{"id":76050,"date":"2019-12-03T15:02:38","date_gmt":"2019-12-03T07:02:38","guid":{"rendered":"https:\/\/www.i-sprint.com\/?p=76050"},"modified":"2020-04-29T15:52:08","modified_gmt":"2020-04-29T07:52:08","slug":"strandhogg-news","status":"publish","type":"post","link":"https:\/\/www.i-sprint.com\/ja\/strandhogg-news\/","title":{"rendered":"Serious Android Flaw Identified, and most of the popular apps in APAC are vulnerable"},"content":{"rendered":"

Serious Android Flaw Identified, and most of the popular apps in APAC are vulnerable
\n<\/strong>YESsafe AppProtect+ protects Android Apps against StrandHogg and other attacks<\/p>\n


\nSingapore, 3 December 2019<\/strong> \u2013 StrandHogg, a serious Android flaw, has been reported by BBC News and i-Sprint has found that most of the popular Android Apps in APAC are also vulnerable. StrandHogg can be very damaging and costly to Android users.<\/p>\n

\"\"<\/p>\n

In recent news reported by BBC News<\/a>, a Norwegian app security company, Promon, has identified a serious Android following an attack on several customer bank accounts and detected a vulnerability in the Android system.\u00a0 Promon named it as StrandHogg that allows real-life malware to pose as legitimate apps, with users unaware they are being targeted.\u00a0 Promon scanned top 500 popular mobile apps in the world, and they are vulnerable to StrandHogg.<\/p>\n

StrandHogg is unique because it can be exploited with or without root access to any Android devices, and it affects all versions of Android, including Android 10.\u00a0 By taking advantage of a weakness in the multitasking system of Android to enact powerful attacks, this allows malicious apps to masquerade as any other app on the device. This exploit is based on an Android control setting called \u2018taskAffinity\u2019 which allows any app – including malicious ones – to assume any identity in the multitasking system they desire freely.<\/p>\n

i-Sprint<\/a> has also done our own investigation by sampling 100 popular Android Apps across APAC and we found that all of them are susceptible to this vulnerability.\u00a0 The consequences of exploiting this vulnerability by a malware include steal of usernames and passwords, drain bank accounts, track victim\u2019s movements and location, steal private SMS messages and photos, access victim\u2019s contact list and phone logs, spy through a phone\u2019s camera and microphone.<\/p>\n

i-Sprint product, YESsafe AppProtect+<\/a>, is a Runtime Application Self-Protection (RASP) solution that helps companies to protect their iOS and Android apps by blocking attacks in real-time.\u00a0 AppProtect+ proactively protects mobile apps against various risks and attacks.\u00a0 AppProtect+ can prevent passive attacks (like reverse engineering, repackaging and source code modification), and respond by taking necessary measures if real-time attacks are detected during app running. Mobile apps protected by the solution can also run securely even on a highly infected mobile device.<\/p>\n

Albert Ching, CTO of i-Sprint, said \u201cOur latest version has introduced a new feature for the protection of task hijacking as reported in StrandHogg.\u00a0 Therefore, our existing customers are equipped with the necessary protection tool even before the announcement of the StrandHogg vulnerability.\u00a0 We will continue to deliver new security features to help our customers to secure and protect their mobile apps against various attacks.\u201d<\/p>\n

Dutch Ng, CEO of i-Sprint said, \u201cAs people are spending more time using their mobile devices to browse content, online shopping, transaction, etc., cyberattack cases targeting on smartphone devices are also increasing. Companies need to be more alert and diligent in ensuring their apps will not be the next victim of such vulnerability.\u201d<\/p>\n

i-Sprint is currently providing a free assessment to organizations who want to find out whether their app is susceptible to StrandHogg vulnerability. For interested companies, please click here<\/a> for more information and to participate in the free assessment.<\/p>\n

Be proactive, be safe, secure your company app with YESsafe AppProtect+.<\/p>\n

For enquiry, please email i-Sprint at enquiry@i-sprint.com<\/a>.<\/p>\n<\/div>

<\/div><\/div><\/div><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"

StrandHogg, a serious Android flaw, has been reported by BBC News and i-Sprint has found that most of the popular Android Apps in APAC are also vulnerable. StrandHogg can be very damaging and costly to Android users.<\/p>\n","protected":false},"author":2,"featured_media":76058,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"episode_type":"","audio_file":"","podmotor_file_id":"","podmotor_episode_id":"","cover_image":"","cover_image_id":"","duration":"","filesize":"","filesize_raw":"","date_recorded":"","explicit":"","block":"","itunes_episode_number":"","itunes_title":"","itunes_season_number":"","itunes_episode_type":"","footnotes":""},"categories":[167],"tags":[],"class_list":["post-76050","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-press-ja-2"],"_links":{"self":[{"href":"https:\/\/www.i-sprint.com\/ja\/wp-json\/wp\/v2\/posts\/76050","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.i-sprint.com\/ja\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.i-sprint.com\/ja\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.i-sprint.com\/ja\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.i-sprint.com\/ja\/wp-json\/wp\/v2\/comments?post=76050"}],"version-history":[{"count":4,"href":"https:\/\/www.i-sprint.com\/ja\/wp-json\/wp\/v2\/posts\/76050\/revisions"}],"predecessor-version":[{"id":76858,"href":"https:\/\/www.i-sprint.com\/ja\/wp-json\/wp\/v2\/posts\/76050\/revisions\/76858"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.i-sprint.com\/ja\/wp-json\/wp\/v2\/media\/76058"}],"wp:attachment":[{"href":"https:\/\/www.i-sprint.com\/ja\/wp-json\/wp\/v2\/media?parent=76050"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.i-sprint.com\/ja\/wp-json\/wp\/v2\/categories?post=76050"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.i-sprint.com\/ja\/wp-json\/wp\/v2\/tags?post=76050"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}