Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

2 Minute Threat Brief: Android Toast Overlay Attack

Summary: Unit 42 released details of a vulnerability affecting Android devices running operating systems older than 8.0 Oreo, which exposes users to an Android Toast Overlay attack; patches are available. The flaw abuses Android's Toast pop-up notification feature to place an attacker's window over a legitimate app, so users interact with the overlay instead of the app and can install malware, grant it full administrative privileges, or lock the device.

Why it matters: With this vulnerability, attackers no longer need the two conditions past overlay attacks depended on, so malicious apps from outside Google Play can carry out the attack without requesting the "draw on top" permission. Any Android device still on a version prior to 8.0 remains exposed until it is updated.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related