Android裝置App的資料共享方式有資安破口，研究人員揭露能以此發動的攻擊手法Dirty Stream，影響範圍廣大
· 2024-05-20
近期微軟針對安卓裝置公布名為Dirty Stream的攻擊手法，並指出光是他們在Google Play市集找到存在相關弱點而可被當作攻擊目標的應用程式，就已被下載超過40億次，而且，當中有4款是被下載超過5億次的熱門應用程式
研究人員透過Mi File Manager展示如何發動Dirty Stream攻擊，他們透過該應用程式清理裝置垃圾檔案的元件來觸發相關弱點，從而在該檔案管理軟體植入惡意配置檔案，一旦啟動了垃圾清理功能，他們就能載入對應的惡意程式庫，並透過瀏覽器的使用者ID執行程式碼。
為何他們選擇利用這款應用程式來進行驗證？研究人員指出，由於該檔案管理軟體具備透過FTP及SMB通訊協定進行遠端檔案共用的功能，一旦觸發相關弱點，受到影響的不只是單臺行動裝置，甚至可能影響內部網路的共享存取。
熱門文章
British gambling levy rates confirmed for each vertical
Regulation
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
