News for hackers. Stuff that matters.

A comment on Malicious apps infect 25M Android devices with 'Agent Smith' malware. Parent comment

Re:Malicious apps infect 25M Android devices with 'Agent Smi... by ajross on Thursday July 11, 2019 @10:53AM (#20411958)
Which device? That doesn't sound right. We're in a more or less identical situation, with Galaxy Tab S2's for the kids that we bought three years ago. And indeed, they're running comparatively ancient Android 7.0 images and will never see a version bump again.

They do, however, continue to see security updates. And in particular they've been patched against the vulnerability in the linked article. I'd be very surprised if yours was any different.

[ Parent | on HN ]
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by nolok on Thursday July 11, 2019 @11:07AM (#20412078)
He's probably wrong, but inadvertently so. Most people seem to confuse android version update with security update, which is compounded by the fact that security updates on android are very "discreet" all things considered, and you don't notice it much.
[ Parent | on HN ]
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by pmlnr on Thursday July 11, 2019 @11:47AM (#20412437)
> comparatively ancient Android 7.0

7.0 is ancient? 5.1, or rather 4.4 is ancient.

[ Parent | on HN ]
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by Santosh83 on Thursday July 11, 2019 @01:27PM (#20413491)
The Android ver on my phone is 4.1. Still runs just fine, but then again all I use it for are calls/SMS, so there's little scope to be exploited.
[ Parent | on HN ]
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by CannisterFlux on Thursday July 11, 2019 @02:04PM (#20413836)
It might still be vulnerable to stagefright, exploitable over MMS.
[ Parent | on HN ]
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by ajross on Thursday July 11, 2019 @06:53PM (#20416632)
Stagefright is the name of the component, not the exploit. And in most cases, devices from major vendors are going to have patched binaries, even on images as old as Jellybean.
[ Parent | on HN ]
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by sangnoir on Thursday July 11, 2019 @04:10PM (#20415289)
> ...all I use it for are calls/SMS, so there's little scope to be exploited.

You mean little scope of exfiltration (I'm guessing it's not connected to the internet). There are a lot of vulnerabilities in text rendering that can be exploited via SMS.

[ Parent | on HN ]
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by TeMPOraL on Thursday July 11, 2019 @12:25PM (#20412858)
Android with a version number is ancient; current Androids have single letters in their name.
[ Parent | on HN ]
Re:Malicious apps infect 25M Android devices with 'Agent Smi... by Angostura on Thursday July 11, 2019 @11:47AM (#20412430)
I'll have a check in a couple of hours and and report back.

The Device, bought in September 2016 was a Samsung Galaxy TAB E 9.6 SM-T560 WI-FI

[ Parent | on HN ]