Showing posts with label Stagefright. Show all posts
Showing posts with label Stagefright. Show all posts

Sunday, August 9, 2015

Evolution: The fight against "Stagefright" vulnerability that affects 95% of Android

Earlier last week, it came to light the discovery of a major security flaw in Android by Zimperium, a dangerous vulnerability in fact, "Stagefright", through which anyone with minimal knowledge, and really simple, can grab remotely from a terminal in minutes, without the user realize for a second. After rising to meet this gaping security hole, which affects 95% of active Android, companies got down to work to provide solutions quickly.


So, Google has already released a patch for the Google Nexus 5 and Google Nexus 6, and more important is whether it should support its new policy, with monthly updates. Luckily, Samsung has also joined the cause by adopting the same policy, and hours later also did the same LG. Motorola, meanwhile, has announced patches against "Stagefright" for its core smartphones, but for now has not committed to update monthly.

Google has even gone a step further, and although so far the support for its Nexus was two years from now extends for another year, so it will be three years. Devices that have been confirmed to receive monthly updates are the Google Nexus 4, Google Nexus 5, Google Nexus 6, Google Nexus 9 and Google Nexus 10, which remain outside the Google Nexus 7, although they receive the patch against "Stagefright" too.


Samsung and LG, meanwhile, have refused to confirm which devices fall into this policy, although we assume that will only be the best and latest of their ranks. Motorola, which as we said, has not said anything about monthly updates itself has given the list of smartphones that send the patch against this vulnerability.

Clearly, we must always look at the positive side of things. We can say that "Stagefright" has been a before and after in the Android security, as it has served for companies, including Google, put the batteries and we offer greater protection, we deserve all users. But unfortunately, not everyone can benefit. We know that this is a business, and ultimately the interests of a company are more important than the users themselves.

Evolution: The fight against "Stagefright" vulnerability that affects 95% of Android

Friday, August 7, 2015

Zimperium launches an app to tell us whether we are vulnerable to "Stagefright"

As you know, around 95% of Android devices are vulnerable to new malware. The vulnerability is called "Stagefright" because through it a hacker can get full control of your device. For this they need only send a video by MMS through Hangouts, and it is not even necessary that we open it. If you have enabled the option "Auto retrieve MMS" in the application, you'll be infected.

Zimperium was the company responsible for discovering this security flaw, and has been quick to send Google everything necessary to solve the problem as soon as possible, in addition to getting down to work with other companies so that they can launch updates on the shortest possible time. However, for now, only Google Nexus 5  and Google Nexus 6 may say they are completely safe. To other devices we have to continue waiting for the update to the patch, and it seems that the Samsung Galaxy S6 are as follows.

In this video, we demonstrate how easy it is to gain control of an Android device exploiting this vulnerability:


Once installed, you only have to press the yellow button that says "Begin analysis", and within seconds the results will come. Since 95% of Android is likely to be infected, it's natural to give us results in our Android as vulnerable, but be careful, because this does not necessarily mean that is affected. Only that, it is vulnerable.

The truth is that it is unclear how useful the application is, so maybe a simple question via advertising. That is, it is an application to find out what we already know. Once we have the results, we displayed a message with a contact link to Zimperium. Anyway, at least it seems that Google and other companies are ready to solve the problem. The best we can do while we wait for the patch, is taking steps to protect against vulnerability.

Google Play | Stagefright Detector App (Free)

Zimperium launches an app to tell us whether we are vulnerable to "Stagefright"