Slashdot Mirror
'Godless' Apps, Some Found In Google Play, Root 90% Of Android Phones (arstechnica.com)
Dan Goodin, reporting for ArsTechnica:Researchers have detected a family of malicious apps, some that were available in Google Play, that contain malicious code capable of secretly rooting an estimated 90 percent of all Android phones. In a recently published blog post, antivirus provider Trend Micro said that Godless, as the malware family has been dubbed, contains a collection of rooting exploits that works against virtually any device running Android 5.1 or earlier. That accounts for an estimated 90 percent of all Android devices. Members of the family have been found in a variety of app stores, including Google Play, and have been installed on more than 850,000 devices worldwide. Godless has struck hardest at users in India, Indonesia, and Thailand, but so far less than 2 percent of those infected are in the US. Once an app with the malicious code is installed, it has the ability to pull from a vast repository of exploits to root the particular device it's running on. In that respect, the app functions something like the many available exploit kits that cause hacked websites to identify specific vulnerabilities in individual visitors' browsers and serve drive-by exploits.Affected apps that have been spotted in Google Play, Android's marquee app store, are largely flashlight, Wi-Fi apps, as well as copies of popular games.
Every time I hear the "virus available from Google Play" I think "boy, if they could find this, wouldn't Google?"
It's no wonder I use the superior iPhone, backed by a company that actually cares about security and privacy.
Sorry you googtards can't make enough money off your free crapware to afford quality goods.
And for a while I thought this would actually be informative rather than the usual breathless content-free fare.
So the program has access to a vast cache of exploits that it uses to root the phone.
And then it does.. what? The summary makes it sound like Godless is just a root tool.
these malware "contain malicious code capable secretly rooting an estimated 90 percent of all Android phones"
well there are malware/viruses/etc that are "capable" of doing damage to lot more percentage of variety of computing devices running variety of software.
but they need to get installed/infected/whatever.
but these seems not be all that successful, in that crucial step, even with apps in google store
so don't get too excited.
public warnings are ok, and beneficial . but screaming is too much.
I see. Verizon and Samsung won't let me root my phone, but Russian and Chinese hackers can. Thanks Verizon and Samsung.
Cool, any way we can get the source code? I need to root my phone, and AT&T has persisted in maintaining an encrypted bootloader which means I have to jump through many hoops to fully use my $300 device. I want AT&T admins off my phone.
public warnings are ok, and beneficial . but screaming is too much.
I didn't see/hear any "screaming"; but I would say, if there were malware in the iOS App Store that could root 90% of iPhones in use, I'd want Slashdot to be right on it!
This wouldn't have happened if Android had been more intelligently designed.
The only thing necessary for evil to triumph is for it to be pitted against a slightly greater evil
An iPhone may be right for those people who are not interested and will not become interested in any of the following types of applications, which Apple expressly prohibits in the App Store:
(Reasoning)
stop being a cheap-ass and buy a new phone.
And put the old phone to what use? Adding to the growing e-waste problem?
Members of the family have been found in a variety of app stores, including Google Play, and have been installed on more than 850,000 devices worldwide.
But not including F-Droid
And since when is root "malware"?
Since intruders started using it to give root access to someone other than the phone's owner, such as someone using information stored on the phone for financial crimes.
Where can I get those universal exploits? Without the malware part, of course... I just need to recover some deleted data. Otherwise I'll have to unlock the bootloader, and that voids the warranty.
1) The security model is broken by design.
Android barely restricted apps from taking over your entire phone with an agree box until only fairly recently with Marshmallow.
2) The updating model is broken by design
Carriers don't care if your phone OS is out of date. Manufacturers don't care if your phone OS is out of date.
Bottom line constraint from the supply side - They both want to sell you a new phone or contract.
Bottom line constraint from the developer side - No major punitive incentives from Google to force upgrade have been passed to Vendors, Carriers.
Some variants are just the bare bones needed to install a payload which then waits for remote C&C instructions.
I really hate it when articles go on and on about how certain malware was found in unspecified apps on the play store. I assume that Google took them down as soon as they were notified. But let's name the apps and the publishers, please. What specific apps contained this malware?
So malware can get root on my phone but I cant?
We're all in deep shit unless we get right with God.
https://youtu.be/i_9aTfGgF0c
You are welcome on my lawn.
So that flashlight app that wanted access to my network, contacts list, photo gallery, and storage media was actually installed by some people?
But does the user get any warning or accessibility to the root ?
I might finally be able to root this piece of crud HTC that refuses to root using any system that I have found so far,just keep installing dodgy looking flashlight apps and keep usingchecking root checkers until one works !!!
... I haven't been able to access the Google Play store since the Android update I got back in April 2015.
CUR ALLOC 20195.....5804M
We would list the apps affected, but then we couldn't get into your phone anymore.
Go Stand In Line At The Apple Store!!
Never have; never will.
But I'd rather stand in line at the Apple Store for a few hours than spend two days reentering new CC information and changing passwords in everything, everywhere because my identity was compromised through malware on my smartphone...
Oh, and in case you haven't noticed, changing your name, birthdate and SSN isn't exactly an option for most people not working as "assets" for the CIA...
to root my Android 6.0 phone. I should never have upgraded. I really miss my old rooted phoned.
Nevermore.
(Checks Phone). Running 6.0.1... not seeing what the issue is.
I've abandoned my search for truth; now I'm just looking for some useful delusions.
Aren't you reaching a bit here. First the user has to download and install the malware and give it the admin password. How in gods name do you manage to read into that as 'rooting' the device. Do you have to serve up that self serving Microsoft propaganda on slashdot. Ars Technica -> Condé Nast->Microsoft-> Ars Technica
That probably explains why AT&T pushed out an update to 6.0.1 this week. They are usually a few versions behind, so this seemed like a pretty quick update...
*** *** You're just jealous 'cause the voices talk to me... ***
Except you don't have to install any app on American phones to be tracked, sniffed, and profiled thanks to Google.
Do you think it is news if somebody besides Google and the Americans government has access to your phone but never a story about how your data is stolen by corporations in America?