{"id":9310,"date":"2017-05-22T15:30:08","date_gmt":"2017-05-22T22:30:08","guid":{"rendered":"http:\/\/blog.hellotech.com\/?p=9310"},"modified":"2021-06-12T09:57:48","modified_gmt":"2021-06-12T16:57:48","slug":"android-security-flaw-exploited","status":"publish","type":"post","link":"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited","title":{"rendered":"Google Isn’t Fixing an Android Security Flaw Exploited by Majority of Malware Just Yet"},"content":{"rendered":"\n

74% of malware have been exploiting a security hole on Android. Shouldn\u2019t Google be doing something about it sooner? Although there\u2019s been a lot of buzz surrounding how a security flaw in Google\u2019s mobile operating system (OS) is being exploited by most<\/em> malware, the search engine giant doesn\u2019t seem too bothered by the fact. Even as a potent ransomware, WannaCry<\/a>, attacked almost a quarter of a million computers recently, the company thinks the Android security hole should be patched by the next Android OS release.<\/p>\n\n\n\n

Wondering how soon this upcoming Android OS will be made public? Tentative reports suggest it\u2019ll  be released in August.<\/p>\n\n\n\n

Alarming Figures<\/h2>\n\n\n\n

The cyber security firm, Check Point, reported that 74% of today\u2019s active ransomware takes advantage of a major Android OS flaw<\/a>: \u201cSYSTEM_ALERT_WINDOW.\u201d This command is responsible for putting the lock screen up as well as allowing an app to display above all other programs.<\/p>\n\n\n\n

Besides ransomware, the security company also reports that the said Android security flaw has been abused by more than half of the malware we\u2019ve seen. They mentioned in the same post that 17% of banking Trojans use the said command line, too.<\/p>\n\n\n\n

In a real-world application, the permission enables an app to display over any other app without notifying the user. It comes as no surprise that the likes of adware, click-jacking windows, phishing scams, and Trojans have been adopting the app permission.<\/p>\n\n\n\n

Ransomware in Action<\/h2>\n\n\n\n

For those that don’t know, ransomware is a piece of malicious software built to interfere with a device\u2019s function until the victim pays a ransom electronically. It does that by encrypting files in the local drive or disrupting its current process. It then decrypts\/opens the system when the user pays the ransom – often in the form of bitcoins. Experts say that ransomware designed to attack PCs and Macs typically differ from those built to target smartphones.<\/p>\n\n\n\n

Those meant to victimize computers will often encrypt files on the hard drive after the unit gets infected. You\u2019ll be left with no choice but to give in to the hacker\u2019s monetary demands or else,  you may lose all your precious files. When you do pay up, attackers often send you the decryption key to give you back access to your computer. On the other hand, a ransomware attacks smartphones differently. Because there aren\u2019t too many files to encrypt on such a device, a ransomware will forcefully overlay the screen until a ransom note appears. It\u2019ll only disappear once a user pays up.<\/p>\n\n\n\n

Google Recognizes Android Security Dilemma<\/h2>\n\n\n\n

The tech giant has been aware that the command line in question is problematic. It may have obvious value to different kinds of malware, but it\u2019s undoubtedly necessary to less malicious apps. The fact is that safe apps like Facebook and others need the command to function.<\/p>\n\n\n\n

Seeing a potential for abuse, the Android OS-maker has put in place a safety valve years ago: only apps downloaded from Google Play store can use SYSTEM_ALERT_WINDOW. Google simply polices apps shown in the Play store and blocks any app misusing the command.<\/p>\n\n\n\n

Flaw in the Plan<\/h2>\n\n\n\n

Google vetting apps in the Play store allows the company to block any apps abusing the command line. That\u2019s why the Mountain View giant confidently claims that it can keep most Android devices malware-free by means of its unique security measure.<\/p>\n\n\n\n

Reports reveal, however, that Google Play isn\u2019t the only place people download apps for their Android smartphones and tablets. The Play store may be where most US and European users download their apps, but there are parts of the world where the Android store is either blocked due to local restrictions or simply unavailable. In some cases, people just prefer downloading mobile programs from unofficial, mostly unknown sources.<\/p>\n\n\n\n

Android System May Be Vulnerable<\/h2>\n\n\n\n

Despite Google\u2019s claims of Android security, we\u2019ve seen a fair share of malware consistently slipping through the radar. Gooligan<\/a>, WannaCry<\/em>, and other less known threats are clear evidence of this fact.<\/p>\n\n\n\n

With all these things considered, it may be safe to say that all current Android versions may be open to cyber attacks. Most malware creators targeting Android have widely exploited the system\u2019s permission vulnerability and it may only be a matter of time when the next, big Android malware hits.<\/p>\n\n\n\n

Long-Running Android Security Flaw<\/h2>\n\n\n\n

This permission vulnerability began way back when Android Marshmallow was introduced in 2015.<\/p>\n\n\n\n

After Check Point<\/em> uncovered the Android security flaw, it immediately reported the vulnerability to Google. The tech giant responded, saying that the issue is already being dealt with. The company adds that it would only be patched in the next Android version release (\u2018Android O\u2019), which is coming in a few months.<\/p>\n\n\n\n

Protecting Your Android Device<\/h2>\n\n\n\n

The good news is that keeping Android malware at bay is a matter of common sense. Staying within Google\u2019s folds could pretty much keep you safe from almost all cyber threats out there. Venture into unknown territory and you could be in danger in no time.<\/p>\n\n\n\n

So, how do you keep your Android gadgets malware-free? Here are the basics:<\/p>\n\n\n\n

Be vigilant with app permissions<\/h3>\n\n\n\n

While Play store makes information on app permissions publicly accessible before you can download any app, most of us probably don\u2019t read them. We all should. Although Android apps aren\u2019t exactly malware, some might be snooping on your data. If a weather app is asking you access to your contacts list, be a little skeptical about downloading it.<\/p>\n\n\n\n

Disallow installation from unknown sources<\/h3>\n\n\n\n

In theory, your Android device\u2019s first line of defense is simply you not messing around with its default security settings. To check if this setting is in place, navigate to Settings<\/strong> > Security<\/strong> > Unknown Sources<\/strong>. <\/p>\n\n\n\n

The checkbox to the right of this option has to be kept unticked.<\/p>\n\n\n\n

Don\u2019t root your Android device<\/h3>\n\n\n\n

Rooting your Android tablet or phone is basically running the device in administrator mode. Sure, it opens your device to a world of features and possibilities, but it\u2019s a security risk than anything else. A lot of malware need root access to function and a rooted device makes you extra vulnerable to cyber attacks.<\/p>\n\n\n\n

With Android security patches still on their way, hopefully no other major malware strikes our Android devices by then.<\/p>\n","protected":false},"excerpt":{"rendered":"

74% of malware have been exploiting a security hole on Android. Shouldn\u2019t Google be doing something about it sooner? Although there\u2019s been a lot of buzz surrounding how a security flaw in Google\u2019s mobile operating system (OS) is being exploited by most malware, the search engine giant doesn\u2019t seem too bothered by the fact. Even as a potent ransomware, WannaCry, attacked almost a quarter of a million computers recently, the company thinks the Android security hole should be patched by the next […]<\/p>\n","protected":false},"author":1,"featured_media":9353,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[17582,17587,17593],"tags":[],"class_list":["post-9310","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mobile","category-news","category-staying-safe"],"acf":[],"yoast_head":"\nGoogle's Not Fixing An Android Security Flaw Until August<\/title>\n<meta name=\"description\" content=\"Google thinks the Android security hole should be patched by the next Android OS release, which is rumored to come out in August of 2017.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Google Isn't Fixing an Android Security Flaw Exploited by Majority of Malware Just Yet - The Plug - HelloTech\" \/>\n<meta property=\"og:description\" content=\"74% of malware have been exploiting a security hole on Android. Shouldn\u2019t Google be doing something about it sooner? Although there\u2019s been a lot\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited\" \/>\n<meta property=\"og:site_name\" content=\"The Plug - HelloTech\" \/>\n<meta property=\"article:publisher\" content=\"http:\/\/www.facebook.com\/hellotech\" \/>\n<meta property=\"article:published_time\" content=\"2017-05-22T22:30:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-06-12T16:57:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2017\/05\/pexels-photo-89955-1-min.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"426\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@HelloTech\" \/>\n<meta name=\"twitter:site\" content=\"@HelloTech\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c\"},\"headline\":\"Google Isn’t Fixing an Android Security Flaw Exploited by Majority of Malware Just Yet\",\"datePublished\":\"2017-05-22T22:30:08+00:00\",\"dateModified\":\"2021-06-12T16:57:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited\"},\"wordCount\":1085,\"publisher\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#organization\"},\"articleSection\":[\"Mobile & Phone\",\"News\",\"Staying Safe\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited\",\"url\":\"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited\",\"name\":\"Google's Not Fixing An Android Security Flaw Until August\",\"isPartOf\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#website\"},\"datePublished\":\"2017-05-22T22:30:08+00:00\",\"dateModified\":\"2021-06-12T16:57:48+00:00\",\"description\":\"Google thinks the Android security hole should be patched by the next Android OS release, which is rumored to come out in August of 2017.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.hellotech.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Google Isn’t Fixing an Android Security Flaw Exploited by Majority of Malware Just Yet\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#website\",\"url\":\"https:\/\/www.hellotech.com\/blog\/\",\"name\":\"The Plug - HelloTech\",\"description\":\"Turn to The Plug for informative tech news that you can use. \",\"publisher\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.hellotech.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#organization\",\"name\":\"HelloTech\",\"url\":\"https:\/\/www.hellotech.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png\",\"contentUrl\":\"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png\",\"width\":1000,\"height\":174,\"caption\":\"HelloTech\"},\"image\":{\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"http:\/\/www.facebook.com\/hellotech\",\"https:\/\/twitter.com\/HelloTech\",\"http:\/\/www.instagram.com\/hello_tech\",\"https:\/\/www.youtube.com\/channel\/UCIR-fbAKRfVuAbciDr2z4nQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g\",\"caption\":\"admin\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Google's Not Fixing An Android Security Flaw Until August","description":"Google thinks the Android security hole should be patched by the next Android OS release, which is rumored to come out in August of 2017.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited","og_locale":"en_US","og_type":"article","og_title":"Google Isn't Fixing an Android Security Flaw Exploited by Majority of Malware Just Yet - The Plug - HelloTech","og_description":"74% of malware have been exploiting a security hole on Android. Shouldn\u2019t Google be doing something about it sooner? Although there\u2019s been a lot","og_url":"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited","og_site_name":"The Plug - HelloTech","article_publisher":"http:\/\/www.facebook.com\/hellotech","article_published_time":"2017-05-22T22:30:08+00:00","article_modified_time":"2021-06-12T16:57:48+00:00","og_image":[{"width":640,"height":426,"url":"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2017\/05\/pexels-photo-89955-1-min.jpeg","type":"image\/jpeg"}],"author":"admin","twitter_card":"summary_large_image","twitter_creator":"@HelloTech","twitter_site":"@HelloTech","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited#article","isPartOf":{"@id":"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited"},"author":{"name":"admin","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c"},"headline":"Google Isn’t Fixing an Android Security Flaw Exploited by Majority of Malware Just Yet","datePublished":"2017-05-22T22:30:08+00:00","dateModified":"2021-06-12T16:57:48+00:00","mainEntityOfPage":{"@id":"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited"},"wordCount":1085,"publisher":{"@id":"https:\/\/www.hellotech.com\/blog\/#organization"},"articleSection":["Mobile & Phone","News","Staying Safe"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited","url":"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited","name":"Google's Not Fixing An Android Security Flaw Until August","isPartOf":{"@id":"https:\/\/www.hellotech.com\/blog\/#website"},"datePublished":"2017-05-22T22:30:08+00:00","dateModified":"2021-06-12T16:57:48+00:00","description":"Google thinks the Android security hole should be patched by the next Android OS release, which is rumored to come out in August of 2017.","breadcrumb":{"@id":"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.hellotech.com\/blog\/android-security-flaw-exploited#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.hellotech.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Google Isn’t Fixing an Android Security Flaw Exploited by Majority of Malware Just Yet"}]},{"@type":"WebSite","@id":"https:\/\/www.hellotech.com\/blog\/#website","url":"https:\/\/www.hellotech.com\/blog\/","name":"The Plug - HelloTech","description":"Turn to The Plug for informative tech news that you can use. ","publisher":{"@id":"https:\/\/www.hellotech.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hellotech.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.hellotech.com\/blog\/#organization","name":"HelloTech","url":"https:\/\/www.hellotech.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png","contentUrl":"https:\/\/www.hellotech.com\/blog\/wp-content\/uploads\/2018\/11\/HT-logo-revised-final.png","width":1000,"height":174,"caption":"HelloTech"},"image":{"@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["http:\/\/www.facebook.com\/hellotech","https:\/\/twitter.com\/HelloTech","http:\/\/www.instagram.com\/hello_tech","https:\/\/www.youtube.com\/channel\/UCIR-fbAKRfVuAbciDr2z4nQ"]},{"@type":"Person","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/dec00225dd888a509740ace5e4d9de6c","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.hellotech.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cbb537d18df244ad7d57a3639d94ede5cd90bf1fb742392af5731beaf11ffeb1?s=96&d=mm&r=g","caption":"admin"}}]}},"_links":{"self":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/posts\/9310","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/comments?post=9310"}],"version-history":[{"count":0,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/posts\/9310\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/media\/9353"}],"wp:attachment":[{"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/media?parent=9310"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/categories?post=9310"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hellotech.com\/blog\/wp-json\/wp\/v2\/tags?post=9310"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}