25 Smartphone Models Found Shipping With Severe Firmware Flaws: Defcon 2018
This year’s Defcon witnessed many interesting events, including the hacking of voting machines by 11-year-olds and macOS’s vulnerabilities to grant permissions to Malware with the help of invisible clicks.
In another interesting event at Defcon 2018, security researchers from US Mobile and IoT security firm Kryptowire have unearthed the fact that the default apps of 25 Android smartphone models are affected by about 47 vulnerabilities. 11 of the affected smartphones are sold in the US.
These vulnerabilities have been found in some of the big OEM brands. Not only some default apps have issues, but vulnerabilities have also been found in the firmware of core device drivers. In the case of firmware, drivers cannot be removed without affecting the phone’s core functionalities.
Some vulnerabilities involve crashing of devices while other could allow an attacker to send and receive text messages from user’s phone, obtain the affected users’ contact list, record phone screen, grant permissions to install third-party apps without letting users know and even wipe out the device’s entire data.
List of Affected OEM’s
Smartphones from small as well as big OEMs are under the radar. OEMs such as ZTE, Leagoo, and Doogee have been included in the list of insecure Android device manufacturers previously as well. Leagoo and Doogee have been reported to come preinstalled with apps that have banking trojans.
Here is a list of all the affected smartphone models.
- ZTE ZMAX Pro
- ZTE ZMAX Champ
- ZTE Blade Spark
- ZTE Blade Vantage
- Vivo V7
- Sony Xperia L1
- SKY Elite 6.0L+
- Plum Compass
- Orbic Wonder
- Oppo F5
- Nokia 6 TA-1025
- MXQ TV Box
- LG G6
- Leagoo P1
- Leagoo Z5C
- Essential
- Doogee X5
- Coolpad Revvl Plus
- Coolpad Canvas
- Coolpad Defiant
- Asus Zenfone 3 Max
- Asus Zenfone V Live
- Alcatel A30
Does your smartphone feature in this list? Tell us in the comments.
Source: fossbytes
Latest Jobs
-
- B2B Marketing Manager (Managed Services)
- London
- Up to £45,000
-
Experienced B2B Marketing Manager is needed for a Managed Services / Cloud Technology provider in London. The B2B Marketing Manager will be responsible for the creation, implementation and improvement of UK digital marketing content, campaigns & strategy. MUST have current experience within a b2b IT environment. Experience with marketing automation platforms such as Marketo, Hubspot etc is highly desirable. New position, actively looking to interview and appoint before the new year. CH7643 London Up to £45,000 (Marketing Jobs, Marketing Manager Jobs, Cloud Computing Jobs)
-
- Mission Critical Shift Engineer
- Hertfordshire
- Up to £42,000 Base
-
A Mission Critical Shift Engineer is needed for an international data centre business in St Albans The Mission Critical Shift Engineer will be responsible for M+E engineering (support, installations, reactive/pro-active works etc.) The role will work a continental shift pattern, 4 on – 4 off. Alternating between days and nights. Other responsibilities include; Optimisation of Data Centre Infrastructure Maintenance and upgrades of M+E infrastructure. Smooth operations of the data centre property Developing a draft specification of new and other electrical projects Commission of upgrades a new equipment Requirements Electrical Engineering Degree / HNC / HND NVQ Level 3 & Testing & Inspection Qualifications Current engineering experience in a Data Centre / Data Center Environment Unfortunately, our client is unable to provide sponsorship for this opportunity and the candidate must be commutable to London. (Data Centre Jobs, Data Center Jobs, Electrical Engineering Jobs, Electrical Engineer Jobs) Ref PG7616
-
- Sales Engineer (Telecoms & Cloud Services)
- London
- Upto £85,000 + 20% bonus + benefits
-
Sales Engineer / Presales Consultant to focus on Cloud services is needed for this Global Tier 1 carrier. You will be working with Enterprise customers helping to design Cloud solutions. You will be responsible for working alongside sales providing presales technical consultancy around my client's cloud services. You will be responsible for providing support for new business opportunities in terms of responding to RFIs & RFPs, understanding customer network requirements, high-level network architecture & design (including supplier selection on a global basis) and technical handover to network implementation teams. This is a great opportunity to join a global player who are growing their Cloud services. You will require a successful track record in the telecommunications arena ideally from a global tier 1 ISP or network provider, with a demonstrable track record in designing complex enterprise solutions. A Sales Engineer needs to be technically astute and has had experience in the design, presentation, and implementation of Wide Area Networks (WAN). They need to understand a range of Layer 1, 2, and 3 technologies (Ethernet, SDH, MPLS, IP, etc) and build a solution based on the best technology to meet a customer’s requirements. In addition, they should have an understanding and experience in Infrastructure solution design for optimising end-user experience when interacting with enterprise platforms notably MS O365, SFDC, Azure and AWS Unified threat Management security solutions (i.e. firewall, IPS/IDS, web filtering and proxy) Network routing and switching protocols and technologies (esp. Cisco) SD-WAN and SDN technologies Skilled Experience in designing and deploying hybrid cloud architectures and managing migrations from physical to virtual environments If you have any questions about this role, give us a call on 0044208 663 4030 or contact/send your CV to robert.anderton@dclsearch.com Ref RA7292 (Telecommunications Jobs, Telecoms Jobs, Cloud Computing Jobs, Cloud Jobs, Presales Jobs, Sales Engineer Jobs, Sales Engineering Jobs)
-
- Data Scientist (Analytics)
- London
- Up to £50,000 Base
-
Data Scientist - Analytics London Up to £50,000 Base Ref: PG7641 We are currently working with a Services business who are currently looking for a Data Scientist (Analytics) who has client-facing experience within the insurance industry. The Data Scientist (Analytics) will be responsible for tasks such as; Developing, deploying & testing state of the art Machine learning technology Framing business questions, testing hypothesis, and demonstrating analytical models. Stakeholder Engagement Pricing Optimisation. BAU Experience Required Client Facing experience within Insurance business's Pricing Optimisation Machine Learning; Clustering, Regression, Decision trees etc. Strong background in Python including modelling knowledge, ideally Pyspark AWS Cloud (Data Processing & Cleaning)