EngineerMode backdoor apparent on addition Android handset

The security researcher who apparent the backdoor on OnePlus accessories has done it again, this time with a handset from Archos.

You may anamnesis a contempo anguish for OnePlus ancient aback area a backdoor was begin in their devices. By base a arrangement app, alleged EngineerMode, security researcher Robert Baptiste was able to accretion basis admission to accessories — and broadcast the findings.

OnePlus said that, while it didn’t see this as a “major security issue,” that it would abolish the adb basis action amenable in a approaching update. It seems, however, that this may not accept been an abandoned incident.

Baptiste, who uses the pseudonym Elliot Alderson (from the TV appearance Mr Robot) on Twitter, has now apparent the aforementioned backdoor on addition device: the account Archos 40 Power from aboriginal 2016.

Though Baptiste was able to analyze that EngineerMode app is blockage a banderole apropos to basis privileges, the researcher said that he hasn’t yet absolute whether this can be exploited (though he said there was “clearly a potential” in a bulletin he aggregate with me). Baptiste additionally said it was “more than likely” that the aforementioned achievability exists for added Android phones.

Baptiste intends to investigate this further, but for now, we’re larboard apprehensive about how abounding Android OEMs apply the aforementioned backdoor in their handsets.

  • The EngineerMode app backdoor, afresh begin on OnePlus devices, has been discovered on addition Android handset
  • The Archos 40 Power may additionally be able to be exploited, according to the being who apparent the antecedent backdoor
  • It’s not yet bright how abounding Android phones accept the aforementioned potential

See Also: hack hike

Comments

Post a Comment