CVE-2019-15422

The CVE concerns the Doogee Mix Android device (DOOGEE/MIX/MIX:7.0/NRD90M/1495809471:user/release-keys) which ships a pre-installed app with package name com.mediatek.factorymode (versionCode=1, versionName=1). The vulnerability allows unauthorized wireless settings modification via a confused de...

CVE-2016-6564 Ragentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel, which can allow a remote attacker to execute arbitrary code with root privileges

Android devices with code from Ragentek contain a privileged binary that performs over-the-air OTA update checks. Additionally, there are multiple techniques used to hide the execution of this binary. This behavior could be described as a rootkit. This binary, which resides as /system/bin/debugs,...

Backdoor Found in Firmware of Some Android Devices

Nearly three million Android devices are vulnerable to an attack that could allow a hacker to compromise over-the-air OTA updates to the devices and allow adversaries to remotely execute commands with root privileges. The problem stems from what researchers call an insecure implementation of an O...

Dangerous Rootkit found Pre-Installed on nearly 3 Million Android Phones

Here's some bad news for Android users again. Nearly 3 Million Android devices worldwide are vulnerable to man-in-the-middle MITM attacks that could allow attackers to remotely execute arbitrary code with root privileges, turning over full control of the devices to hackers. According to a new...