily email, its complimentary and keeps you fully up to date with world and business news as well.
Publish news of your business, community or sports group, personnel appointments, major event and more by submitting a news release to Irish Sun.
More InformationNEW YORK CITY, New York: After reporting record revenues in the fourth-quarter of 2022, US airlines expect strong travel demand ...
MANILA, Philippines: After a Filipina domestic worker was killed and dumped in the desert in the oil-rich emirate of Kuwait, ...
LONG BEACH, California: Long Beach, California-based Rocket Lab has launched its first mission from the United States, as part of ...
Israel was behind Sunday morning's drone strike on an Iranian munitions facility; the Wall Street Journal has reported, citing American ...
LONDON, England: Of the 14 main battle tanks and additional artillery support it will send to Ukraine, Britain hopes its ...
LONDON, England: Insurance broker Aon has estimated that natural disasters caused global economic losses worth $313 billion in 2022.It added ...
LONDON, England: Flybe, a British regional airline, abruptly closed operations on January 28. The airline offered flight to Belfast, Birmingham ...
LONDON, England: Of the 14 main battle tanks and additional artillery support it will send to Ukraine, Britain hopes its ...
DUBLIN, Ireland: Ireland's consumer energy prices dropped 15 percent last week, the result of warm weather and full stocks of ...
WASHINGTON D.C.: The US State Department has said that in the latest fiscal year, US military equipment exported to foreign ...
WASHINGTON, D.C.: Finland and Sweden are prepared to join the NATO alliance, the U.S. State Department announced this week.The move ...
DUBLIN, Ireland: The European Commission is taking Ireland to court, claiming that Ireland has not protected the country's lakes, rivers, ...