Researcher Releases Web-based Android Attack

A computer security researcher has released code that can be used to attack older Android based phones. The act of a concerned citizen or a total dick move?

The attack targets the browser in older, Android 2.1-and-earlier versions of the phones. It is being disclosed Thursday at the HouSecCon conference in Houston by M.J. Keith, a security researcher with Alert Logic. Keith says he has written code that allows him to run a simple command line shell in Android when the victim visits a website that contains his attack code.

Comments