Zimperium recently released information about an Android vulnerability which makes it possible for an attacker to take over your smartphone and steal your information.<\/p>\n
The worst part of the vulnerability is that the attacker only needs to know your mobile number.<\/p>\n
The vulnerability, named Stagefright, is a media library that processes popular media formats.<\/p>\n
\u201cSince media processing is often time-sensitive, the library is implemented in native code (C++) that is more prone to memory corruption than memory-safe languages like Java,\u201d said Zimperium.<\/p>\n
The problems in Stagefright code expose 95% of Android devices, which is close to a billion phones.<\/p>\n
Zimperium’s research found multiple remote code execution vulnerabilities that can be exploited using various methods.<\/p>\n
The worst attacks require no user interaction. This means that an Android phone can be attacked by only knowing a user\u2019s number, using remotely-executable code via a specially crafted media file delivered via MMS.<\/p>\n
\u201cA fully weaponized attack could even delete the message before you see it. You will only see the notification.”<\/p>\n
\u201cUnlike spear-phishing, where the victim needs to open a PDF file or a link sent by the attacker, this vulnerability can be triggered while you sleep.”<\/p>\n
Android and derivative devices after and including version 2.2 are vulnerable. Devices running Android versions prior to Jelly Bean are at the worst risk due to inadequate exploit mitigations.<\/p>\n
Full details of the vulnerability are available on the Zimperium website.<\/a><\/strong><\/em><\/p>\n \u201cFind my iPad\u201d tracks down 5 robbers<\/strong><\/a><\/p>\n This is how easy it is for criminals to steal your identity<\/strong><\/a><\/p>\nMore security news<\/h3>\n