A dangerous flaw on Android exhibits your bank data and passwords

Strandhogg is a safety flaw on all versions of Android allowing malware to recover, relatively easily, passwords and victims' bank data as well as access files and photos stored on their smartphones.

The security systems implemented by applications and various bones are constantly becoming more robust to become more robust.The problem is that malicious software becomes, over time, more dangerous also.We have new proof recently on Android.

As can be read on the BBC website, the company specializing in IT security Promon discovered an important flaw on all versions of the Google mobile operating system, the last, Android 10.The flaw in question, called "Strandhogg", exploits a vulnerability present in the way Android manages the multitasking.

Because of this, a malicious application can be superimposed on the application that the user thinks to have opened and request authorizations for access to certain smartphone features.

Illustration created by Promon

Even more devious, the Pirate software can display a false connection page inviting the victim to enter their username and password in order to recover these precious data.

Illustration created by Promon

Passwords, private files and banking data

Promon explains that, with this flaw, a malicious application can:

The security specialist explains that he has updated this flaw by seeing that it was exploited on banking applications.Thus, 60 financial institutions were targeted by Strandhogg according to Promon.

YouTube ’ABONNON LINK in FRANDROC

Tom Hansen, the technological director of Promon expressed his surprise at the BBC.

500 vulnerable applications

Always more alarming: 500 applications of the play store would be potentially vulnerable against Standhogg while the teams of the Lookout antivirus, who worked with Promon on this survey, spotted at least 36 malicious software using this breach.

For its part, Google was informed."We appreciate the work of researchers and we suspended the potentially harmful applications that they have identified.In addition, we continue to investigate in order to improve the ability of Google Play Protect to protect users from similar problems, "said the Mountain View firm.

Recently, several security concerns have been reported in the world of Android.A discovery flaw concerned the camera while the passage from SMS to RCS also raises concerns.

To follow us, we invite you to download our Android and iOS application.You can read our articles, files, and watch our latest YouTube videos.