Pre-installed App Can Hack Samsung Device

[mustang7757]

If your on February security patch your ok , this for Android 9-12

https://www.the-sun.com/tech/5090704/urgent-warning-samsung-galaxy/

Sent from my Pixel 6 Pro using AC Forums mobile app

 

[Laura Knotek]

Mine is on March 2022 security patch, so I'm good.

 

[mustang7757]

Mine is on March 2022 security patch, so I'm good.

Yes , cant believe from pre-installed app
Sorry 3rd party app that installed itself as system app

 

[Mooncatt]

All of this by an unauthorized user if the victim had installed any third-party app that was tweaked to "mimic system-level activity and hijack critical protected functionality," according to the Kryptowire report.

So basically, apps that are likely pirated to avoid paying for them, making all bets off on security anyway? Doesn't sound like this is very worrying if you're sticking to official channels like the Google Play store.

 

[mustang7757]

So basically, apps that are likely pirated to avoid paying for them, making all bets off on security anyway? Doesn't sound like this is very worrying if you're sticking to official channels like the Google Play store.

Agree but I'm sure some have wonder off to experiment but seems February security patch fixed it anyways

 

[fuzzylumpkin]

I'm not familiar with that source, is it related to the UK tabloid of the same name? If so I do not consider it a reliable source...

 

[joeldf]

I'm confused. It says a user installs an app, but doesn't say what app. Then says the system app is the Phone app.

Well, these are phones, so is the Phone app the problem, or the app a user installs?

Or, is it that a third party app takes advantage of a weakness in the Phone app?

 

[Mooncatt]

I'm confused. It says a user installs an app, but doesn't say what app. Then says the system app is the Phone app.

Well, these are phones, so is the Phone app the problem, or the app a user installs?

Or, is it that a third party app takes advantage of a weakness in the Phone app?

From what I can tell, your last possibility is the closest, but still not the entire picture. It sounds like the vulnerability is in the Phone app (it's a phone, but everything runs on an app, even making phone calls), but requires another app specifically programmed to exploit the vulnerability.

The article is written in a way to make you think any app, even from the Play store, could exploit the vulnerability. This sort of fear mongering is common with malware/vulnerability announcements. The section I quoted above is the likely key to assessing your own risk, because apps from the Play store and similar official marketplaces are not likely to have modified apps that can do such things. The Play store also routinely scans itself and removes malware suspect apps. It's pirated apps that are the biggest concern. They have already been hacked to steal premium content/services from the developers, so it's a trivial matter to insert code that takes advantage of a vulnerability. Nothing is ever free.

 

[mustang7757]

I'm not familiar with that source, is it related to the UK tabloid of the same name? If so I do not consider it a reliable source...

I'm not sure if they related but this is the source they got it from with more in depth information

https://www.kryptowire.com/blog/sta...nerability-affecting-samsung-android-devices/

 

[mustang7757]

I'm confused. It says a user installs an app, but doesn't say what app. Then says the system app is the Phone app.

Well, these are phones, so is the Phone app the problem, or the app a user installs?

Or, is it that a third party app takes advantage of a weakness in the Phone app?

Yeah I agree

 

[Gary02468]

I'm not familiar with that source, is it related to the UK tabloid of the same name? If so I do not consider it a reliable source[.]

It doesn't matter. The article is merely summarizing the linked Forbes article, which is merely summarizing the linked Kryptowire report, which is the actual source. Why bother even reading a third-hand paraphrase when the original is right there?

 

[recDNA]

Is there simply an app to Uninstall or disable? I don't click links and don't like long explanation but if there is an app I can find and delete what is it?

 

[joeldf]

Is there simply an app to Uninstall or disable? I don't click links and don't like long explanation but if there is an app I can find and delete what is it?

The more I look at it, the more I realize that the issue is a rogue app taking advantage of a flaw in the Samsung Phone app.

But, what are those apps? They don't say. So we don't know what apps to remove if any are actually out there.

 

[mustang7757]

Yeah plus February patch fixed the vulnerability

 

[13Flossy]

I have an S22 ultra. With was too many pre installed apps. If that's not bad enough, yesterday while checking apps and clearing cache I find 2 apps that came out of no where.
Is there an easy way to uninstall dinner if these pre installed apps , like without a computer and developer option debugging etc etc etc. Can the geek squad help? I'm not that tech inclined

 

[mustang7757]

I have an S22 ultra. With was too many pre installed apps. If that's not bad enough, yesterday while checking apps and clearing cache I find 2 apps that came out of no where.
Is there an easy way to uninstall dinner if these pre installed apps , like without a computer and developer option debugging etc etc etc. Can the geek squad help? I'm not that tech inclined

You can use these 2 apps to disable bloat on your device just choose the app .

https://www.packagedisabler.com/
https://forums.androidcentral.com/e...tails?id=com.rrivenllc.shieldx&token=D3u3g3iE

 

[KPMcClave]

You can use these 2 apps to disable bloat on your device just choose the app .

https://www.packagedisabler.com/
https://forums.androidcentral.com/e...tails?id=com.rrivenllc.shieldx&token=vUgpJWhX

I know you've had PDP, have you tried Alliance Shield? If so, is there a reason to switch if I have a currently working copy of PDP and use AdGuard (so the added ability to block ads in Alliance Shield isn't a big deal...unless it's known that Alliance Shield does it better).

I'm mainly keeping AS in the back of my mind in the event PDP is no longer an option, but will switch if there are compelling reasons to do so.

 

[mustang7757]

I know you've had PDP, have you tried Alliance Shield? If so, is there a reason to switch if I have a currently working copy of PDP and use AdGuard (so the added ability to block ads in Alliance Shield isn't a big deal...unless it's known that Alliance Shield does it better).

I'm mainly keeping AS in the back of my mind in the event PDP is no longer an option, but will switch if there are compelling reasons to do so.

I like the layout on PDP its non fuss straight to the point what you need to do , just paid this year to have multiple devices, I have used and still use Alliance Shield X it offers other features like you mentioned but don't use it so that's why I always go back to PDP. I keep Alliance Shield X just to see any updates or improvement that come .

 

[KPMcClave]

I like the layout on PDP its non fuss straight to the point what you need to do , just paid this year to have multiple devices, I have used and still use Alliance Shield X it offers other features like you mentioned but don't use it so that's why I always go back to PDP. I keep Alliance Shield X just to see any updates or improvement that come .

Thanks. I figured there likely wasn't a reason to switch, espcially since I'm happy with the functionality of both PDP and AdGuard.

 

[mustang7757]

Thanks. I figured there likely wasn't a reason to switch, espcially since I'm happy with the functionality of both PDP and AdGuard.

Your welcome!
You can try alliance shield x ad guard or other features but i didn't play with those to say for sure they worthy.