Hacking Gmail with 92 percent success

[KillerBee]

http://www.sciencedaily.com/releases/2014/08/140821124837.htm

The researchers tested the method and found it was successful between 82 percent and 92 percent of the time on six of the seven popular apps they tested. Among the apps they easily hacked were Gmail, CHASE Bank and H&R Block. Amazon, with a 48 percent success rate, was the only app they tested that was difficult to penetrate.


They also have some videos ...
https://sites.google.com/site/uistateinferenceattack/demos

 

[Ketchup]

Hmm, so it looks like the moral of the store is don't have important information on your smart phone until the issue is fixed.

Yeah, that won't happen. But, I don't understand why you would put yourself it a position to get the malicious content in the first place.

The attack works by getting a user to download a seemingly benign, but actually malicious, app, such as one for background wallpaper on a phone.

So, are people just going anywhere and everywhere to find apps for their phone?

 

[KillerBee]

or find a permissions app to check and set the 'network access' of all the other apps

 

[Sattern]

I have never owned a smart phone and don't see myself getting one until these vulnerabilities are fixed.

They are nice to have, but they barely have any security on them.

 

[KillerBee]

Ran the Avast free Security checker on my phone

It says everything passed but doubt it takes into account whatever these guys used in their demo malware app.

 

[KeithP]

The attack works by getting a user to download a seemingly benign, but actually malicious, app, such as one for background wallpaper on a phone.

So basically, if you install malware on your phone (or computer) your data is at risk. I hope they get the word out about this, people should be aware of this danger! 🙄

-KeithP

 

[John Connor]

or find a permissions app to check and set the 'network access' of all the other apps

Is there a permissions app for Android 2.2?