Over 1 million pilgrims benefit from golf cart service at Grand Mosque during Ramadan    Visitors welcomed with Eid initiative at Thee Ain Heritage Village in Al-Baha    Tebuk emir reviews rain response in Tayma    Saudi Arabia considers rent cap as part of major real estate reforms    Messi's bodyguard banned from touchline at Inter Miami games    Screen time in bed linked to insomnia, study finds    Le Pen vows to appeal political ban, calls verdict a 'denial of democracy'    Death toll from Myanmar earthquake rises to 2,719 as rescue efforts continue    Russia, Ukraine trade blame over new energy strikes    Putin orders Russia's largest military call-up in over a decade    Albania hosts MWL chief for Eid sermon at largest mosque in the Balkans    Haramain High-Speed Railway transports over 1.2 million passengers during Ramadan    Saudi Transport Authority says passengers can ride for free if taxi meters are off    Ministry of Education forms 425 community partnerships with SR653 million impact    Mexico bans junk food in schools to fight childhood obesity epidemic    Sweet sales surge ahead of Eid as Saudi chocolate imports top 123 million kg in 2024    Saudi creatives shine at Jeddah's Fawanees Nights with art, fashion, and storytelling    T1 CEO confirms Gumayusi's return for LCK Spring after lineup shakeup    100 Thieves claim Marvel Rivals Invitational NA crown as 2025 scene heats up    Bollywood actress vindicated over boyfriend's death after media hounding    Saudi Arabia hold Japan to goalless draw in Saitama to stay in World Cup hunt    Grand Mufti rules against posting prayers and preaching in mosques on social media    King Salman prays for peace and stability for Palestinians in Ramadan message King reaffirms Saudi Arabia's commitment to serving the Two Holy Mosques and pilgrims    Bollywood star Saif Ali Khan 'out of danger' after attack at home in Mumbai    Exotic Taif Roses Simulation Performed at Taif Rose Festival    Asian shares mixed Tuesday    Weather Forecast for Tuesday    Saudi Tourism Authority Participates in Arabian Travel Market Exhibition in Dubai    Minister of Industry Announces 50 Investment Opportunities Worth over SAR 96 Billion in Machinery, Equipment Sector    HRH Crown Prince Offers Condolences to Crown Prince of Kuwait on Death of Sheikh Fawaz Salman Abdullah Al-Ali Al-Malek Al-Sabah    HRH Crown Prince Congratulates Santiago Peña on Winning Presidential Election in Paraguay    SDAIA Launches 1st Phase of 'Elevate Program' to Train 1,000 Women on Data, AI    41 Saudi Citizens and 171 Others from Brotherly and Friendly Countries Arrive in Saudi Arabia from Sudan    Saudi Arabia Hosts 1st Meeting of Arab Authorities Controlling Medicines    General Directorate of Narcotics Control Foils Attempt to Smuggle over 5 Million Amphetamine Pills    NAVI Javelins Crowned as Champions of Women's Counter-Strike: Global Offensive (CS:GO) Competitions    Saudi Karate Team Wins Four Medals in World Youth League Championship    Third Edition of FIFA Forward Program Kicks off in Riyadh    Evacuated from Sudan, 187 Nationals from Several Countries Arrive in Jeddah    SPA Documents Thajjud Prayer at Prophet's Mosque in Madinah    SFDA Recommends to Test Blood Sugar at Home Two or Three Hours after Meals    SFDA Offers Various Recommendations for Safe Food Frying    SFDA Provides Five Tips for Using Home Blood Pressure Monitor    SFDA: Instant Soup Contains Large Amounts of Salt    Mawani: New shipping service to connect Jubail Commercial Port to 11 global ports    Custodian of the Two Holy Mosques Delivers Speech to Pilgrims, Citizens, Residents and Muslims around the World    Sheikh Al-Issa in Arafah's Sermon: Allaah Blessed You by Making It Easy for You to Carry out This Obligation. Thus, Ensure Following the Guidance of Your Prophet    Custodian of the Two Holy Mosques addresses citizens and all Muslims on the occasion of the Holy month of Ramadan    







Thank you for reporting!
This image will be automatically disabled when it gets reported by several people.



Fake cryptocurrency apps use new 2FA bypass technique to sidestep Google permission policy
Published in The Saudi Gazette on 23 - 06 - 2019

ESET researchers have discovered fake cryptocurrency apps using a previously unseen technique to bypass SMS-based two-factor authentication (2FA), circumventing Google's recent SMS permissions restrictions. Google restricted the use of SMS and Call Log permissions in Android apps in March 2019 to prevent intrusive apps from abusing them for various illicit purposes.
The apps, named "BTCTurk Pro Beta," "BtcTurk Pro Beta" and "BTCTURK PRO" impersonate the Turkish cryptocurrency exchange BtcTurk and phish for login credentials to the service. Instead of intercepting SMS messages to bypass 2FA protection on users' accounts and transactions, these malicious apps take the one-time password (OTP) from notifications appearing on the compromised device's display. Besides reading the 2FA notifications, the apps can also dismiss them to prevent victims from noticing fraudulent transactions happening. All three apps were uploaded to Google Play in June 2019 and were quickly taken down following ESET's notification.
After the fake BtcTurk apps are installed and launched, they request a permission named Notification access. The apps can then read the notifications displayed by other apps installed on the device, dismiss those notifications, or click buttons they contain. According to ESET's analysis, the attackers behind these apps specifically target notifications from SMS and email apps.
"One of the positive effects of Google's restrictions from March 2019 was that credential-stealing apps lost the option to abuse these permissions for bypassing SMS-based 2FA mechanisms. However, with the discovery of these fake apps, we have now seen the first malware sidestepping this SMS permission restriction," said ESET Researcher Lukáš Štefanko, author of the research.
The Notification access permission was introduced in Android's Jelly Bean 4.3 version, meaning almost all active Android devices are susceptible to this new technique. The fake BtcTurk apps require Android version 5.0 (KitKat) and higher to run; thus, they affect around 90% of Android devices.
As for the effectiveness in bypassing 2FA, this specific technique does have its limitations – attackers can only access the text that fits the notification's text field, and thus, it is not guaranteed that the text will include the OTP. In SMS 2FA, the messages are generally short, and OTPs are likely to fit in the notification message. However, in email 2FA, message length and format are much more varied, potentially impacting accessible data.
For more details, read the full piece by Lukáš Štefanko, "Malware sidesteps Google permissions policy with new 2FA bypass technique," on "WeLiveSecurity.com." — SG


Clic here to read the story from its source.