Sorry I was hugging my iPhone tightly. Android users check out the video of the security hole found in your devices after the jump.
+TatWZA
X
Shotta Dru on Google+
If Google was just starting to forget about the Android malware threats from earlier this year, now it has another security headache: Researchers at North Carolina State University just discovered a new vulnerability in some of the most popular Android phones being sold today.
The security flaw, described in detail in this white paper, is specific to a certain implementation of the Android operating system, the researchers say, so it doesn’t necessarily affect all Android phones. Most Android handset makers integrate their own software (sometimes called “bloatwareâ€) on top of the basic Android OS (for example, HTC’s Sense interface) to serve up various services and differentiate themselves.
But that software is exactly what’s opening up certain phones to malware threats, the research says. Dr. Xuxian Jiang led a team that looked at multiple Android devices, and found that some of the pre-loaded applications that various manufacturers put in, like text-message notifiers, created a “backdoor†to the phone that third parties could exploit.
What sort of problems could arise? That depends on what sort of malware those hackers use. Theoretically, the vulnerability could be used to install software that records phone calls, send text messages, or even wipe the phone’s settings, according to Science Daily. It’s not clear if hackers could use the backdoor to actually “root†the phone, but if it’s possible, all bets are off.
The good news: the researchers also tested phones running stock Android, and those phones were “basically clean,†Jiang says. So was the Motorola Droid.
But many other popular phones are vulnerable. The research specifically names the HTC Legend, EVO 4G, and Wildfire S; the Motorola Droid X; and the Samsung Epic 4G. Most at risk are users of the EVO 4G, which displayed the most vulnerabilities. The EVO is the third most popular smartphone in the U.S., according to research from NPD.
Short of throwing your cellphone away, there are easy ways Android users can guard against malware. First and foremost: download only from trusted sources, like the Google Android Market. While the Market doesn’t have a 100% spotless record on malware, it’s still the biggest and most secure app store for Android, and when Google learns of any problem, it acts fast.
Besides that, users should use a screen password, install OS updates as soon as they’re available for your device, and caution from viewing sensitive information over public Wi-Fi. Finally, several security companies, such as Lookout and Norton, have free security apps that will help protect your phone from becoming a nest for viruses and trojans.
Jiang’s research is ongoing — he’s going further into the Android device catalog to see if any more phones are vulnerable to the same problem. Mashable contacted Google, Samsung, HTC and Motorola about the report, and we’ll update this story with any responses.
