BackAndroid vulnerability can make your phone unresponsive
Google knows about the problem, but will rely on smartphone makers to release updates for phones
Premium
Security firm Trend Micro has found a vulnerability in the Android operating system which can lead to a device becoming silent and completely unresponsive. The fault lies with Android’s media-server service, which runs automatically in the background on all Android devices.
This comes just days after security researchers found that a simple message laced with malware can hack your phone and send all the data to the person who sent it. Read more
The media-server service is used to index all the media files stored on the phone or tablet. It can be exploited in two ways. First, if you install an app that has malware attached to it, and is designed to run as soon as the app is installed on the device. Second, a “malformed" Matroska video (.MKV format) video file that sets itself to auto start with the Android operating system can lead to the phone crashing without warning.
Once the malware starts working on the phone, it’ll keep forcing the media-server service to crash. The result is that the phone or tablet will go into the silent mode automatically—there will be no ringtone, text tone or notification sounds. The user will get no incoming call or message notification, and even if they do know there is an incoming call, they won’t be able to accept it.
The second stage of this attack is when the phone becomes completely unresponsive—if the phone screen is locked, it cannot be unlocked and the user cannot go to the home screen or open any app.
Android versions starting from v4.3 (Jelly Bean) all the way through v5.1.1 (Lollipop) are at risk.
How do you save yourself from this security threat? First, do not download any app from sources other than the Google Play Store. Yes, it is enticing to download apps for free, particularly the ones that are otherwise paid apps on the Play Store. But it is these apps that can always be tweaked by hackers to run malicious code on your phone. Also, while you may love to spend time watching random videos on the Internet, refrain from downloading and saving them on the phone.
Any app that can exploit the media-server service can perhaps be labelled ransomware, a new malware that is increasingly becoming common. The big threat from ransomware is that it can lock the user out of his/her own phone, and force you to pay to restore access.
Trend Micro says it has informed Google about the vulnerability. But the problem with the Android ecosystem is that Google will rely on smartphone makers to release the software update to rectify this problem. And that is an extremely time-consuming process, if at all phone makers even send out this software “patch" to users. Trend Micro says it has updated the Trend Micro Mobile Security suite for Android (download from the Play Store; there is a free version, and a Premium version for $29.99, or about ₹ 1,900) to prevent malicious apps and video files from gaining control of your phone.
Unlock a world of Benefits! From insightful newsletters to real-time stock tracking, breaking news and a personalized newsfeed – it's all here, just a click away! Login Now!
