Jul 28, 2015 9:57 AM
Almost every Android phone and tablet are a risk for being hacked.
That's according to research conducted by security firm Zimperium.
Basically, there's code built into Android that when someone is sent a specific text message or the user visits a malicious website - the phone is at risk.
The hackers are able to get themselves into via your device, according to Joshua Drake, vice president of platform research and exploitation at Zimperium - your text messages. And all they need is your phone number. The user doesn't even have to do anything.
In a Monday morning blog post, Zimperium researchers wrote:
A fully weaponized successful attack could even delete the message before you see it. You will only see the notification. These vulnerabilities are extremely dangerous because they do not require that the victim take any action to be exploited. Unlike spear-phishing, where the victim needs to open a PDF file or a link sent by the attacker, this vulnerability can be triggered while you sleep. Before you wake up, the attacker will remove any signs of the device being compromised and you will continue your day as usual—with a trojaned phone. The vulnerability can be exploited using other attack techniques, including luring targets to malicious websites. Drake will outline six or so additional techniques at next month's Black Hat security conference in Las Vegas, where he's scheduled to deliver a talk titled Stagefright: Scary Code in the Heart of Android.
All versions are at risk according to Drake, including version 2.2.
Devices running Android versions prior to Jelly Bean (roughly 11% of devices) are at the worst risk due to inadequate exploit mitigations.
So far, very few devices have been patched, leading Zimperium to estimate 95 percent of devices - about 950 million - are currently at risk.
12 hours 48 minutes agoBoston officials say a water main gave way in the city's South End neighborhood, flooding a trench and killing two workers. (More)
14 hours 29 minutes agoWith 18 days to go until Election Day, an average of the latest public opinion surveys in New Hampshire indicates Hillary Clinton with an...
15 hours 45 seconds agoCyberattacks on a key internet firm repeatedly disrupted the availability of popular websites across the East Coast of the United States Friday, according to...
15 hours 34 minutes agoState police are searching for a 15-year-old who has been missing for six days. (More)
19 hours 30 minutes agoA distributed denial of service (DDoS) attack against DynDNS was causing serious issues online for the East Coast. (More)
22 hours 53 minutes agoMaggie Hassan’s U.S. Senate campaign is launching a new television commercial on Friday that highlights the accomplishments the governor’s achieved the past four years...