Keep up with the latest cybersecurity threats, newly discovered vulnerabilities, data breach information, and emerging trends. Delivered daily or weekly right to your email inbox.
Android App Permission in Google Play Contains Security Flaw
Android's app permission mechanisms could allow malicious apps in Google Play to download directly onto the device.
1 Min Read
Security researchers discovered a security vulnerability in Android's app permission model that could allow malicious apps to download onto the mobile device directly from Google Play and launch ransomware, adware, and banking malware, according to a Check Point Software blog post today.
Check Point found the flaw in Android version 6.0.0., otherwise known as the Marshmallow.
"As a temporary solution, Google applied a patch in Android version 6.0.1 that allows the Play Store app to grant run-time permissions, which are later used to grant SYSTEM_ALERT_WINDOW permission to apps installed from the app store. This means that a malicious app downloaded directly from the app store will be automatically granted this dangerous permission," Check Point wrote in a blog post today.
The SYSTEM-ALERT-WINDOW mechanism will also effectively bypass security mechanisms introduced in the previous version of Android, according to Check Point.
Google plans to fix the issue in its upcoming "Android 0" version.
Read more about the Android vulnerability here.
About the Author
You May Also Like
More Insights
