{"id":30074,"date":"2017-05-29T18:01:42","date_gmt":"2017-05-29T10:01:42","guid":{"rendered":"https:\/\/www.hongkiat.com\/blog\/?p=30074"},"modified":"2023-04-06T19:14:28","modified_gmt":"2023-04-06T11:14:28","slug":"android-cloak-and-dagger-vulnerability","status":"publish","type":"post","link":"https:\/\/www.hongkiat.com\/blog\/android-cloak-and-dagger-vulnerability\/","title":{"rendered":"Android Exploit ‘Cloak & Dagger’ Can Steal Your Passwords"},"content":{"rendered":"

Android users may want to keep a close eye on the apps they download<\/strong> onto their devices as researchers have discovered a series of vulnerabilities in the operating system that relies on two particular Android permissions to work<\/strong>.<\/p>\n

Dubbed Cloak & Dagger <\/strong>by the research team that discovered the vulnerability, the attack relies on abusing the SYSTEM_ALERT_WINDOW<\/code><\/strong> and BIND_ACCESSIBILITY_SERVICE<\/code><\/strong> permissions in order to compromise the system.<\/p>\n

\"system<\/figure>\n

The way the exploit works is pretty straightforward: a malicious app gets downloaded and installed to the Android device<\/strong>, with the necessary permissions being granted without requiring the user\u2019s input.<\/p>\n

From there, hackers are able to perform clickjacking, record keystrokes, phishing, and even installing a God-mode app, all without the user being aware of it<\/strong>.<\/p>\n

\"god-mode-app\"<\/figure>\n

In order to illustrate the danger that the vulnerability poses<\/strong>, the researchers have prepared three videos that demonstrates the potential attacks that could be carried out.<\/p>\n

The first one is called the Invisible Grid Attack, and it works by placing an invisible overlay over the device\u2019s keyboard<\/strong>. With it, the hacker could identify the information that is being typed out.<\/p>\n