A new series of vulnerabilities in Android have been discovered by researchers at the University of California Santa Barbara and the Georgia Institute of Technology. Titled “Cloak & Dagger” this new class of vulnerabilities and attack vectors makes use of overlays and accessibility service permissions in Android. These services can potentially allow for a malicious application to perform unwanted actions, including collecting data input on the device and so-called “clickjacking.” The latter term being when a user might believe they are performing one action, but another is occurring beneath a deceptive overlay.

Read More

Recently revealed “Cloak & Dagger” Android attack uses overlays and accessibility services to deceive users was written by the awesome team at Android Police.

– Source