Latest in Android

Image credit:

Android 'smishing' vulnerability discovered by NCSU researchers; Google has a fix incoming

Darren Murph
November 2, 2012
Share
Tweet
Share

Sponsored Links

The art of smishing (SMS-Phishing) has been practiced for some time, but a discovery by the wizards at NC State University has uncovered a new vulnerability that could bring the aforesaid act back into the spotlight. Xuxian Jiang's research team recently identified the hole and confirmed that it impacts Gingerbread, Ice Cream Sandwich and Jelly Bean. Put simply, if an Android user downloads an infected app, the attacking program can "make it appear that the user has received an SMS, or text, message from someone on the phone's contact list or from trusted banks." This fake message can solicit personal information, such as passwords for user accounts. The team isn't going to disclose proof until Google patches it up, but the school has said that Google will be addressing it "in a future Android release." For now, however, Jiang recommends additional caution when downloading and installing apps from unknown sources, while also suggesting that folks pay close attention to received SMS text messages.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

Facebook will not ban Oculus owners with multiple VR headsets (updated)

Facebook will not ban Oculus owners with multiple VR headsets (updated)

View
Samsung, Stanford make a 10,000PPI display that could lead to 'flawless' VR

Samsung, Stanford make a 10,000PPI display that could lead to 'flawless' VR

View
Garmin smartwatches are on sale at all-time low prices at Amazon

Garmin smartwatches are on sale at all-time low prices at Amazon

View
GitHub takes down YouTube video download tools after an RIAA notice

GitHub takes down YouTube video download tools after an RIAA notice

View
YouTube mobile app now lets you search with your voice while casting

YouTube mobile app now lets you search with your voice while casting

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr