Attackers have full control over LG Smartphones

 A malicious attacker is able to bypass the authentication phase of the network communication, and thus establish a connection to the On Screen Phone application without the owner’s knowledge or consent.
Once connected, the attacker could have full control over the phone – even without physical access to it. The attacker needs only access to the same local network as the phone is connected to, for example via Wi-Fi. The LG On-Screen Phone application (OSP) makes it easy to access and control LG’s Android smartphones through a PC.
The connection can be established either by using an USB cable or wirelessly through Wi-Fi or Bluetooth. When attempting to connect to the phone via OSP, a popup dialog is displayed on the phone and it is to be confirmed and accepted by the owner. Once the channel is established, the screen contents of the device are being transmitted to the PC as a motion stream, mouse clicks on the PC are turned into touch events on the phone. By using OSP one can control an LG Smart Phone just like it was in their hands.
The application is available through the manufacturer’s custom store for install, and is preinstalled on many LG Smart Phones, including G1 & G2. SEARCH-LAB Ltd. responsibly reported this threat to the manufacturer in September 2014 who confirmed the severity of the issue and started working on the fix in turn.
The patched version of the application is now available to download through LG’s Update Center and/or will be available in form of Maintenance Release for some models. LG smartphone users should make sure to have at least version 4.3.010 of the On Screen Phone (OSP) application installed. Please note that when OSP is pre-installed, the device is vulnerable by default – OSP is started automatically and cannot be disabled in Settings.

Comments

  1. This is an awesome post. Thank you for compiling all of these ideas into an article. I love the information you’ve taken the time to share. thank you. Fast Cell Phone Repair In Wichita

    ReplyDelete
  2. I generally check this kind of article and I found your article which is related to my interest. Genuinely, it is good and instructive information about smart phone. Thanks for sharing an amazing article here. Cell Phone Repair Brick Nj

    ReplyDelete
  3. I read the above article and got some knowledge from your article which is about mobile repair.It's actually great and useful data for us. Thanks for sharing it. Mobile phone fix

    ReplyDelete
  4. Excellent information, Thanks for publishing such essential information. You are doing such a good job. This information is very helpful for everyone. Keep it up. Thanks. computer repair uk

    ReplyDelete

Post a Comment

Popular posts from this blog

How to hack your xbox 360 completely

Wii Remote IR Camera Hack with Arduino Interface

How to Repair and Fix the touch screen of your android smartphone