1. Are you ready for the Galaxy S20? Here is everything we know so far!

Is it possible to get malware, just by visiting a website, with untrusted sources off? (via exploit)

Discussion in 'Android Lounge' started by kurkosdr, Nov 9, 2014.

  1. kurkosdr

    kurkosdr Newbie
    Thread Starter

    Hi,

    If you have unstrusted sources set to "off", is it possible to get android malware just by visiting a certain website?

    Theoretically, this can't happen, because the only way to get android malware is to download a "bad" apk from said website, turn untrusted sources on, and open it.

    But practically, every browser has those things called "exploits" which can allow "arbitary code execution". In other words, code can be run and/or be installed in your system, without having to open an app package file.

    I was wondering if that is possible on Android.

    Has it ever happened? (aka, is there a documented case of it happening?) That's the question.



    PS: I also understand malware can get in from "trusted sources" such as the Play Store, but if you only download from a handful of well-known devs (Vector Unit, EA, Gameloft etc) it's not a problem, and it's not relevant to the topic anyway.

    PS: Also, I am not referring to the "man-in-the-middle" vulnerability that can be used to target ad frameworks of certain apps. Let's assume the internet link is trusted and the only bad guy is the website. Unless the aforementioned vulnerability can be used by bad ad agencies to exploit the browser app (stock or chrome).
     



    1. Download the Forums for Android™ app!


      Download

       
  2. Hadron

    Hadron Smoke me a kipper...
    VIP Member

    I'm not aware of any such case. The fact that Android sandboxes all apps, including the browsers, makes this much harder than with say Internet Explorer on a PC.
     
  3. EarlyMon

    EarlyMon The PearlyMon
    VIP Member

    Hadron likes this.
  4. kurkosdr

    kurkosdr Newbie
    Thread Starter

  5. EarlyMon

    EarlyMon The PearlyMon
    VIP Member

    Not sure but I suspect that it's a browser exploit.

    Once the compromised data was removed the problem went away.

    I'd have expected a bad apk to cause the problem to recur.

    For the record, I think that web browsing without ad blocking is wrong. Lots of malware sites disappear with ad blocking in my personal experience.
     
Loading...
Similar Threads - possible malware visiting
  1. Biffos
    Replies:
    10
    Views:
    576
  2. Gobshyte
    Replies:
    4
    Views:
    841
  3. zoezydk
    Replies:
    7
    Views:
    985
  4. louis2008
    Replies:
    4
    Views:
    613
  5. syc0path
    Replies:
    3
    Views:
    1,777
  6. King Mustard
    Replies:
    2
    Views:
    2,063
  7. Oldschool297
    Replies:
    15
    Views:
    1,141
  8. sachertorte
    Replies:
    15
    Views:
    2,476
  9. alexT919
    Replies:
    7
    Views:
    1,712
  10. Oneechan69
    Replies:
    9
    Views:
    2,820

Share This Page

Loading...