Microsoft has reportedly discovered a serious security flaw in the Android operating system.
©GEPA; Go ahead
As reported by “Build,” Microsoft has discovered a serious security hole in the Android operating system that leaves billions of smartphones worldwide vulnerable to hacker attacks.
The vulnerability affects almost all Android devices and can be exploited through a faulty implementation of the so-called content provider system, which is responsible for managing data between different applications.
Dangerous handling by “dirty streams”.
What makes this vulnerability special is the method hackers use to attack it. Using the “dirty streams” method, they can send malicious files to other applications, which then unwittingly work with these files. If the file is saved or executed, the malware can be activated the next time the infected app is opened. This attack method takes advantage of Android’s security feature, which protects against precisely such threats.
Popular applications among victims
What is particularly worrying is that popular apps such as Xiaomi File Manager, which has been downloaded over a billion times, and WPS Office, which has over 500 million downloads, are also affected by this vulnerability. Microsoft warns that without knowing the complete list, the problem could be much larger, as many applications could be affected.
How to protect your device
The good news: Several app developers, including Xiaomi and Kingsoft (the developer of WPS Office), have already been informed and are working on patches to close the security hole. However, Android users should take some precautions to protect their devices:
- Regular Updates: Always keep your Android system and all installed apps up-to-date.
- App sources: Install apps only from trusted sources like the official Google Play Store.
- Antivirus applications: A reliable antivirus application detects suspicious files and blocks them before they cause harm.
Because the vulnerability is widespread and the attack method appears to be relatively simple to implement, hackers may quickly exploit this vulnerability.
