DEF CON 24 hacking conference took place at Las Vegas, where this time lots of valuable info were shared for mobile users. DEF CON disclosed latest details about a set of four vulnerabilities affecting 900 million Android smartphones and tablets with Qualcomm chipsets.
So what is that security flaws and why it’s called “QuadRooter”?
QuadRooter is a set of four vulnerabilities only affecting devices with built-in Qualcomm chipsets. Security flaws are found in software drivers that control communication between chipset components. Drivers are incorporated into software builds that manufacturers develop for their devices. So if any one of the four vulnerabilities is exploited, an attacker can trigger privilege escalations and gaining root access. That could potentially allow a hacker to completely take over a mobile device.
Here are some of the latest and most popular devices found on the market today that use these chipsets:
- BlackBerry Priv
- Blackphone 1 and Blackphone 2
- Google Nexus 5X, Nexus 6 and Nexus 6P
- HTC One, HTC M9 and HTC 10
- LG G4, LG G5 and LG V10
- Moto X
- OnePlus One, OnePlus 2 and OnePlus 3
- Samsung Galaxy S7 and S7 Edge
- Sony Xperia Z Ultra
How can mobile devices become exposed to this dangerous hack?
Using a malicious app. Such an app would require no special permissions to take advantage of these vulnerabilities, alleviating any suspicion for the users before installing it.
How can I protect my device from “QuadRooter”?
Since the vulnerable drivers are pre-installed on devices by the manufacturer, they can only be fixed by installing a patch from the distributor or carrier. Distributors and carriers issuing patches can only do so after receiving fixed driver packs from Qualcomm.
As you can see, critical security updates must pass through the entire supply chain before they can be made available to the end users. After that, the end users must install these updates to protect their devices and data.
From our practice we made some checkpoints which you should follow. They will help to keep your device safe from attacks:
- Download and install the latest software updates as soon as they become available. These include important security updates that help keep your device and data protected.
- Understand the risks of rooting your device – either intentionally or as a result of an attack.
- Examine carefully any app installation request before accepting it to make sure it’s legitimate.
- Avoid side-loading Android apps (apk files) or downloading apps from third-party sources. Instead, practice good app hygiene by downloading apps only from Google Play.
- Read permission requests carefully when installing any apps. Be wary of apps that ask for permissions that seem unusual or unnecessary or that use large amounts of data or battery life.
- Use known, trusted WiFi networks or while traveling use only those that you can verify are provided by a trustworthy source.
There is an app available to see what QuadRooter flaws your device is vulnerable to. But other than arming yourself with knowledge there is not much the app or you can do until the patches roll in.
QuadRooter Scanner for Android
