Android Upgrades Open A Backdoor To Malware, Researchers Show

 
Updating software is to malware as flossing is to gingivitis: a basic practice meant to minimize the risk of infection. But a team of researchers has found that for Google's Android platform, operating system upgrades can also serve as a stealthy new method for malware to sneak its tricks past Android’s security measures.
In a paper they plan to present at the IEEE Security and Privacy symposium in May, a team of researchers from the University of Indiana and Microsoft Research outline a devious new backdoor in Android’s malware protections: It begins when a user is tricked into installing an innocuous-seeming application that asks for few or no permissions to access the phone’s data or use its features. But when the user upgrades to the latest version of Android, the malware app silently upgrades itself, too, gaining new access to the user’s sensitive information or control of other phone functions to access the user’s voicemails, login credentials, text messages, call logs, and more, depending on the version of Android.
 Android Upgrades Open A Backdoor To Malware, Researchers Show - Forbes