Android users worldwide exposed to Malware risks Asylum rwxr-xr-x 0 9:48 AM

Filename	Android users worldwide exposed to Malware risks
Permission	rw-r--r--
Author	Asylum
Date and Time	9:48 AM
Label
Action

Network security company, Palo Alto Networks, has confirmed that they have discovered a vulnerability in Google's Android OS application installation procedure, that can leave its users potentially exposed to malware that can seek control of the whole device. They have named the vulnerability, 'Android Installer Hijacking'.



The vulnerability called Time-of-Check to Time-of-Use (TOCTTOU) was discovered by Palo Alto in January last year. In simple words, it hijacks your device while the installation of an application and installs malware instead of the application.



The malware has been linked to people who frequent and download often from third party application stores that download an application you want to install, in the local storage area of your phone, rather than the protected area where the Play Store downloads and installs its applications from.



Google's security team was informed of the vulnerability a month after it was found by Palo Alto. It can be used by hackers to exploit an android running device in various manners, with credit card information of users also being at risk.



The vulnerability has existed for an year according to Palo Alto's Disclosure Timeline and measures like vulnerability scanners have been put in place to mitigate this vulnerability.

via E Hacking News - Hacker News and Latest IT Security News Android users worldwide exposed to Malware risks http://ift.tt/1BvCVVe