Category: Google|Jun 13, 2019 | Author: Admin

Google confirms - brand new Android phones were delivered with back doors

Share on

Here's the explanation of how it could happen.

Here's the explanation of how it could happen.

Hackers managed in 2017 to install an advanced backdoor in Android devices before the phones left the manufacturers' factories. It confirms Google in a blog post.

There is the talk of Triada - a back door that Kaspersky mentioned already in 2016. The security company called Triada "one of the most advanced mobile trojans" they had ever encountered.

The purpose of Triada is to install apps that can send spam and display advertisements on the victim's phone. By breaking past security mechanisms in the Android system, the Trojan can tamper with any installed Android apps.

Confirms Triada attacks
It was in July 2017 that the security company Dr. Web discovered that the Triada Trojan was built into the firmware of a number of Android devices. However, Google has been silent about the serious security shortage but has now confirmed Dr. Web's information.

However, Google does not mention which mobile manufacturers are affected by the Triada issue. The company, on the other hand, states that the attack was carried out by a manufacturer-partner just before the final firmware verification was completed.

Here's Google's explanation

"Triada infects the image files from the device system through a third party during the manufacturing process. Sometimes, manufacturers include features that are not part of the Android Open Source Project, such as face unlocking. The manufacturer can then cooperate with a third party who can develop the desired function and then send the complete system image to the vendor for development. Based on analyzes, we believe that a supplier named Yehuo or Blazefire infected the returned sewing images with Triada ». writes Google.

Google has later confirmed that they have been working with the relevant mobile manufacturers to launch so-called OTA (Over The Air) updates that seal the back door. How many phones ended up being affected by the damage is still an unanswered question. According to the Dr. Web report of 2017, the middle-class phones were Leagoo M5 Plus, Leagoo M8, Nomu S10, and Nomu S20 among the infected phones.

Sponsored Ads:

Comments:


Just Don't Ask Nintendo About 'Switch 2'

Category: General|Jun 17, 2024 | Author: Admin

Adobe to adapt terms of service on gen AI training after customer backlash

Category: IT|Jun 16, 2024 | Author: Admin

Microsoft delivers a light Patch Tuesday for June

Category: Microsoft|Jun 15, 2024 | Author: Admin

Ending Android after 14 years

Category: Google|Jun 14, 2024 | Author: Admin

Apple pays nothing

Category: Apple|Jun 13, 2024 | Author: Admin

Netgear WNR614 flaws allow device takeover, no fix available

Category: IT|Jun 12, 2024 | Author: Admin

Malicious VSCode extensions with millions of installs discovered

Category: Microsoft|Jun 11, 2024 | Author: Admin

Brave says May 2024 was its biggest growth month ever

Category: IT|Jun 10, 2024 | Author: Admin

The speedometer can disappear - now in crisis Volvo is updating over 70,000 cars

Category: IT|Jun 9, 2024 | Author: Admin

LastPass says 12-hour outage caused by bad Chrome extension update

Category: IT|Jun 8, 2024 | Author: Admin

Netflix is ‚Äč‚Äčtesting big changes

Category: General|Jun 7, 2024 | Author: Admin

Launcher for macOS and Linux

Category: IT|Jun 6, 2024 | Author: Admin

“Microsoft tracks children”

Category: Microsoft|Jun 5, 2024 | Author: Admin

Microsoft Edge reaches its all-time new high of 13.14% in the desktop browser market

Category: IT|Jun 4, 2024 | Author: Admin

Google warns Chrome users: Adblock may disappear

Category: Google|Jun 3, 2024 | Author: Admin
more