Android bug lets hackers plant malware via NFC beaming

guest · Nov 2, 2019

Android bug lets hackers plant malware via NFC beaming
All Android 8 (Oreo) or later devices are impacted. Google released a patch last month, in October 2019
November 2, 2019
https://www.zdnet.com/article/android-bug-lets-hackers-plant-malware-via-nfc-beaming/

Google patched last month an Android bug that can let hackers spread malware to a nearby phone via a little-known Android OS feature called NFC beaming.

NFC beaming works via an internal Android OS service known as Android Beam. This service allows an Android device to send data such as images, files, videos, or even apps, to another nearby device using NFC (Near-Field Communication) radio waves, as an alternative to WiFi or Bluetooth.
The notification asks the device owner if he wants to allow the NFC service to install an app from an unknown source.

[...] apps sent via NFC beaming on Android 8 (Oreo) or later versions would not show this prompt.
Since there's no prompt for an install from an unknown source, tapping the notification starts the malicious app's installation. There's a danger that many users might misinterpret the message as coming from the Play Store, and install the app, thinking it's an update.
Click to expand...

So, there's no need to panic. Just disable Android Beam and NFC if you don't need them, or update your phone to receive the October 2019 security updates and continue using both NFC and Beam as usual.

A technical report on CVE-2019-2114 is available here.
Click to expand...

Log in or Sign up

Android bug lets hackers plant malware via NFC beaming

guest Guest

Log in or Sign up

Android bug lets hackers plant malware via NFC beaming

guest Guest

Useful Searches