By navigating our site, you agree to allow us to use cookies, in accordance with our Privacy Policy.

Automatic Update or Download? Your Android is attacked

putting Android users at risk

The security concern is an undeniable concern, with new sophisticated ways of attacking a system the security gate-keepers are kept on toe.

Kaspersky Labs team are trying to keep an hawk-eye into these malicious activities, the company  asserts that they have spotted unusual activity in a malicious script, on an infected website, which is putting Android users at risk.

How it Works?

The script usually activates the download of Flash exploits, to attack Windows-users. However at some point it has been changed so it can check the type of device its victims are using, searching specifically for Android version 4 and older. Spotting the danger, Kaspersky Lab experts decided to delve deeper.

Infecting an Android device is much harder for criminals then infecting a Windows PC. The Windows OS – and a lot of widespread applications for it – contains vulnerabilities that allow malicious code to be executed without any interactions with a user. This is not generally the case with the Android OS, as any application installation requires confirmation from the owner of an Android device. However, vulnerabilities in the OS can be exploited to bypass this restriction. And, as our researchers discovered during their investigation, this does happen.

The script is a set of special instructions for execution in the browser, embedded in the code of the infected website. The first script was discovered while it was looking for devices operating on the old versions of Android OS. Two more suspicious scripts were also detected subsequently. The first one is able to send an SMS to any mobile number, while the other creates malicious files on the SD-card of the attacked device. That malicious file is a Trojan, and it has the ability to intercept and send SMS messages. Both malicious scripts are able to perform actions independently from the Android user: you would only need to occasionally visit an infected website, to be compromised. security gate-keepers

This was made possible because cybercriminals have utilized exploits to several vulnerabilities in Android versions 4.1.x and older – CVE-2012-6636, CVE-2013-4710 and CVE-2014-1939 in particular. All three vulnerabilities were patched by Google between 2012 and 2014; but the risk of their exploitation still exists. For example, because of the Android ecosystem characteristics, many vendors producing Android-based devices are releasing the necessary security updates too slowly. Some don’t release updates at all because of the technical obsoleteness of a particular device model.

“The exploitation techniques we’ve found during our research were nothing new but borrowed from proof of concepts, previously published by white hat researchers. This means that vendors of Android devices should account for the fact that the publication of PoCs would inevitably lead to the appearance of “armed” exploits. Users of these devices deserve to be protected with corresponding security updates, even if the devices are no longer being sold at the time,” said Victor Chebyshev, security expert at Kaspersky Lab.

In order to protect yourself from drive-by attacks,the company has suggested key advices:

  • Keep your Android-based device software up-to-date by enabling the automatic updates function;
  • Restrict the installation of applications from alternative sources to Google Play, especially if you’re managing a collection of devices used in corporate networks;
  • Use a proven security solution. Kaspersky Internet Security for Android and Kaspersky Security for Mobile with Mobile Device Management are capable of detecting changes on the SD-card of device in real time, and thus protects users against the drive-by attacks described above.


BiS Team

BIS Infotech is a vivid one stop online source protracting all the exclusive affairs of the Consumer and Business Technology. We have well accomplished on delivering expert views, reviews, and stories empowering millions with impartial and nonpareil opinions. Technology has become an inexorable part of our daily lifestyle and with BIS Infotech expertise, millions of intriguers everyday are finding for itself a crony hangout zone.

Related Articles

Upcoming Events