New Android exploit only needs you to install an app to wreck your phone
Android sabotages itself next.
Bitdefender researchers have uncovered a previously unknown Android vulnerability that can cripple a device by merely installing a malicious application. Dubbed GhostMap, this flaw exploits Android's handling of ZIP compression methods, causing the system_server process to enter an endless crash loop, potentially rendering the phone unusable.
The exploit works by taking advantage of Android's security measures, which typically require malicious apps to request permissions and execute code. However, the GhostMap vulnerability allows a specially crafted APK to trigger the crash loop without any such requirements. Upon installing the infected app, the core system_server process becomes stuck in a loop of crashes, leaving the device inoperable.
Recovering from the GhostMap exploit may require a factory reset, in which all data is erased, or manually deleting the malicious file using Android's Debug Bridge (ADB) tool. No instances of the exploit being used in the wild have been identified, but the public disclosure of the flaw could enable threat actors to develop and deploy their own versions of the exploit more easily.
Despite Android being generally considered a secure operating system, equipped with multiple layers of protection, the ingenuity of threat actors continues to find ways to exploit its weaknesses. This latest discovery serves as a reminder that existing security measures are not foolproof, and that new vulnerabilities can emerge at any time.
Written by urgent.news from Android Authority's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
