Android Vulnerability Update: Android Users Beware! Old Vulnerability hits Again!

Android Users Beware! Old Vulnerability hits Again!

Presuming that an old vulnerability that was faced by android phones was fixed has put millions of android phones to risk. NorthBit, an Israeli-based company.

Millions of android phones have been facing an old vulnerability that was thought to be solved.
Israeli explained a fresh way of exploiting a weakness spotted in Stagefright which is Android's media server and multimedia library. This weakness may let hackers get access to data and functions when a user visits a malicious website on different Android versions.

A statement was delivered by NorthBit stating that the key is that the device's defenses are gauged by a back-and-forth procedure before dividing in. When a malicious website is visited a series of events occur. Once such a website is visited it results in the crashing of the Android's media server which results in the transfer of the hardware data of the user to the attacker. Followed by the attack will be sending of video file and then collecting additional security data and finally delivering one video file that actually infects the device using which the user got into the malicious website.

NorthBit said, "The key is back-and-forth procedure that gauges device's defenses before diving in. Visit malicious website, and attack will crash Android's media server, send hardware data back to attacker, send another video file, collect additional security data and deliver one video file that actually infects device".

Prior to this attempts were twice by Google to check the vulnerability following the detection of the original Stagefright flaws by security company Zimperium in early last year. Two weakness were found in the exploit by Northbit.

First aspect is that hackers would have made various versions of 'Metaphor' to hijack each kind of phone on a wide scale. Second aspect is that the company found that the most update version Android, 6.0 Marshmallow, hinders 'Metaphor'. The more recent October patch of Google can obstruct it on a number of older installs also.