Live data from Hacker News

Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

blog.trendmicro.com

1–10 of 66 posts

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#3
> The malware masquerades as a legitimate or popular app that uses the names App, MMS, whatsapp, and even Pokemon GO.

OK, so the attack vector here is installing dodgy stuff off the Play store? Or not the play store but from another source, such as an ad?

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#5
post #3

> The malware masquerades as a legitimate or popular app that uses the names App, MMS, whatsapp, and even Pokemon GO. OK, so the attack vector here is installing dodgy stuff off the Play store? Or not the play store but from another source, such as an ad?

All of the above, it's a payload that is part of multiple different attacks.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#6
This site is a great comfort to me after losing my job [Check Details Here⇒> http://cutt.us/7N2sG ]. I have sought for a new job without success, until a friend suggested online jobs for me, and after making some research I stumbled upon this site and since then I no longer feel the loss of my former job. I even earn more than I do before. Show less

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#8
post #4

(How) does this bypass the permissions system?

It was (still is?) a common practice to grant all permissions when installing an app from Google Play. Most people don't even look at the "annoying" popup that lists permissions to be granted and just press "accept" without ever reading it.

Re: Android Backdoor GhostCtrl Can Silently Record Your Audio, Video, and More

#9
post #8
post #4

(How) does this bypass the permissions system?

It was (still is?) a common practice to grant all permissions when installing an app from Google Play. Most people don't even look at the "annoying" popup that lists permissions to be granted and just press "accept" without ever reading it.

On recent Android versions, permissions are prompted one by one, whenever an API that needs that permission is first called.

Each individual permission is prompted for and can individually be denies.

I personally consider this an improvement, though I realize many (probably most) users will just click through anyway.

Post reply on HN