Android Vulnerability Lets Hackers Hijack Your Phone with Malicious Videos

Dear Android Users... Please Update Your Devices Right Now... or Buy a Different Phone!

I really don't understand how such a security flawed Operating System becomes the industry standard. Oh, well, what can we do now? 😕

^{Image Source}

• Windows Phone is a lot safer and cleaner... but unfortunately the public thought it was too futuristic and prefered to stick with Operating Systems built on top of the good old layout developed in the 1980's - Icons on a Grid. Yeah, I know this concept is already proven but are we going to stagnate and never change it ever again? 😒

• iOS is a lot better and safer than Android but sadly, it's only for the Elites, as Apple's prices are too high for the average citizen. 😵

• Blackberry? They didn't even tried. 😛

I admit, we didn't have much offer to choose from... and even so, we went for the worst possible option available in the Market. Now, we must suffer the consequences.

Here are a few excerpts from this article:

If you use a phone running any version of Android between 7.0 and 9.0 (Nougat, Oreo, or Pie), you ought to immediately install the latest security update – or risk getting your handset hijacked by devious video malware.

The culprit is a vulnerability in the aforementioned Android versions (CVE-2019-2107), which enables hackers to remotely execute arbitrary code by sneaking in “specially crafted files,” like videos laced with a malicious payload. Once a victim has opened the file, attackers can gain access to their device.

Developer Marcin Kozlowski has already uploaded a proof of concept for the attack vector on GitHub. “You can own the mobile [device] by viewing a video with [the malicious] payload,” Kozlowski wrote in the documentation.

^{Image Source}

Google has already dropped a fix

While the vulnerability is pretty severe, the good thing is that Google has already rolled out a security update that fixes the issue.

---

Stay safe out there. As much as possible, with this crappy OS.

Source of shared Link

---