Android bug opens smartphones to outside control: Experts.The Times of India - Reuters - 25/02/2012
BOSTON: Cybersecurity experts have uncovered a flaw in a component of the operating system of Google Inc's widely used Android smartphone that they say hackers can exploit to gain control of the devices.
Researchers at startup cybersecurity firm CrowdStrike said they have figured out how to use that bug to launch attacks and take control of some Android devices.
CrowdStrike, ... said an attacker sends an email or text message that appears to be from a trusted source, like the user's phone carrier. The message urges the recipient to click on a link, which if done infects the device. At that point, the hacker gains complete control of the phone, enabling him or her to eavesdrop on phone calls and monitor the location of the device, said Dmitri Alperovitch, chief technology officer and co-founder of CrowdStrike.
With modifications and perhaps use of different exploits, this attack will work on every smartphone device and represents the biggest security threat on those devices, said Alperovitch, who was vice president of threat research at McAfee Inc before he co-founded CrowdStrike.