[Trend]New AndroRAT Exploits Dated Privilege Escalation Vulnerability, Allows Permanent Rooting

[igor51]

New AndroRAT Exploits Dated Privilege Escalation Vulnerability, Allows Permanent Rooting

Trend Micro detected a new variant of Android Remote Access Tool (AndroRAT) (identified as ANDROIDOS_ANDRORAT.HRXC) that has the ability to inject root exploits to perform malicious tasks such as silent installation, shell command execution, WiFi password collection, and screen capture. This AndroRAT targets CVE-2015-1805, a publicly disclosed vulnerability in 2016 that allows attackers to penetrate a number of older Android devices to perform its privilege escalation.

Post from: Trendlabs Security Intelligence Blog - by Trend Micro

New AndroRAT Exploits Dated Privilege Escalation Vulnerability, Allows Permanent Rooting

Source: New AndroRAT Exploits Dated Privilege Escalation Vulnerability, Allows Permanent Rooting