Cloak & Dagger is a newly-discovered Android exploit that lets hackers hide malicious activity

Cloak & Dagger is a newly-discovered Android exploit that lets hackers hide malicious activity


Researchers from Georgia Institute of Technology have released a full report on a new attack vector that affects Android up to version 7.1.2. The exploit, called Cloak & Dagger, uses Android’s design and screen behaviors against users, effectively hiding activity behind various app-generated interface elements that lets a hacker grab screen interactions and hide activity behind seemingly innocuous screens.

The team, Yanick Fratantonio, Chenxiong Qian, Simon Pak Ho Chung, and Wenke Lee, have created proof of concept users of the exploit including a bit of malware that draws an invisible grid over the Android screen that exactly mirrors – and can capture – the onscreen keyboard.

“The possible attacks include advanced clickjacking, unconstrained keystroke recording, stealthy…

Read Story

Related Post