The vulnerability, assigned CVE-2015-3860, has been dubbed as "Elevation of Privilege Vulnerability in Lockscreen".
How the Attack Works?
The secret behind the researcher's "MAGIC TRICK" is as follows:
- Get the device and open the Emergency dialer screen.
- Type a long string of numbers or special characters in the input field and copy-n-paste a long string continuously till its limit exhausts.
- Now, copy that large string.
- Open up the camera app accessible without a lock.
- Drag the notification bar and push the settings icon, which will show a prompt for the password.
- Now, paste the earlier copied string continuously to the input field of the password, to create an even larger string.
- Come back to camera and divert yourself towards clicking pictures or increasing/decreasing the volume button with simultaneously tapping the password input field containing the large string in multiple places.
All this is done to make the camera app crash. Further, you will notice the soft buttons (home and back button) at the bottom of the screen will disappear, which is an indication that will enable the app to crash.
At this time, stop your actions and wait for the camera app to become unresponsive.
After a moment, the app will crash and get you to the Home Screen of the device with all the encrypted and unencrypted data.
Now without wasting time go to Settings > Developer options > Enable USB debugging and control the device by installing the Android Debug Bridge (ADB) utility.
Video Demonstration shows Attack in Work
Watch the video demonstration given below, where you can see practically how Gordon executed the hack.
https://youtu.be/J-pFCXEqB7A
Comments
Post a Comment
plz add ur comment here