Home

Nov 25, 2017

Android issue allows attackers to capture screen and record audio on 77% of all devices

authorarticle: Master3395
Android-Vulnerability.jpg
video: 
youtube: 
sources: 
keywords: Google, android, vulnerability
Category: Google
Posted by: Admin

Most of the Android devices (running Lolipop, Marshmallow, and Nougat) are exposed to an attack that exploits the MediaProjection service to capture the user’s screen and record system audio. By exploiting this issue, the attacker can simply fool a user into giving the proper rights to a malicious app.

Most of the Android devices (running Lolipop, Marshmallow, and Nougat) are exposed to an attack that exploits the MediaProjection service to capture the user’s screen and record system audio. By exploiting this issue, the attacker can simply fool a user into giving the proper rights to a malicious app.

Google launched the MediaProjection service to the Android Framework in Android 5.0 to give developers the capability to capture screen contents and record system audio. Before Android 5.0, developers required their apps to run with root privileges in order to use system protected permissions to get screen contents.

A report by MWR Labs describes:
To use the MediaProjection service, an application would simply have to request access to this system Service via an Intent. Access to this system Service is granted by displaying a SystemUI pop-up that warns the user that the requesting application would like to capture the user’s screen.

The main issue with MediaProjection service is that it is not reliant on permission, which makes it difficult to discover if an application is going to make use of the service.

This issue has been fixed in Android 8 Oreo only, users running Lollipop, Marshmallow or Nougat remain at risk. The only true fix at the moment is to upgrade to Oreo.

authorarticle: Master3395
Android-Vulnerability.jpg
video: 
youtube: 
sources: 
keywords: Google, android, vulnerability

Comments:

comments powered by Disqus

Return

Sponsored Ads:

Discord

Page 1 of 538  >  >>

Launches iPhone video app that does the one thing Apple denies you

apple.webp

Jul 7, 2020 | Category: Apple | Comments

This is the first to do this.

read more…

Microsoft's surface devices are now receiving the windows 10 May 2020 update

microsoft.jpg

Jul 6, 2020 | Category: General | Comments

Microsoft expects the update to be sent out to affected devices within a few weeks.

read more…

Who needs windows 10 pro: 5 reasons to upgrade

microsoft.jpg

Jul 5, 2020 | Category: Microsoft | Comments

Most of you should be happy with Windows 10 Home. But certain features make the upgrade to Windows 10 Pro worthwhile.

read more…

Page 1 of 538  >  >>