Certifi-Gate: huge Android vulnerability lets hackers take over Samsung and HTC phones

Software that is pre-installed on phones could be hijacked to take control of them, researchers say

Andrew Griffin
Friday 07 August 2015 12:05
Comments

Millions of Android phones could be easily hijacked, using software that was installed on them by their manufacturers.

Many companies install “remote support” apps onto their phones, which are intended to help customers and can’t be removed. But they are given special access to the phone, which hackers can break into and then use.

Exploiting the privileges could let people “steal personal data, track device locations, turn on microphones to record conversations”, according to Check Point, the security firm that found the hack and named it “Certifi-Gate”.

Phones and tablets made by HTC, LG, Samsung, and ZTE and many other manufacturers are vulnerable to the hack.

The affected companies have been notified about the hack and are pushing out fixes, according to Check Point. But the problem can only be fixed with a security update, and Android phones are notoriously slow to receive them, though manufacturers have committed to push out fixes more regularly.

Check Point has made an app that will check whether phones are vulnerable to the hack and whether they have been infected. It is available on the Google Play Store, and is called “Certifi-gate Scanner”.

Register for free to continue reading

Registration is a free and easy way to support our truly independent journalism

By registering, you will also enjoy limited access to Premium articles, exclusive newsletters, commenting, and virtual events with our leading journalists

Please enter a valid email
Please enter a valid email
Must be at least 6 characters, include an upper and lower case character and a number
Must be at least 6 characters, include an upper and lower case character and a number
Must be at least 6 characters, include an upper and lower case character and a number
Please enter your first name
Special characters aren’t allowed
Please enter a name between 1 and 40 characters
Please enter your last name
Special characters aren’t allowed
Please enter a name between 1 and 40 characters
You must be over 18 years old to register
You must be over 18 years old to register
Opt-out-policy
You can opt-out at any time by signing in to your account to manage your preferences. Each email has a link to unsubscribe.

Already have an account? sign in

By clicking ‘Register’ you confirm that your data has been entered correctly and you have read and agree to our Terms of use, Cookie policy and Privacy notice.

This site is protected by reCAPTCHA and the Google Privacy policy and Terms of service apply.

Join our new commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged in