Security-X
Forum Security-X => News => Discussion démarrée par: igor51 le juin 25, 2019, 17:00:09
-
Tracing the Supply Chain Attack on Android
Earlier this month, Google disclosed that a supply chain attack by one of its vendors resulted in malicious software being pre-installed on millions of new budget Android devices. Google didn't exactly name those responsible, but said it believes the offending vendor uses the nicknames "Yehuo" or "Blazefire." What follows is a deep dive into the identity of that Chinese vendor, which appears to have a long and storied history of pushing the envelope on mobile malware.
Source: Tracing the Supply Chain Attack on Android (https://krebsonsecurity.com/2019/06/tracing-the-supply-chain-attack-on-android/)