Posté par: igor51 le février 27, 2018, 12:00:10
Trend Micro detected a new variant of Android Remote Access Tool (AndroRAT) (identified as ANDROIDOS_ANDRORAT.HRXC) that has the ability to inject root exploits to perform malicious tasks such as silent installation, shell command execution, WiFi password collection, and screen capture. This AndroRAT targets CVE-2015-1805, a publicly disclosed vulnerability in 2016 that allows attackers to penetrate a number of older Android devices to perform its privilege escalation.
Post from: Trendlabs Security Intelligence Blog - by Trend Micro
New AndroRAT Exploits Dated Privilege Escalation Vulnerability, Allows Permanent Rooting
Source: New AndroRAT Exploits Dated Privilege Escalation Vulnerability, Allows Permanent Rooting (http://feeds.trendmicro.com/~r/Anti-MalwareBlog/~3/6yrDWY0Dfe8/)