Researcher discovers Android flaw or be used at fishing attack

Beijing time on August 8 afternoon message, a revealed Android Saturday flaw on researcher, the criminal can use free t mobile prepaid cards data the most popular t mobile prepaid cards of user of this flaw filch, and advertisement advocate can borrow this to release shoot ad giving form annoyingly.

　　 Filch data

Senior vice president of Trustwave of American safe company holds SpiderLabs concurrently to be in charge of Nicholas - cypress library is overcome (Nicholas Percoco) expresses, developer can found the surface to do not have the application of the problem it seems that, but when the user uses lawful bank application, this application can start false bank application to log onto a page.

Cypress library gram expresses, examining an application when the user when, if still application wants to communicate with the user, need to issue reminder on the announcemen canon ef 15mm t column of screen top only can. But in the SDK(software of Android development is covered) in have) of interface of process designing of an API(application however, can turn specific application forward table.

norton internet antivirus

"Android allows you to cancel ' return ' pushbutton. " the SSL developer Xiao En of Trustwave - Shuerte (Sean Schulte) says. Cypress library overcomes additional line: " because of such, application is OK the attention of filch user, and return pushbutton or cannot be being clicked is to exit. " they had named this flaw for " attention filch flaw " .

Researcher had founded tool of a test and verify, the surface looks is a game only, but can play cl most popular selling scooby costume ient of speech of song of a false Facebook, Yamaxun, cereal and Gmail to carry entry interface however. The one part that this tool can use legally as has to load, and register serve for, still meet after the mobile phone restarts so surrive.

In demonstrating a process, open this application when the user, after the entry interface that sees Facebook, having some of strange place exclusively is a on screen spot that twinkles quickly, but most user won't notice. This false screen and true entry screen just the same, the user cannot see among them difference. 15 pin vga

　　 Shoot an ad

Cypress library gram expresses, this designs have the aid of blemish, game and application development person can make essence of life shoot an ad definitely. This kind of advertisement not only very aggravating, and can undertake essence of life the best selling scooby costume follows fixed position: When the user starts the competitor's application, can shoot a corresponding ad.

Shuerte expresses, when the user downloads application, won't receive any clew information, because Android system permits application,examination mobile phone uses position. Cypress library gram says, they are a few weeks brooch pins before had acquired connection with cereal song employee, the other side admits existence problem, express to will try hard to solve this one problem.

Cereal song spokesman says: "The end that using a switch is to encourage spread out between application more rich interactive. We have not disco free canon ef 15mm ver to there is application to use this technology in Android Market, we will delete all in the application of this kind of circumstance putting. We will delete all in the application of this kind of circumstance putting..

Cypress library gram responds to to this: "Using switch is not a problem, crucial question depends on other applying can judging which application to be located in downstage, start application below the case that did not win user license, jump to screen front. We r the best selling brooch pins eturn discovery, the user cannot distinguish at all the distinction between ill will application and lawful application. The user cannot distinguish at all the distinction between ill will application and lawful application..

He complements, because the hacker releases applied speed to compare the response rate of cereal song,get quickly much, accordingly when the practice that eliminates relevant applying moves again after the user reports baleful order breakneck. (Vessel grand)