As cited
Copy frozen at (site build).
vulnerabilities
A banking malware sample led researchers to an Android bug that can loop-crash phones
Bitdefender Labs researchers discovered a critical Android vulnerability, tracked as GhostMap, that exploits how Android parses the ZIP structure within APK files. A malicious app with no executable code or permission requests can trigger an infinite crash loop on affected devices, including Pixel 10 phones running Android 17, requiring a factory reset to resolve. The researchers identified this flaw while analyzing a banking malware sample.
Why it matters: Android device users and security teams need to understand that this vulnerability can be exploited without user interaction or permissions, making it a vector for denial of service attacks that could render phones unusable.
- Source published
- First seen by Cybersecurity Tracker