According to Gal Beniamini, a specialist in Project Zero, vulnerabilities allow access to services and applications installed on the phone and among them the attacker could get access to emails, social networks, messenger apps and even banking applications. Not only that even this severe flaw could allow the attacker to take control of the affected devices without any user interaction and even the user won’t know at all if a malicious person connected to the same network could very easily and silently trespass into the device. Project Zero demonstrated how the vulnerability can be exploited via Google Nexus 6P running on Android 7.1.1 Nougat. The list of vulnerable smartphones includes Nexus 6, Nexus 6P, Apple iPhone 4 and above and a high number of top-of-the-line Samsung smartphones. Despite the exploit, both the tech giant Google and the tech giant Apple have already fixed this problem with patches. iPhone devices with an upgraded operating system no longer suffer from this vulnerability. The tech giant Google has also made the patches available for Android devices and has fixed the bug, however, some vendors ship their own updates and may have crashed the update file. So, if you want to follow the complete research, with graphics and images demonstrating with a cyber crime action could happen, visit the official Google Project Zero blog.
Δ
