Android Root Kit Released

[DapCorderman]

A root kit has been released for Android phones that will allow the stealing of email and text messages. The malicious software was delveloped by security experts in a push to get Google to fix a security flaw in the operating system. While this actual kit may not make it to the wild it shows that someone can develop one who may not be a scrupulous.

Software released for attacking Android phones - Technology & science - Wireless - msnbc.com

 

[Lock-N-Load]

won't be the first unscrupulous potential issue.. just this week they dicovered that some wallpaper developers were collecting an unnecessary amount/types of data off users phones that would not be needed for wallpaper access.

Android wallpaper app that takes your data was downloaded by millions

 

[Dark Jedi]

why I dont acess my bank account and other security stuff on my phone. if they want my text messages or spam email. more power to them.

 

[overcaffein8d]

why I dont acess my bank account and other security stuff on my phone. if they want my text messages or spam email. more power to them.

some people do sms banking.

but yeah, why would anyone care about who's dating who or any of that other foolishness that people text? i mean, who gives a damn?

just my 2

 

[Chugworth]

Well I haven't really read much about this rootkit, but as long as it doesn't come bundled with some reputable application in the Android market, or exploit some web browser vulnerability to launch from a web page, I'm fine.

And if it requires a rooted phone in order to work, then I wouldn't consider it a security flaw at all.

 

[Hangdog42]

And if it requires a rooted phone in order to work, then I wouldn't consider it a security flaw at all.

From what I've seen of the conversation on Slashdot, it apparently does require a user to install it as root. The thing is apparently a kernel module and there is no exploit to gain root. Root has to be granted by the user.