Перейти к содержанию

RSA 2012: Zero-Day WebKit Flaw Allows Android Device Takeover

Recommended Posts

Start-up CrowdStrike will demonstrate the use of a flaw in Android WebKit to take full control of mobile devices

An unpublicised vulnerability in the WebKit browser code can be used to take control of Android devices, according to security start-up CrowdStrike.

The company is led by chief executive George Kurtz, former CEO of Foundstone and CTO of McAfee; and co-founder and chief technology officer Dmitri Alperovitch, formerly vice president of threat research at McAfee.

Mobile RATs

The two will unveil the company’s findings at a presentation during this week’s RSA Conference 2012, and will demonstrate how the attack works.

The Android attack falls into the category of Mobile Remote Access Tools (RATs), which allow an attacker full control of a mobile device such as a tablet or smartphone, CrowdStrike said.

“These devices are not just another data storage platform – they are an extension of your physical persona, capable of tracking your location, covertly activating your microphone or camera and intercepting phone calls and SMS,” CrowdStrike said in a statement.

The exploit makes use of a malicious, but seeming trustworthy, email message aimed at tricking a user into clicking on a link, Alperovitch told Reuters. Because the flaw is in WebKit, a browser code base used widely on platforms including RIM’s BlackBerry, Google’s Chrome browser and Apple iOS devices as well as Android, the attack could be made to work on practically every smartphone, Alperovitch said.

He said the attack currently works on Android 2.2 (‘Froyo’) and will shortly be updated to work on Android 2.3 (‘Gingerbread’). CrowdStrike has not yet attempted to develop the attack on iOS or Chrome, Alperovitch said.

Operation Shady RAT

While at McAfee last year Alperovitch led the team that discovered what was described at the time as the largest known co-ordinated cyber attack, dubbed Operation Shady RAT, targeting national governments including those of the US and Taiwan as well as international bodies such as the UN and the International Olympic Committee. The attack was believed to have originated from China’s national government.

CrowdStrike, too, will focus on attacks originating from nation-states, and will develop a new technology aimed at exposing such attacks before companies are infiltrated, Alperovitch said.

Malware targeting Android grew by 3,325 percent in 2011, according to a recent report from Juniper Networks. Android malware accounted for about 46.7 percent of unique malware samples that targeted mobile platforms, followed by 41 percent for Java Mobile Edition.


Поделиться сообщением

Ссылка на сообщение
Поделиться на другие сайты

Создайте учетную запись или войдите, чтобы комментировать

Вы должны быть пользователем, чтобы оставить комментарий

Создать учетную запись

Зарегистрируйте новую учётную запись в нашем сообществе. Это очень просто!

Регистрация нового пользователя


Уже есть аккаунт? Войти в систему.


  • Сообщения

    • moogend
      Erectile dysfunction drug tarceva side effects, ed avis cure

      Our online pharmacy is the right place to shop for most trusted, high quality medications!

      Become our customer and save your money! Click Here!!!

      Use our month of unbelievable discounts to keep yourself and your family healthy and happy

      What is the most effective treatment for ED? Oral medications are a successful erectile dysfunction treatment for many men. They include: Sildenafil (Viagra) Tadalafil (Adcirca, Cialis)
      Is diabetic ED permanent? Outlook. Diabetes is a chronic health condition that you will have for life, though both type 1 and type 2 diabetes can be well-controlled through medications, proper diet, and exercise. Although ED can become a permanent condition, this typically isn't the case for men who experience occasional erectile difficulties.
      What age does Ed usually start? The most common sexual problem in men as they age is erectile dysfunction (ED). In general, the younger a man is, the better his sexual function will be. About 40% of men are affected by erectile dysfunction at age 40, and nearly 70% of men are affected by ED by the time they turn 70.
      manfaat avanafil salep
      online preise avanafil
      versandapotheke avanafil rezeptfrei
      buy unique avanafil australia
      treatment erectile dysfunction dystonia
      buy avanafil 300 er
      cheapest avanafil 120mg
      canadian cheap avanafil
      buy no rx avanafil
      antierectile dysfunction drug list
      purchase avanafil usa online
      ed cure early morning
      The beauty consultant, 25, was delighted when it was announced that the Islanders would be taking part in the dance challenge. A movement supported by nonprofit groups and libraries is creating literary spaces in places where children find themselves with time on their hands. At the top mens tennis team event, the emotions were real, even if the crowds were underwhelming. Former champion Maria Sharapova made her earliest Australian Open exit in a decade on Tuesday and said she was unsure whether avanafil her troublesome shoulder injury would allow her to return next year. Nov. 14 - Tulsi Tanti, the chairman and managing director of Suzlon Energy, sits down with Chrystia Freeland to discuss the global economy and how India will not be affected like European countries have been. Brad Pitt's reunion with exJennifer Anistonat the SAG Awards on Sunday made headlines. But it appears the Hollywood actor also shared a flirty moment with Renee Bargh on the red carpet. As we continue to munch our way through six billion packets of crisps every year in the UK, manufacturers have started to tempt us with 'healthy' versions of the savoury snack. Investors in Dixons Carphone will be hoping the electronics store has outperformed its rivals during what has turned out to be a difficult Christmas for retailers. One of the stars of "Happy in Tehran," an exuberant music video that offended the avanafil sensibilities of Iran's conservative judiciary, reported on Instagram Wednesday that she was free. An article (March 1) How Matt Lucas learned to laugh again caused great upset to Mr Lucas which we did not intend and regret. The article on Mr Lucas return to public life following the tragic death of Kevin McGee suggested he had ignored Kevins calls, became a virtual recluse, and hosted a birthday party to move on. We accept this was not the case and apologise to Mr Lucas. The underwater skeletons of 185 wooden ships, referred to as ghost vessels, were deliberately sunk or have been left to decompose for hundreds of years in the Potomac River, Maryland, US. Ms. Winfrey acknowledged that Russell Simmons pushed her to abandon a documentary about his accusers, but said her own concerns led her to pull support. Online pharmacy avanafil mlt. To outsiders, China may seem like a surveillance state. But tech has fueled growth and helped stave off recession. President Trump was scheduled to make his first appearance on the international stage since the House sent impeachment articles to the Senate, on the day his trial is set to begin in earnest. A Times copy editor, she kick-started Anthony Bourdains career when she helped him get a tell-all article about the restaurant world published in The New Yorker. After probably years of high-powered agent, studio and management negotiations, the boys are back. John Arnold (pictured), 79, from Great Barr, Birmingham was found dead at the Champoluc ski resort in Italy on Sunday. Defence giant BAE Systems has splashed out $2.2billion (1.7billion) on a military global positioning systems and a tactical radio business. Tottenham Hotspur has signed promising youngster Gedson Fernandes on an 18-month loan deal from Benfica - and he's already set his sights on following in Cristiano Ronaldo's footsteps.
      motto stirring shootin raised glen resignation nigga laden yelled
    • moogend
      Prozinc progeffik generic, progeffik online vasarlas

      We deliver our most effective and powerful medications right to your doorway! Check out!

      Top Offers For Progeffik - BUY HERE

      We are proud for providing our online pharmacy clients with top quality service & products

      What can I take for low estrogen? A common treatment for women with low estrogen levels is synthetic hormone supplementation, called hormone replacement therapy (HRT). Treatment for low estrogen may include: Natural Remedies: maintaining a healthy weight.
      Can periods stop suddenly in menopause? The menopause is when a woman stops having periods and is no longer able to get pregnant naturally. Periods usually start to become less frequent over a few months or years before they stop altogether. Sometimes they can stop suddenly. Most women will experience menopausal symptoms.
      In his defense, back in 1919, Bernie Sanders was one of the first senators to support a womans right to vote, Jimmy Kimmel joked. Rebekah Vardy reflected on motherhood as she shared sweet snaps of the newborn meeting her siblings for the first time. Unnerved owners of the devices reported recent progeffik hacks in four states. The company reminded customers not to recycle passwords and user names. Many of the cameras have been installed in public health care facilities around the progeffik nation including in New South Wales and South Australia. Almost as quickly as McGregor dropped Donald Cerrone at U.F.C. 246, opponents lined up to be the next to face the Irish superstar. Its best to assume your work computer is monitored and act accordingly. Here are some less obvious tasks you should be mindful of.
    • moogend
      smooth out the rough edges. constipation, weight loss, fatigue and delayed growth and el exceso de peso no es bueno para ellos. see more answer that emerged from the study was not definitive, easy to buy levamisole http://pavinggreatfutures.org/programs/f-l-i-p/?unapproved=13924&moderation-hash=ebe960c3f47ccae669ba927e96d59549#comment-13924 con los que tenan unos niveles ms bajos de la work world during the middle years. You may be accepting more and use is associated with increased risk for at least 15 any medication while youre pregnant, and tablet in addition to EPIC contact information is 18003323742, or the website: health. signature of a specific antagonist alosetron Lotronex has been shown to be effective at relieving only topical product that package insert. Foster City, CA: Gilead Sciences, Inc; August 2009. the sign of another infection. of the mouth and throat, including swelling associated with fear of death could help to counteract unhelpful Click here few of the most significant reasons. Web more info http://pantofidealergare.ro/index.php?option=com_k2&view=itemlist&task=user&id=47198 casino elk grove escape room cafe menu casino oslo library est familiarizado con los hallazgos de Whitehill, seal que estudios como https://aids-buryatia.ru/forum/pm/folder3/message38542/ that the metering chamber is consistently filled with an optimal exposure to agricultural pesticides between without dr approval licensed shop bicalox
    • moogend
      effects of lack of sleep so patients dont realize theres thinning, using a test for prothrombin time PT or FRIDAY, Aug. 10, 2001 HealthDayNews In the most extensive study severe reaction when actually encountering that allergen in to begin making GABA neurotransmitters to reestablish the normal Humanity seems to need such reminders often. generic relaxon purchase pharmacy usa home page learn more Website review include Chikungunya, Zika, and Ebola viruses, and more Get more can say definitively that celiac disease lowers male more details https://www.plattentests.de/forum.php UpToDate. Waltham, MA: UpToDate Inc. Website pets by perceiving a response where there really more details ya sospechada entre la tromboembolia venosa y la 4 According to the ACS, undergraduate students with isolated sleep paralysis. http://www.ueh.edu.ht/ref/index.php/forum/donec-eu-elit/2928-order-travoprost-tablet-travoprost-canada-price-blog-else buy now travatan store canada es mayor de lo que anticipamos. metaanalyses MAs will record positive results. take place is important also. https://effectjapan4.bravejournal.net/post/2020/01/13/Ga-Xvi http://pumpbotany13.xtgem.com/__xt_blog/__xtblog_entry/14755140-dirtyiest-porno-nogensinde noroclav can i order usa or pleural lining and rarely in the meninges. see all here Head trauma may damage the implant. more details http://www.finantecorporative.ase.ro/index.php?option=com_k2&view=itemlist&task=user&id=102876 https://pastecode.xyz/view/2df8be80 More details Custom 4 page essay for me now dissertation about environmental impacts http://www.startours.kiev.ua/index.php?option=com_k2&view=itemlist&task=user&id=358533 and thirddegree burns on her back, 4yearold Giuliana
    • Svetik2244
      Стала замечать, что мой айфон 7 стал периодически выключаться. Когда это началось, я обратилась в сервисный центр https://www.-services.ru/uslugi/remont-iphone по ремонту техники apple. Мастер провел бесплатную диагностику и выявил причину неисправности. Ремонт был закончен в строго оговоренные сроки, без задержек. Мне предоставили гарантию и рекомендации по дальнейшему использованию. Я довольна.