Strandhogg 2.0: This critical flaw lets you spy on any Android device

The Stranhogg 1.0 vulnerability was discovered in December 2019. This Android malware allowed hackers to silently loot your bank accounts. How? By simulating the login windows of famous banking apps. Victims then entered their username and password, far from thinking it was a trap.

On Wednesday, May 27, computer security researchers at Promon released a new critical android vulnerability. Baptized Strandhogg 2.0 (in homage to the first malware) this vulnerability is replicated and greatly improves the attack method. If Strandhogg 1.0 was able to reproduce the login windows, Strandhogg 2.0 should be able to do the same. pretend to be a legitimate application and it is already available on your smartphone.

The malware is essentially based on a flaw. Administrator privileges. Thanks to this vulnerability and Strandhogg 2.0, a hacker can control of your applications and replace them with a perfect copy. Then it remains to bomb the user with a bomb. an avalanche of various authorizations : access to the microphone, photo and video files, messages, internal memory and even GPS.

Best spy malware

The purpose is here spying on the victim to get as much information as possible. This flaw is extremely dangerous for several reasons:

• Undetectable by users
• It allows hijacking the interface of any application installed on the target device without requiring physical and root access.
• Allows you to get multiple access permissions
• All versions of Android are affected except Android 10

However, there are a few tips that may confuse you. You should be careful when an app you have connected to before asks you to connect again. Questionable permission requestsUndeliverable or unfair messages from one of your apps are also warning signs. Unexpected errors in an app’s interface and controls should also alert you.

This flaw was reported to Google more than five months ago, and the web giant released a patch for Pixels in April 2020. And as you know, it’s up to other manufacturers to roll out these updates to their own devices. Some smartphones are better than others when it comes to security updates…

Source: Promon