Android issue allows attackers to capture screen and record audio on 77% of all devices

Google | Nov 25, 2017 | Master3395

Most of the Android devices (running Lolipop, Marshmallow, and Nougat) are exposed to an attack that exploits the MediaProjection service to capture the user’s screen and record system audio. By exploiting this issue, the attacker can simply fool a user into giving the proper rights to a malicious app.

Google launched the MediaProjection service to the Android Framework in Android 5.0 to give developers the capability to capture screen contents and record system audio. Before Android 5.0, developers required their apps to run with root privileges in order to use system protected permissions to get screen contents.

A report by MWR Labs describes:
To use the MediaProjection service, an application would simply have to request access to this system Service via an Intent. Access to this system Service is granted by displaying a SystemUI pop-up that warns the user that the requesting application would like to capture the user’s screen.

The main issue with MediaProjection service is that it is not reliant on permission, which makes it difficult to discover if an application is going to make use of the service.

This issue has been fixed in Android 8 Oreo only, users running Lollipop, Marshmallow or Nougat remain at risk. The only true fix at the moment is to upgrade to Oreo.

Keywords: Google, android, vulnerability

Author: Master3395


comments powered by Disqus

Page 1 of 355  >  >>

The countdown has started for Windows 7


Jan 17, 2019 | Category: Microsoft | Comments

Microsoft will stop free support by 2020.

It has been known for a long time that the official support for Windows 7 is nearing the end. January 14, 2020, is the date, then Microsoft will no longer provide free support to users of this OS and security updates will stop. You will still be able to use Windows 7, but in many ways, you will be left to yourself, at your own risk.

read more…

You can connect this thin screen to almost anything


Jan 16, 2019 | Category: General | Comments

The Lapscreen is almost a perfect traveling companion.

More and more devices use the USB C standard, and now there is a lot of new enhancement that uses the technology.

read more…

OnePlus 7 image leaked - where in the day is the camera?


Jan 15, 2019 | Category: General | Comments

Frameless and no holes in the screen.

OnePlus 6T has only been a few months in the store shelves, but a picture that has appeared on the web is bouncing up the speculation about the next flagship.

read more…

Page 1 of 355  >  >>