1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

New Android ransomware uses clickjacking to gain admin privileges

Discussion in 'Network World' started by RSS, Jan 27, 2016.

  1. RSS

    RSS New Member Member

    File-encrypting ransomware applications that target Android devices are becoming increasingly sophisticated. One new such program is using clickjacking techniques to trick users into granting it administrator privileges.

    Clickjacking is a method that involves manipulating the user interface in a way that allows attackers to hijack users' clicks and trigger unauthorized actions. It is mostly used in Web-based attacks, where various technologies allow creating invisible buttons and positioning them on top of seemingly harmless page elements.

    Due to the restrictive application permissions system in Android, ransomware apps targeting the OS have historically been less effective than on Windows. For example, many of the early Android ransomware threats only displayed a persistent window on the screen with an alert intended to scare users into paying fictitious fines. Most of them impersonated law enforcement agencies and claimed that the devices were locked because illegal content was found on them.

    To read this article in full or to leave a comment, please click here

    Continue reading...
     

Share This Page