Latest in Android

Image credit:

New Android exploit can hack any handset in one shot

Andrew Tarantola, @terrortola
November 12, 2015
Share
Tweet
Share

Sponsored Links

Hackers have discovered a critical exploit in Chrome for Android reportedly capable of compromising virtually every version of Android running the latest Chrome. Quihoo 360 researcher Guang Gong demonstrated the vulnerability to the PSN2OWN panel at the PacSec conference in Tokyo yesterday. While the inner workings of the exploit are still largely under wraps, we do know that it leverages JavaScript v8 to gain full administrative access to the victim's phone.

"The impressive thing about Guang's exploit is that it was one shot; most people these days have to exploit several vulnerabilities to get privileged access and load software without interaction," PacSec organiser Dragos Ruiu told Vulture South. "As soon as the phone accessed the website the JavaScript v8 vulnerability in Chrome was used to install an arbitrary application (in this case a BMX Bike game) without any user interaction to demonstrate complete control of the phone." Unfortunately, real-world applications would be far less benign. Google has already been alerted to the bug and is expected to pay out a sizeable bounty for the heads up.

[Image Credit: Bloomberg via Getty Images]

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
Tweet
Share

Popular on Engadget

Live PlayStation 5 photos reveal a truly giant console

Live PlayStation 5 photos reveal a truly giant console

View
Microsoft releases a final preview for Windows 10's October update

Microsoft releases a final preview for Windows 10's October update

View
NASA unveils 'the most powerful rocket ever built'

NASA unveils 'the most powerful rocket ever built'

View
Sony apologizes for botched PlayStation 5 pre-orders

Sony apologizes for botched PlayStation 5 pre-orders

View
Drone network provides early warnings for natural disasters

Drone network provides early warnings for natural disasters

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr