Menu
Android-powered smart TVs targeted by malicious apps

Android-powered smart TVs targeted by malicious apps

An old Android vulnerability is still present in many brands of smart TVs

Smart TVs running older versions of Android are being targeted by several websites offering apps containing malware, according to Trend Micro.

The security vendor wrote on Thursday that it found a handful of app websites targeting people in the U.S. and Canada by offering the malicious apps.

The apps are exploiting a flaw in Android that dates to 2014, showing that many smart TVs do not have the latest patches.

"Most smart TVs today use older versions of Android, which still contain this flaw," wrote Ju Zhu, a mobile threats analyst with Trend. "While most mobile Android devices can easily be upgraded to the latest version, upgrading smart TV sets may be more challenging for users because they are limited by the hardware."

The vulnerable Android versions are Cupcake 1.5 through Kitkat 4.4W.2., Zhu wrote.

Security experts say that smart TVs could become attractive to cybercriminals since their operating systems are not updated as rigorously as desktop computers.

Smart TVs are rising in popularity and are essentially large versions of mobile phones. The devices have operating systems and networking capabilities and hardware features such as USB ports, all of which present opportunities for hackers.

The malicious apps exploit the Android vulnerability when a user downloads one. Zhu said TV users are lured to the app sites but didn't describe if there are other tricks involved in getting people to download the apps.

Once a malicious app is installed, it is possible for the attackers to install other apps on the smart TV.

The app websites do not use SSL/TLS (Secure Sockets Layer/Transport Layer Security), which encrypts the connection. It would be possible then for a second attacker to intercept the unencrypted connection and conduct a man-in-the-middle attack "in effect overriding the payload of the first attacker," Zhu wrote.


Follow Us

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Featured

Slideshows

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners

More than 500 channel leaders gathered in Auckland on 21 October at the ​Reseller News Innovation Awards ​2020 to celebrate the achievements of the New Zealand technology industry's top partners, start-ups, vendors, distributors and individuals.

Channel gathers to celebrate the Reseller News Innovation Awards 2020 winners
Meet the winners of the 2020 Reseller News Innovation Awards

Meet the winners of the 2020 Reseller News Innovation Awards

Reseller News honoured the standout players of the New Zealand channel in front of more than 500 technology leaders in Auckland on 21 October, recognising the achievements of top partners, start-ups, vendors, distributors and individuals.

Meet the winners of the 2020 Reseller News Innovation Awards
Meet the Reseller News 30 Under 30 Tech Awards 2020 winners

Meet the Reseller News 30 Under 30 Tech Awards 2020 winners

This year’s Reseller News 30 Under 30 Tech Awards were held as an integral part of the first entirely virtual Emerging Leaders​ forum, an annual event dedicated to identifying, educating and showcasing the New Zealand technology market’s rising stars. The 30 Under 30 Tech Awards 2020 recognised the outstanding achievements and business excellence of 30 talented individuals​, across both young leaders and those just starting out. In this slideshow, Reseller News honours this year's winners and captures their thoughts about how their ideas of leadership have changed over time.​

Meet the Reseller News 30 Under 30 Tech Awards 2020 winners
Show Comments