25 Smartphone Models Found Shipping With Severe Firmware Flaws: Defcon 2018
This year’s Defcon witnessed many interesting events, including the hacking of voting machines by 11-year-olds and macOS’s vulnerabilities to grant permissions to Malware with the help of invisible clicks.
In another interesting event at Defcon 2018, security researchers from US Mobile and IoT security firm Kryptowire have unearthed the fact that the default apps of 25 Android smartphone models are affected by about 47 vulnerabilities. 11 of the affected smartphones are sold in the US.
These vulnerabilities have been found in some of the big OEM brands. Not only some default apps have issues, but vulnerabilities have also been found in the firmware of core device drivers. In the case of firmware, drivers cannot be removed without affecting the phone’s core functionalities.
Some vulnerabilities involve crashing of devices while other could allow an attacker to send and receive text messages from user’s phone, obtain the affected users’ contact list, record phone screen, grant permissions to install third-party apps without letting users know and even wipe out the device’s entire data.
List of Affected OEM’s
Smartphones from small as well as big OEMs are under the radar. OEMs such as ZTE, Leagoo, and Doogee have been included in the list of insecure Android device manufacturers previously as well. Leagoo and Doogee have been reported to come preinstalled with apps that have banking trojans.
Here is a list of all the affected smartphone models.
- ZTE ZMAX Pro
- ZTE ZMAX Champ
- ZTE Blade Spark
- ZTE Blade Vantage
- Vivo V7
- Sony Xperia L1
- SKY Elite 6.0L+
- Plum Compass
- Orbic Wonder
- Oppo F5
- Nokia 6 TA-1025
- MXQ TV Box
- LG G6
- Leagoo P1
- Leagoo Z5C
- Essential
- Doogee X5
- Coolpad Revvl Plus
- Coolpad Canvas
- Coolpad Defiant
- Asus Zenfone 3 Max
- Asus Zenfone V Live
- Alcatel A30
Does your smartphone feature in this list? Tell us in the comments.
Source: fossbytes
Latest Jobs
-
- REMOTE Cyber Security Operations Engineer. UK
- United Kingdom
- £65,000
-
CH8196 REMOTE Cyber Security Operations Engineer. UK Internal opportunity. New position. Exclusive to DCL Search. You will be the hands on technical eyes and ears of the Cyber security capability actively working to ensure and enhance the adherence to ISO27001 and SOC 2 controls. You role will touch on the following o Security Monitoring- Threat Analysis, Maturing monitoring capability. Utilising SIEM tools o Vulnerability Management- Identifying threats to internal assets- working with internal teams to patch. § Cloud based vulnerability tool experience preferred. o Access Control Management- Mature policy and process of RBAC. Ideally AWS KMS experience. o Vulnerability Testing- Aiding with Pen test scoping in line with identified vulnerabilities. Working internally to plan and track remediation actions. o Security Incident Management- Triaging alerts, evidence capture, escalation, diagnose and fix. o Working within a Cloud based environment. Ideally AWS. o Security Patch Management Support & Assistance – Approach methods, solutions, and policy alignment. o Disaster Recovery planning o Change Management Any CLOUD SIEM experience highly desirable. Contact me today for more information Chris.Holt@dclsearch.com / 07884666351
-
- Senior Product Developer, Microsoft.NET, Remote working
- Netherlands
- Upto €80,000 plus benefits
-
Senior Product Developer is required by a rapidly expanding Cybersecurity Consultancy/Software House to help them develop their new SaaS platform The aim is for this person to join and grow within the business to either lead the team or to move into an Architect role Location is Flexible, and can Work from home if you want, Key responsibliliies will be to Design and implement the customer-facing web UI (Angular, Javascript, etc.) Design and implement back-end components, including Database components and APIs, application We are looking for someone with, Microsoft .Net developer experience working with C#, VB.Net and Powershell Experience with SQL Services and T-SQL Experience working with Interfacing Technologies such as REST, XML, Active Directory and LDAP UI Technologies experience based around Javascript
-
- Senior Product Developer, Microsoft.NET, Remote working
- London
- Upto 65,000 plus benefits
-
Senior Product Developer is required by a rapidly expanding Cybersecurity Consultancy/Software House to help them develop their new SaaS platform The aim is for this person to join and grow within the business to either lead the team or to move into an Architect role Location is Flexible, and can Work from home if you want, Key responsibliliies will be to Design and implement the customer-facing web UI (Angular, Javascript, etc.) Design and implement back-end components, including Database components and APIs, application We are looking for someone with, Microsoft .Net developer experience working with C#, VB.Net and Powershell Experience with SQL Services and T-SQL Experience working with Interfacing Technologies such as REST, XML, Active Directory and LDAP UI Technologies experience based around Javascript
-
- Senior Product Developer, Microsoft.NET, Remote working
- Birmingham
- Upto 65,000 plus benefits
-
Senior Product Developer is required by a rapidly expanding Cybersecurity Consultancy/Software House to help them develop their new SaaS platform The aim is for this person to join and grow within the business to either lead the team or to move into an Architect role Location is Flexible, and can Work from home if you want, Key responsibliliies will be to Design and implement the customer-facing web UI (Angular, Javascript, etc.) Design and implement back-end components, including Database components and APIs, application We are looking for someone with, Microsoft .Net developer experience working with C#, VB.Net and Powershell Experience with SQL Services and T-SQL Experience working with Interfacing Technologies such as REST, XML, Active Directory and LDAP UI Technologies experience based around Javascript