CamScanner, a malicious Android app with more than 100M downloads in Google Play

Re:CamScanner, a malicious Android app with more than 100M d... by lern_too_spel on Wednesday August 28, 2019 @10:34PM (#20826179)

This doesn't use an exploit in Android and instead runs payloads with the permissions of the app. The same can happen on iOS and very likely does in many apps but is reported less often because there is no economic incentive (the App Store doesn't allow antivirus services). For an example, see how Xcodeghost went unnoticed by Apple.

[ Parent | on HN ]

Re:CamScanner, a malicious Android app with more than 100M d... by vardump on Thursday August 29, 2019 @03:31AM (#20827503)

So can you somehow load external (from a file or network, etc.) executable code into memory on iOS now? Last I checked, that was not possible, no way to even map executable pages in memory.

XcodeGhost was a compromised compiler suite. See https://en.wikipedia.org/wiki/XcodeGhost#Attack_vector

[ Parent | on HN ]

Re:CamScanner, a malicious Android app with more than 100M d... by panpanna on Thursday August 29, 2019 @05:09AM (#20827923)

The code does not need to be native, JavaScript works just fine (which is exactly what was used in the click-fraud thingy from a few months ago)

[ Parent | on HN ]