Stagefright Exploit A Danger To Android Devices Again
It looks like the Stagefright flaw is a modern day horror movie franchise for Android device users, as it has returned yet again, retaining its status of being a real and consistent danger on affected devices. This is despite promises from Google to have fixed the Stagefright flaw prior.
Theoretically speaking, the Stagefright security flaw has been dangerous, but then implementing it on an Android device reliably was somewhat a saving grace before. Now, this is no longer the case according to security researchers at NorthBit, who have come up with a proof-of-concept Stagefright exploit known as Metaphor that you can see in the video above.
The main factor is a back-and-forth procedure which will size up the device’s defenses that are in place (or not), before it makes its move. For instance, if you drop by a website that has a maliciously-designed MPEG-4 video, the attack will then crash Android’s media server, before sending to the attacker hardware data, alongside another video file, picking up extra security data and delivering the coup de grace – the final video file which will perform the infection.
