Editor’s note: We have updated this article to highlight the fact that the vulnerable applications in question have been patched by their respective developers. Additionally, we changed the title to indicate that the apps themselves are not malicious and do not need to be removed. We will update this story as we know more.
Microsoft sounds the alarm on recent discovery critical security vulnerability in Android called “Dirty Stream” which can allow malicious applications to easily hijack legitimate applications. Even worse, this flaw affects multiple applications with hundreds of millions of installations. If you have one of the best Android phones, here’s what you need to know to protect your data.
The vulnerability relates to the ContentProvider system prevalent in many popular Android apps, which manages access to structured data sets intended to be shared between different apps. It’s basically what allows your Android apps to talk to each other and share files. To protect users and prevent unauthorized access, the system includes safeguards such as strict data isolation, unique permissions attached to specific URIs (Uniform Resource Identifiers), and path validation security.
According to Microsoft’s alert, two vulnerable applications that have since been patched include Xiaomi Inc. File Manager(1B+ facilities) andWPS Office(More than 500 million installations).
What makes the Dirty Stream vulnerability so devious is how it manipulates this system. Microsoft has discovered that hackers can create “custom intents,” messaging objects that facilitate communication between components in Android apps, to bypass these security measures. By exploiting this loophole, malicious applications can send a file with a crafted file name or path to another application using a custom intent, introducing harmful code disguised as legitimate files.
From there, a hacker could trick a vulnerable application into overwriting critical files within its private storage space, and the results can be devastating. As beepcomputer Simply put, Dirty Stream essentially turns a common operating system-level feature into a weaponized tool to execute unauthorized code, steal data, and even hijack an application without the user even realizing it.
“Executing arbitrary code can provide a threat actor with complete control over an application’s behavior.” Microsoft said in a security bulletin this week.. “Meanwhile, token theft can provide a threat actor with access to sensitive user accounts and data.”
How widespread is this threat?
Microsoft research found that this vulnerability is not an isolated problem. The company discovered incorrect implementations of the content provider system in many popular Android apps.
“We identified several vulnerable apps in the Google Play Store representing more than four billion installs,” Microsoft explained. “We anticipate that the vulnerability pattern could be found in other applications.”
Given the nature of how this vulnerability works, it is difficult to know exactly how many other legitimate applications may have been affected. But it is safe to assume that this potential risk is on an industrial scale until all applications are patched.
How to stay safe from Android malware
When it comes to staying safe from Android malware, one of the easiest and simplest things you can do is limit the number of applications on your phone. I know this may seem silly, but think about it this way: the fewer apps you have, the less likely it is that one of them will turn out to be malicious. Before installing any new app, first ask yourself whether you really need it or not.
From here, you’ll want to make sure you install new updates and security patches as soon as they become available. These often fix vulnerabilities and zero-day flaws that hackers can use to launch attacks. While you can use an old phone For longer than expected, it’s worth upgrading to a new device once your current phone no longer receives security updates, especially if you want to stay safe.
You also want to make sure that Protect Google Play is enabled on your device. This pre-installed app scans both your existing apps and any new ones you download for malware. Likewise, if you want extra protection and potentially even some extra features like vpn either password manageryou also want to see the the best antivirus apps for Android.
As ‘Dirty Stream’ is a very serious flaw, it is likely that Google is already working on a fix, as Microsoft would have shared all the information it discovered with the search giant before publishing its alert.
- New Wpeeper Android Malware Adds Backdoor to Your Phone to Steal Your Data
- Google blocked more than 2 million dangerous Android apps from the Play Store last year
- FBI warns that scammers are using ‘free’ verification services to trick dating app users
