Google warns stolen Android keys used to sign info-stealing malware
Compromised Android platform certificate keys from device makers including Samsung, LG and Mediatek are being used to sign malware and deploy spyware, among other software nasties.the security issue and it's a doozy that allows malicious applications signed with one of the compromised certificates to gain the same level of privileges as the Android operating system — essentially unfettered access to the victim's device.
Also in the alert, Google listed 10 malware samples and related SHA256 hashes, and recommended all affected smart-device vendors rotate their platform certificates. "We also strongly recommend minimizing the number of applications signed with the platform certificate, as it will significantly lower the cost of rotating platform keys should a similar incident occur in the future," the AVPI said.
Running the various malware samples through Google's VirusTotal shows that third-party security vendors have flagged the samples as info stealers, downloaders, backdoors, HiddenAds malware, Metasploit, dropper malware, and other Trojans. "OEM partners promptly implemented mitigation measures as soon as we reported the key compromise," a Google spokesperson toldGoogle's Build Test Suite, which scans system images, along with Google Play Protect can detect the malware, according to the spokesperson.
Danmark Seneste Nyt, Danmark Overskrifter
Similar News:Du kan også læse nyheder, der ligner denne, som vi har indsamlet fra andre nyhedskilder.
The best stylus for Android tablets and phones in 2022Choosing the best stylus for Android devices can transform your tech into an essential creative tool.
Læs mere »
My Galaxy phone should do cool things with my Samsung TV, but doesn'tShow some love to the loyal
Læs mere »
Glasgow mum left desperate after crook conned her out of £750 with fake phoneCatherine McGill was conned by the man who charged her £750 for a fake Samsung S22 Ultra phone she was looking to buy for her son Patrick, 16, for his Christmas.
Læs mere »
WATCH: Thieves steal luxury cars worth £700kThe vehicles, including two Porsches and a rare Ariel Atom car, were taken from an industrial unit.
Læs mere »
Cops seize ten tonnes of fake goods as gangs steal from each otherCops responded to a break in and found ten tonnes of fake goods and a huge stash of illegal medicines
Læs mere »
WATCH: Thieves steal luxury cars worth £700kThe vehicles, including two Porsches and a rare Ariel Atom car, were taken from an industrial unit.
Læs mere »