SoylentNews
SoylentNews is people
https://soylentnews.org/

Title    Android Bug Lets Hackers Plant Malware Via NFC Beaming
Date    Tuesday November 05 2019, @07:27AM
Author    Fnord666
Topic   
from the airborne-bugs dept.
https://soylentnews.org/article.pl?sid=19/11/05/0416215

MrPlow writes:

Submitted via IRC for AndyTheAbsurd

Google patched last month an Android bug that can let hackers spread malware to a nearby phone via a little-known Android OS feature called NFC beaming.

NFC beaming works via an internal Android OS service known as Android Beam. This service allows an Android device to send data such as images, files, videos, or even apps, to another nearby device using NFC (Near-Field Communication) radio waves, as an alternative to WiFi or Bluetooth.

Typically, apps (APK files) sent via NFC beaming are stored on disk and a notification is shown on screen. The notification asks the device owner if he wants to allow the NFC service to install an app from an unknown source.

But, in January this year, a security researcher named Y. Shafranovich discovered that apps sent via NFC beaming on Android 8 (Oreo) or later versions would not show this prompt. Instead, the notification would allow the user to install the app with one tap, without any security warning.

Source: https://www.zdnet.com/article/android-bug-lets-hackers-plant-malware-via-nfc-beaming/


Original Submission

Links

  1. "MrPlow" - https://soylentnews.org/~MrPlow/
  2. "NFC beaming" - https://developer.android.com/training/beam-files
  3. "Android Beam" - https://en.wikipedia.org/wiki/Android_Beam
  4. "Original Submission" - https://soylentnews.org/submit.pl?op=viewsub&subid=37263

© Copyright 2024 - SoylentNews, All Rights Reserved

printed from SoylentNews, Android Bug Lets Hackers Plant Malware Via NFC Beaming on 2024-04-29 16:07:46