Android Flaw Lets Hackers Hijack System Updates

[Wireless News]

http://l.yimg.com/bt/api/res/1.2/aI_vGvmsjr.yovHO63Y_wQ--/YXBwaWQ9eW5ld3M7Zmk9ZmlsbDtoPTg2O3E9NzU7dz0xMzA-/http://media.zenfs.com/en-US/homerun/techmedianetwork.tomguide.com/a0e4fa7f521bf83eec0c1833ba8fa241 (http://news.yahoo.com/android-flaw-lets-hackers-hijack-175339634.html)Keeping your Android device updated with the latest version of the mobile operating system is one of the best ways to keep your smartphone or tablet safe. Yet a new proof-of-concept exploit from a security research team shows that malicious hackers could create harmless-looking apps that lie in wait and turn on their users only when devices are updated. Researchers from the System Security Lab at Indiana University and Microsoft put together a paper on the topic, which they plan to present at the IEEE Symposium on Security and Privacy in May. The paper demonstrates that a weakness in the way Android handles app permissions makes it possible to create "sleeper" apps that become malicious after system updates.



More... (http://news.yahoo.com/android-flaw-lets-hackers-hijack-175339634.html)