x PhoneArena is hiring! Reviewer in the USA
  • Hidden picShow menu
  • Home
  • News
  • 500,000,000 Android devices affected by this malware that uses "clickjacking" to access your device

500,000,000 Android devices affected by this malware that uses "clickjacking" to access your device

Posted: , by Alan F.

Tags :

500,000,000 Android devices affected by this malware that uses
According to mobile security firm Skycure, a new form of malware is putting as many as half a billion Android handsets at the risk of "accessibility clickjacking." This is a method that tricks smartphone users into clicking on something that appears to be benign, but could actually be opening up a phone for hackers. It requires a malicious website to load what appears to be a non-threatening website with an invisible overlay from another service.

The clickjacking can allow a hacker to steal all text based sensitive information, and take actions using the operating system or apps that were not approved or not even known by the phone's owner. Personal and work SMS would be at risk along with "personal and work emails, data from messaging apps, sensitive data on business applications such as CRM software, marketing automation software and more."

Once accessibility has been enabled, the hacker can change admin permissions and even enable a new Device Admin. This could allow the hacker to disable the passcode or even remotely wipe the device.

To see this "clickjacking" in action, check out the video at the bottom of this story. It shows a free game called 'Rick and Morty.' Clicks made during the game are actually activating an invisible layer of the OS. Finishing the game means that the victim's phone has given accessibility permissions for a number of features.

65% of Android devices, those running Android 2.2 to 4.4, are vulnerable. Once your device has been updated to Android 5.0 Lollipop, this particular malware issue is no longer a threat.

To fight back, Skycure suggests updating to the newest Android OS build as soon as possible. Do not click on dialogue boxes unless you are sure you know where they came from, and why they appeared on your screen. Do not use third party app stores, and download a mobile threat defense app. Open "Settings," go to "Accessibility" settings and make sure there is either no group named "Services," or that the group has no enabled entries.






source: Skycure via BGR

96 Comments
  • Options
    Close






posted on 04 Mar 2016, 20:25 15

1. Unordinary (Posts: 1951; Member since: 04 Nov 2015)


Poor guys.. My condolences :(

posted on 04 Mar 2016, 23:35 7

34. engineer-1701d (unregistered)


as an android user i am happy about this virus think crash the phones forces people 2 upgrade old ass phones increasing sakes and tech

posted on 05 Mar 2016, 20:19 2

85. 47AlphaTango (Posts: 298; Member since: 27 Sep 2015)


And would waste $600 or more for an upgrade? Most people are not like you who would waste money. Especially if that phone was bought has a special meaning.

posted on 06 Mar 2016, 04:28

87. stanislav (Posts: 136; Member since: 22 Sep 2014)


Yes so good !!! Lets pollute the earth as fast as we can, also throwing our money and time away is good.

posted on 07 Mar 2016, 03:49

95. Xelief (Posts: 52; Member since: 17 Aug 2015)


Saying you're glad for a virus that can have such a large impact on someone's life because it forces them to upgrade is just retarded. Some people can't AFFORD to upgrade to the most recent devices, or just don't need a top of the line device. With such a large portion of the market still on these operating systems, Google and friends should be keeping up on security updates for them, especially since these phones are still being sold in a lot of cases.

posted on 05 Mar 2016, 01:58 14

42. NoToFanboys (Posts: 1952; Member since: 03 Oct 2015)


As expected, you are the first one to troll here lol.

posted on 05 Mar 2016, 04:01 7

49. Macready (Posts: 1130; Member since: 08 Dec 2014)


No need to worry, it's really only a possible concern for people installing apps from "unknown sources" on an old pre 5.0 firmware. Mostly a firm trying to push their "protection app"

In the end, iOS is the OS with more security threats.
http://www.gfi.com/blog/most-vulnerable-operating-systems-and-applications-in-2014/

posted on 05 Mar 2016, 11:11 3

63. perry1234 (Posts: 167; Member since: 14 Aug 2012)


Uh , this is 2016 and iOS is leaps and bounds ahead of Android in security.
Android is better in other things , of course...

posted on 05 Mar 2016, 11:38 10

66. Macready (Posts: 1130; Member since: 08 Dec 2014)


No, it's actually worse now for iOS than 2 years ago. Read their updated database. The funny part is also that most of these Android threats are theoretical. I have never heard anyone to be affected. That's not the case with iOS ones, the recent date bug exploit sitting fresh in our memories for example.

posted on 06 Mar 2016, 02:17

86. HonestRealist (Posts: 196; Member since: 25 Jan 2016)


iOS vulnerabilities are luckily isolated to specific regions namely China. And who cares about the Chinese right? As long as they're making our s**t for cheap it's all good bro.

posted on 06 Mar 2016, 14:05 1

89. MrElectrifyer (Posts: 3302; Member since: 21 Oct 2014)


Canada/US isn't in China you dishonest dummy, the date brick was already confirmed by Apple and affects ANY iDevices.

posted on 20 Mar 2016, 06:23

96. perry1234 (Posts: 167; Member since: 14 Aug 2012)


I agree that the date bug was a silly oversight by Apple , but for that bug to activate we specifically had to set the device date to 1970 or before. I would take such bugs any day rather than have my phone controlled by some hacker.
Anyhow seeing the recent tiff between Apple and FBI , might just change to Android in the future ( had a Note 3 , switched for the first time to iOS with 6S Plus)

posted on 05 Mar 2016, 07:07 8

51. Mr.Meeseeks (Posts: 1; Member since: 05 Mar 2016)


that's why stupid people should use Iphone

posted on 05 Mar 2016, 10:30

61. submar (Posts: 476; Member since: 19 Sep 2014)


To Apple??

posted on 04 Mar 2016, 20:31 6

2. Unordinary (Posts: 1951; Member since: 04 Nov 2015)


I guess this is where the latest and greatest OS having less than 2% installed base is a good thing though! Think of the bright side guys!

posted on 04 Mar 2016, 20:43 3

3. cripton805 (Posts: 1454; Member since: 18 Mar 2012)


Might as well use a black and white flip phone at least you will have good ol snake game.

posted on 04 Mar 2016, 21:00 6

7. Unordinary (Posts: 1951; Member since: 04 Nov 2015)


On a serious not, Snake was the best. I friggen miss my Nokia phone :'(

posted on 04 Mar 2016, 21:15 8

9. kajam (Posts: 210; Member since: 24 Jun 2015)


Or use an iPhone that you pay for but you don't own it with all limited features from BC

posted on 04 Mar 2016, 22:01 15

17. AlikMalix (Posts: 6287; Member since: 16 Jul 2014)


Funny how you see ownership. With android they print a carriers logo on YOUR phone, then they put unremovable apps that you don't want on YOUR phone, then they release (or don't release at all) updates from manufacturers made for YOUR phone, and block features that manufacturers designed for YOUR phone, apps that start on their own, and hardly any control what apps are allowed to access on YOUR phone.

Oh yeah, you "own" your phone.

posted on 04 Mar 2016, 22:37 16

20. Subie (Posts: 955; Member since: 01 Aug 2015)


Not if you buy factory unlocked. Or how about Nexus phones from the Google Play store?

posted on 04 Mar 2016, 22:40 7

21. AlikMalix (Posts: 6287; Member since: 16 Jul 2014)


My point stands....

posted on 04 Mar 2016, 23:16 20

26. Subie (Posts: 955; Member since: 01 Aug 2015)


Mine stands taller. Post a real rebuttal next time.

posted on 04 Mar 2016, 23:32 6

32. AlikMalix (Posts: 6287; Member since: 16 Jul 2014)


My point stands because how many people actually own those vs the rest of android market share. I'm actually curious - anyone got a link?

posted on 05 Mar 2016, 02:11 19

44. sachouba (Posts: 172; Member since: 08 Jun 2014)


Not everyone lives in the US...
In other places, carriers do NOT print anything on your phone, they install almost nothing on your phone (if they install something), they send updates quickly and do NOT block any feature.
Moreover, more than half of the people who own a smartphone did NOT get the phone on contract.

It's only is the US that people have just discovered no-contract plans...

posted on 04 Mar 2016, 23:52 6

37. Inotamira (Posts: 173; Member since: 06 Feb 2016)


Except unlike the apple device you have stuck in your pucker, we have these things called a custom rom, which literally allows us to get away from all of that and always will. So your "points" kind of fall completely flat on that alone, but keep trying, maybe you'll hit a fact some day!

posted on 04 Mar 2016, 23:13 5

25. Unordinary (Posts: 1951; Member since: 04 Nov 2015)


#rekt

You make so much sense they probably will call you a troll. Thats how things work on here lol. I almost feel bad for the clowns on this site who are so brainwashed by the anti Apple movement where they can't even see their own issues right in front of them lol.

posted on 04 Mar 2016, 23:34 12

33. AlikMalix (Posts: 6287; Member since: 16 Jul 2014)


Unordinary, I appreciate the vote, but name calling anyone is just juvenile. Argue for or against android all you want, but I hate personal attacks on any group of people.

posted on 05 Mar 2016, 03:38 5

47. NoToFanboys (Posts: 1952; Member since: 03 Oct 2015)


Try saying something remotely negative about Apple and he'll also call you names.

posted on 05 Mar 2016, 00:21 3

38. lyndon420 (Posts: 4559; Member since: 11 Jul 2012)


I have a Nexus 6 through Rogers and it has none of what you described. Aside from the lone Rogers app (which I use often) you wouldn't have a clue which carrier provided this phone without digging into the settings.

posted on 05 Mar 2016, 11:13 1

64. Plutonium239 (Posts: 1059; Member since: 17 Mar 2015)


On Windows Phone and Windows 10 mobile, you can remove all of the carrier installed apps if you want to. Is this not possible on android devices for real?

* Some comments have been hidden, because they don't meet the discussions rules.

Want to comment? Please login or register.

Latest stories