Researchers discover new class of Android malware that hides its tracks

android cloak dagger malware phone
ymgerman/123RF
A common permission in many apps downloaded from the Google Play Store could make it relatively easy for a malicious developer to gain complete control over your device. That’s according to researchers at the University of California and the Georgia Institute of Technology, who discovered the new type of attack and have already shared their findings with Google.

They’re calling it “Cloak and Dagger,” and it relies on the ability of apps to draw UI elements over the screen as a way of concealing from the user exactly what is being shown. In the example given, several prompts are displayed when a malicious app is opened. The user thinks they’re interacting with the app, but they’re actually enabling an accessibility service that can be used to log keystrokes, including passwords.

Then, the real magic happens. Here, the user is made to watch a video — all the while, in the background, the malware is flipping switches to grant itself a variety of other permissions, including the ability to read location, text messages, and storage.

Ironically, all apps downloaded through Google’s storefront can enable the two permissions necessary for the attack without the user’s knowledge. In other words, it’s on Google to detect the scheme before the app hits the Play Store. If it slips through, as some do from time to time, the only way the user could stop it is by digging into the apps menu and checking permissions granted.

One of the most dangerous aspects of the Cloak and Dagger scheme is that researchers say it can be used to record your PIN code to discreetly unlock your device and perform actions — without ever turning the screen on.

According to the researchers, the latest version of Android, release 7.1.2, modifies the way permissions are handled in a way that makes it slightly harder to carry out an attack like this one. However, it doesn’t fully solve the issue.

Google has since responded to the news, stating to Engadget that it has updated Google Play Protect, its security software on most Android devices, to detect the presence of harmful apps that abuse these permissions. The company also reports that changes it made in Android O will “further strengthen” the platform against Cloak and Dagger attacks.

Mobile

Weird Galaxy View 2 is a TV-style tablet to take your mind off the Galaxy Fold

Samsung may be about to resurrect a product line that last saw an entry three years ago. Renders of the Galaxy View 2 show it's sticking to the tablet-that-thinks-it's-a-TV formula.
Cars

Keep your driving record squeaky clean with these top-flight radar detectors

Nobody likes getting a speeding ticket, but these gadgets can help. Check out our picks for the best radar detectors on the market, from the likes of Valentine One, Escort, and Beltronics.
Mobile

These parental control apps will help keep your kids' device habits in check

Looking for extra security and monitoring on mobile devices? Take a look at the best parental control apps for limiting time and keeping watch on your child's phone usage and behavior. We have the top options for Android and iOS here.
Smart Home

From the kitchen to the bedroom, here are the best Alexa tips and tricks

Amazon's voice assistant Alexa has plenty of neat skills. So many, in fact, it seems like new ones appear every day. We've rounded up the top Echo tips and tricks to help you get the most out of your virtual assistant.
Mobile

The Pixel 3 range will soon be coming to T-Mobile's network

Google's latest flagships, the Pixel 3 and Pixel 3 XL, are now official and we have all the details from the October 9 event in New York City and Paris. Here's everything we know about the Google Pixel 3 and Pixel 3 XL.
Deals

Need a new tablet? Here are the best iPad deals for April 2019

In the wide world of tablets, Apple is still the king. If you're on team Apple and just can't live without iOS, we've curated an up-to-date list of all of the best iPad deals currently available for April 2018.
Deals

The latest Apple iPad Pros get steep discounts on Amazon

The iPad Pro is now in its third generation, and the 2018 refresh of this premium tablet is, hands down, Apple’s best one yet. It’s on sale right now, too, for a good discount which can let you score one for as little as $675.
Mobile

The OnePlus 7 Pro will have four launch events to celebrate its release

The OnePlus 6T may still be new, but we're already looking ahead to the upcoming OnePlus 7. It will use the Snapdragon 855, and may have a new pop-up front camera, too. Here's everything we know about the OnePlus 7.
Smart Home

The Houzz app now lets you virtually tile your floor with augmented reality

Augmented reality is starting to be a real bonus to apps like Houzz's View in My Room 3D tool, which recently added the ability to measure how a tiled floor might look in your living space.
Mobile

The best Bluetooth headsets of 2019, from Sennheiser to Jabra

Quality headsets are rare. Here are our picks for the best Bluetooth headsets available, whether you need something modest, cheap, or loaded with features. We highlight the best Bluetooth headsets you can get for different situations.
Mobile

Samsung begins retrieving all the Galaxy Fold review units

The Samsung Galaxy Fold has arrived, and it goes on sale soon. Folding out from a 4.6-inch display to a tablet-sized 7.3-inch display, this unique device has six cameras, two batteries, and special software to help you use multiple apps.
Mobile

Common Samsung Galaxy S10, S10 Plus, and S10e problems and how to fix them

Samsung's new Galaxy S10 range is gorgeous and extremely powerful. But they're not perfect, and you may discover some issues with your new phone. Here are some of the most common Galaxy S10 problems and how to fix them.
Mobile

Michael Kors updates its Sofie smartwatch, but still uses a processor from 2016

Michael Kors announced an update to the Sofie smartwatch, now offering heart rate monitoring, GPS, and NFC support. There's only one problem — the device still offers the Snapdragon Wear 2100 processor.
Product Review

Screen snags aside, the Galaxy Fold is an exciting step toward a foldable future

Samsung's Galaxy Fold is the company's first foldable phone, with two screens, six cameras, and a dual-cell battery. The phone may be delayed due to display issues, but that doesn't stop us from asking -- what's it like to use?