First Android-Rooting Trojan With Code Injection Ability Found On Google Play Store

[vorticalbox]

42 minutes ago, hey_yo_ said:

I know rooting/jailbreaking a company-issued phone/tablet is against company rules and can become grounds for termination of employment. 

sorry for trying to protect company data.....

[sof006]

Incoming Google security patch plus update to Google play store I imagine. 

[vorticalbox]

25 minutes ago, sof006 said:

Incoming Google security patch plus update to Google play store I imagine. 

well a lot of apps, such as games, update outside of google play so it would be quite a change to terms if they blocked this feature. 

[DnFx91]

2 hours ago, vorticalbox said:

not true, a remote exploit requires no user interaction this not proportional to intelligence.

no user interaction, other than being stupid enough to download nefarious apps you mean ?

[SpaceGhostC2C]

7 hours ago, samiscool51 said:

breaks warranty

It doesn't. Manufacturers may try to tell you so, but they legally can't refuse to honor your hardware's warranty based on rooting.

 

https://motherboard.vice.com/en_us/article/jailbreaking-iphone-rooting-android-does-not-void-warranty

 

[sof006]

47 minutes ago, vorticalbox said:

well a lot of apps, such as games, update outside of google play so it would be quite a change to terms if they blocked this feature. 

Not block, just become more strict when it comes to updating any apps.

[vorticalbox]

4 hours ago, DnFx91 said:

no user interaction, other than being stupid enough to download nefarious apps you mean ?

In regard to the topic, that app was free any sort of malware but then updated after the fact, In this case any application on the market could do this. Every. Single. One. Again no link to user intelligence and in regard to my reply do you understand what the work "remote" means? 

 

Much like the NSA smb exploit required no user interaction, again no link to user intelligence.

[BuckGup]

7 hours ago, DnFx91 said:

such a stupid argument, the vulnerability of any device is proportional to the intelligence of it's user.

I don't think so. You can't pick up an iphone and drop a payload on it in less than 3 minutes. You also can't break the passcode. Well Macafee's hacking team could but they have huge budgets and you don't. Android security flat out sucks and there is no denying it.

[mynameisjuan]

5 minutes ago, BuckGup said:

I don't think so. You can't pick up an iphone and drop a payload on it in less than 3 minutes. You also can't break the passcode. Well Macafee's hacking team could but they have huge budgets and you don't. Android security flat out sucks and there is no denying it.

You cant break security on android either, especially as easy as you make it sound. This is androids first rooting trojan while iOS had its first trojan years ago. Both OSes are vulnerable. I hate bullshit iOS bias that its so much more secure. 

[SpaceGhostC2C]

8 minutes ago, vorticalbox said:

In regard to the topic, that app was free any sort of malware but then updated after the fact

After the fact that you install it. The way you are explaining, there is no way to get infected without actively downloading an app first, which later brings the malicious code.

You cannot get infected without installing it. So you may not need to be stupid, but they need to convince you to install the "clean app" somehow or there is no way in for them.

[Droidbot]

6 hours ago, hey_yo_ said:

Which means corporations who deploy Android phones to their employees are pretty much screwed once one of their devices gets infected. I know rooting/jailbreaking a company-issued phone/tablet is against company rules and can become grounds for termination of employment. 

however, companies deploy phones with Samsung Knox or other services on it - running a custom boot image to root? tripped. flashed a custom recovery? tripped. flashed a custom kernel? tripped. knox container on device detects root? tripped.

etc, etc. once fuse is tripped device locks down all data in knox containers. 

[BuckGup]

5 minutes ago, mynameisjuan said:

You cant break security on android either, especially as easy as you make it sound. This is androids first rooting trojan while iOS had its first trojan years ago. Both OSes are vulnerable. I hate bullshit iOS bias that its so much more secure. 

You can though. The fact that you can install whatever you want on an android is bad in terms of security. Sure if you jailbreak an iPhone it is susceptible to malware but jailbreaking an iPhone is only getting harder and there isn't even a full jailbreak out yet. Only tethered ones so it goes away once you restart. On the other hand android literally has malware on the app store

 

https://null-byte.wonderhowto.com/how-to/hacks-mr-robot-spy-anyones-smartphone-activity-0163905/

 

[Droidbot]

2 minutes ago, BuckGup said:

-snip-

with the play store being so much bigger than the app store, there is the possibility for malware. 

 

but if you download apps that are common, like snapchat/whatsapp, etc, you'll be fine. 

 

there is definitely massive improvements that google needs to make to Play Protect however

 

and that's not going to work - probably detected by Play Protect, and nobody installs random APKs like it's nothing

[BuckGup]

4 minutes ago, Droidbot said:

with the play store being so much bigger than the app store, there is the possibility for malware. 

 

but if you download apps that are common, like snapchat/whatsapp, etc, you'll be fine. 

 

there is definitely massive improvements that google needs to make to Play Protect however

 

and that's not going to work - probably detected by Play Protect, and nobody installs random APKs like it's nothing

I wouldn't call the app store small though. Most people just see the english version. There are completely different ones for China and such. Still google could improve some things

[mynameisjuan]

2 minutes ago, BuckGup said:

You can though. The fact that you can install whatever you want on an android is bad in terms of security. Sure if you jailbreak an iPhone it is susceptible to malware but jailbreaking an iPhone is only getting harder and there isn't even a full jailbreak out yet. Only tethered ones so it goes away once you restart. On the other hand android literally has malware on the app store

 

You can install whatever you want but that is up to the user. If they want to install from some sketchy site and get infected then its their fault. Same applies to Windows, OSX and linux. So you must assume those are incredibly unsecure as well? Most devices dont have install from outside sources enabled and need interaction to enable them. This is needed because some versions of android are not allow play services so they need to install from non-play stores, which IMO is bullshit but still, android is secure.

 

And dont pull the android has malware on the play store card. iOS had 4-5 instances of major trojans over the past 2-3 years and malware as well that made it through. This is a one off of an app circumventing the detection process which hasnt been done and now will be patched in. God I hate apple bias

[BuckGup]

Just now, mynameisjuan said:

You can install whatever you want but that is up to the user. If they want to install from some sketchy site and get infected then its their fault. Same applies to Windows, OSX and linux. So you must assume those are incredibly unsecure as well? Most devices dont have install from outside sources enabled and need interaction to enable them. This is needed because some versions of android are not allow play services so they need to install from non-play stores, which IMO is bullshit but still, android is secure.

 

And dont pull the android has malware on the play store card. iOS had 4-5 instances of major trojans over the past 2-3 years and malware as well that made it through. This is a one off of an app circumventing the detection process which hasnt been done and now will be patched in. God I hate apple bias

Ever heard of stage fright? It's not bias. Apple has a pretty in depth process of looking at the code. They rejected my app which was a scale that used 3D touch to determine the weight of an object because it promoted things being put on the screen.

[AnonymousGuy]

2 hours ago, BuckGup said:

Ever heard of stage fright? It's not bias. Apple has a pretty in depth process of looking at the code. They rejected my app which was a scale that used 3D touch to determine the weight of an object because it promoted things being put on the screen.

Was it accurate?

[BuckGup]

26 minutes ago, AnonymousGuy said:

Was it accurate?

Yeah I think 0.001 grams or even more. It was crazy precise

[Doobeedoo]

Well that sucks. They definitely need to monitor minor updates too not just uploaded app on store. etc

[samiscool51]

13 hours ago, SpaceGhostC2C said:

It doesn't. Manufacturers may try to tell you so, but they legally can't refuse to honor your hardware's warranty based on rooting.

 

https://motherboard.vice.com/en_us/article/jailbreaking-iphone-rooting-android-does-not-void-warranty

 

oh... interesting....

thanks for telling me!