Security Vulnerabilities Allow Hackers to Eavesdrop on Android Conversations

A security flaw was discovered in Android phones that use chipsets made by Qualcomm and MediaTek. This makes millions of mobile phones in danger of being infiltrated by hackers.

The security vulnerability found stemmed from the Apple Lossless Audio Codec or ALAC, an audio format that Apple launched in 2004 to provide lossless data compression for digital music.

After being available open source in 2011, this codec is also widely used by non-Apple devices, including Android phones.

Over the years Apple has kept ALAC updated to patch security loopholes and other bugs. But according to a Check Point Research report, the open source version of ALAC used by Qualcomm and MediaTek has never been updated.

For your information, based on IDC data, 48.1% of all Android phones sold in the US were powered by MediaTek in Q4 2021, while Qualcomm currently holds 47% of the market.

According to a report … Read the rest

Latest Warning: Spyware Hermit Targets Android and iPhone

An Italian company, RCS Labs reportedly spread malware on a number of users in Italy and Kazakhstan. Google said they were victims of the Hermit and modular spyware from RCS Labs.

According to the technology giant, the malware can steal data and also make recordings and calls, quoted from the Threat Post, Monday (28/6/2022).

Google Threat Analysis Group (TAG) researchers Benoit Sevens and Clement Lecigne said attackers would send unique links to their targets to fake apps. This method is to make the victim download and install the spyware that has been prepared.

According to the researchers, the page is in Italian. The website will ask the user to install an application to restore their account.

Both claim that no copycat apps were found in the respective app stores of both Apple and Google.

“We detailed the capabilities we associated with RCS Labs, an Italian vendor using a combination of … Read the rest