Critical Android Vulnerabilities are Patched by Google.

Few critical remote code execution vulnerabilities are addressed in the July update.

The most severe flaws allow attackers to execute code with high privileges using a special file. One of them is impacting Android 8.0+ (CVE-2020-0224), another affects Android 10(CVE-2020-0225).

Another critical flaw in Android 10(CVE-2020-0107) is an information disclosure vulnerability.

In addition to critical flaws Google is patching bunch of high severity issues, such as privilege escalation in the framework, issues in WLAN and Qualcomm kernel.

Samsung and SK Telecom: First Smartphone with Quantum Security Tech.

Samsung and SK telecom revealed a new Galaxy A Quantum, the first 5G smartphone with Quantum Random Number Generator (QRNG). The phone is claimed to have the world's smallest quantum random number generator (QRNG) chipset that enhances data security on the device.

The RNG chip has an on-board CMOS image sensor to detect photons, which is a basic for random number generation for the encryption keys. SK Telecom said that the QRNG chip allows users to safely use services like authentication and payments on their phones by generating unpredictable and patternless random numbers.

Galaxy A Quantum can also be used for more secure personal document storage such as insurance information and banking documents.

Anubis Watch: New Feature for Well-Known Android Botnet.

Anubis is one of the famous Android botnets. It gives attacker a full access to the victim’s device with ability to steal personal and financial data.

This huge platform is able to steal banking credentials and two-factor verification codes.

Victims got Anubis downloading it as a “game” from the Play Store, other Android app from third-party stores or by phishing email.

It seems now Anubis has a new feature that increase its ability to control infected device. According to Hold Security new control panel is still under development.

One part of the new control panel is an eyeball icon which allows to recognize if user is looking on the screen. It helps hackers not to “go live” if someone is looking on the screen.

Another part of the new control panel is integrated with Yandex maps which will show devices’ location.

Being around from 2017 Anubis is changing and involving. Let’s monitor which new features will be found.

COVID-19: Android Device Screen-Locking Malware.

Researchers at Bitdefender discovered that well known Android screen-locking malware SLocker was packaged in the “About Coronavirus” application targeting users in Russia, Ukraine, Kazakhstan, part of North Africa and India.

Downloaded from third-party sites the app locks Android device screen asking for the payment to restore proper functionality. The notification gives victim only 20 min until phone will become unusable.

Previously DomainTools researchers already reported similar scam application offered users a COVID-19 statistics. This malware may be related to SLocker as well.