Security experts discover global flaw in Android's app system

Around 45 per cent of Android smartphone users are at risk of having their devices hijacked, researchers at Check Point have found. The bug is believed to allow cyber-criminals to hijack the screen of the smartphones and experts worry that it could be used to blackmail users.

“Check Point researchers spotted a flaw in one of Android’s security mechanisms,” the company wrote in a blog post.

“Based on Google’s policy which grants extensive permissions to apps installed directly from Google Play, this flaw exposes Android users to several types of attacks, including ransomware, banking malware and adware,” the experts added.

The researchers have taken the issue up to Google, following which; the search giant responded positively stating that the issue is already being dealt with in the upcoming version of Android (currently dubbed ‘Android O’)

The vulnerability can be used to access Android systems and hack photos, passwords and bank details. Moreover, the same system is being used in Facebook Messenger app, The Daily Mail reported.

Experts have advised users to avoid downloading suspicious third-party apps until the bug is completely eradicated by Google. “Users should always beware of malicious apps, even when downloading from Google Play,” Check Point added in its blog post.

“Look for the comments left by other users and grant only permissions which have relevant context for the app’s purpose. And just as you protect your PC with dedicated security solutions, you should also make sure to protect your mobile device using a protective solution capable of identifying and blocking known and unknown malware,” they added.