Undetected Android vulnerability enables a hidden application to invade banking apps, potentially compromising user finance data
In a recent revelation, security researchers have discovered a significant security flaw in the Android system, dubbed Tapjacking. This vulnerability has been found to affect around 80% of the nearly 100,000 apps that have been tested, potentially putting millions of smartphone and tablet users at risk.
The security flaw, if exploited, could allow malicious apps to take control over your device. These malicious apps, often disguised as legitimate software, can secretly start other apps on your phone or tablet without your knowledge. To make matters worse, they often use animations, such as those with a long duration and high transparency, to prevent users from noticing this unauthorised activity.
The Android banking Trojan known as ERMAC 3.0 is one such malicious app that has been found to exploit this vulnerability. This Trojan, along with its entire source code, was discovered in an unsecured directory, exposing its existence to the researchers. The Trojan is known to attack over 700 apps, including banking, shopping, and cryptocurrency applications.
Fortunately, developers have reacted swiftly to this discovery. They have closed the security flaw in large parts, offering a glimmer of hope for Android users. The developers of Android, Firefox, and Google Chrome have been informed about this security flaw, and it is expected that they will take necessary measures to protect their users.
Despite the potential threat, it is important to note that this security flaw has not yet been exploited. However, it serves as a stark reminder of the importance of digital security and the need for vigilance in the face of ever-evolving cyber threats.
As always, it is advisable to download apps from trusted sources, keep your device's software updated, and be wary of any suspicious activity on your device. By taking these precautions, you can help ensure the safety of your personal information and digital assets.
