Android Vulnerabilities and Malwares
By: Shubh Shah
Tags: Android, Malware, Vulnerability

A Vulnerability is something that allows an unplanned and unwanted actions that may cause harm to device. Android application vulnerabilities have become a problem nowadays because of Google Play Store’s open format, and also because users can sideload apps,and removing oversight regarding the safety of apps.

There are also regular updates and patches to the Android operating system. Android does not always update itself in a timely manner, and so you have to be aware of updates and security patches to be safe from potential attacks ro from vulnerabilities from entering your Android device.

The latest vulnerability that is worrying users in todays time is the third party advertising frameworks which is integrated to the apps we download.

The framework is called HomeBase SDK or Software Development Kit.

This framework allows the monetisation of applications but as a downside it has an insecure mechanism for the updates which puts the users at risk of an attack. The attackers can intercept the request for the application and can easily attack the device.

Second vulnerability is in analytics libraries as these libraries send the data of the users to analytics companies which then analysed the data and show results to the developers.

The vulnerability here is is the risk of leakage of private information to other companies or developers.

Android specific vulnerabilities are always frequently evaluated and updated because of the new technologies coming into the market.

Most common Android vulnerabilities-

1. Accessing unsecured networks and downloading applications.

2. Infections via Google verification process.

3. Entry of malwares from a corporate network via USB cables.

4. During data transfers between applications there is a risk of transmission of malicious applications.

The OWASP Top 10 is a great source to be aware of the biggest threats and vulnerabilities that are present in current times.

OWASP stands for the Open Web Application Security Project. It is an online community that produces articles, documentation, tools, and technologies in the field of security. OWASP Top 10 is the list of the 10 most common application vulnerabilities. It also shows their risks, impacts, and counter-measures.

T he Top 10 OWASP vulnerabilities in 2020 are:

Injection

Broken Authentication

Sensitive Data Exposure

XML External Entities (XXE)

Broken Access control

Security misconfigurations

Cross Site Scripting (XSS)

Insecure Deserialization

Using Components with known vulnerabilities

Insufficient logging and monitoring

Malware is a malicious software or an app that targets mobile phones or wireless Personal Digital Assistants (PDA). They cause the collapse of the system and loss or leakage of confidential data or information. As mobile phones have become more and more common and technology has grown, it has become increasingly difficult to ensure their safety and security against malware or virus attacks.

Because of Google’s lack of focus on security aspects in applications. Mobile malware is on the rise, with attackers shifting their efforts to smartphones and tablets as global mobile markets come under attack.

Popular Types of Mobile Malware are:

· Banking Malware

· Mobile Ransomware

· Mobile Spyware

· Mobile Adware

· MMS Malware

· SMS Trojans

Malicious software has been around as long as computers. In 1986, the first PC-based malware, known as Brain, was released.

Some famous examples of malwares:

· ILOVEYOU — considered as one of the first cases of social engineering used in malware attacks.

· WannaCry — One of the worst ransomware attacks in history, introduced via phishing emails in 2017.

· Thanatos — As cryptocurrency started to gain traction, Thanatos became the first ransomware to accept payments in Bitcoin.

· Triada — It is a sophisticated, complex, stealthy, and professionally written malware suite.