Dangerous Hare: Hanging Attribute References Hazards Due to Vendor Customization
summary
Analysis of 97 factory images finds 21,557 Hare flaws across 24,000+ preinstalled apps, with some devices showing nearly 600 issues and 400 affected apps including 51 with over one million downloads. Attacks demonstrate stolen voice notes, replacement of Google Email account settings, injection of fake Facebook/Skype messages, and service-confusion via missing permissions. Detection uses static analysis by repackaging odex/APKs and a custom analysis pipeline that modifies FlowDroid/inflow to locate attribute references and to filter signature/property guards.
AI-written summary · about
chapters (21)
- 0:00Start
- 2:17Android Customization Process
- 2:43"Hare" Problem
- 3:18An example
- 4:35Signature Guard Example
- 5:04Property Guard Example
- 6:10Stealing Voice Notes
- 9:17LG Cloud Scam
- 10:17Intent Hijacking
- 13:50Service Confusion
- 16:47Messaging Stealing On Kindle Fire
- 17:10GCM Setup
- 17:55Message Stealing
- 19:57App Store Submission
- 20:20Automatically Detect Hare
- 20:43Construct APK
- 21:25Guard Detection
- 21:50Large Scale Measurement
- 22:39Discussion
- 23:14Eliminating Hare
- 23:30Dangerous Hare
related talks
40mSecurity: The Hidden Cost of Android Stalkerware
22mA Mirage of Safety: Bug Finding & Exploit Techniques of Top Android Vendor's Privacy Protection Apps
25mHarvesting Inconsistent Security Configurations in Custom Android ROMs...
30mDoes your Android app expose you to excess risk?
43mSecurity in Android Applications
24mRecent Mobile App Security Incidents from Real-World Cases
48mSecuring the System: A Deep Dive into Reversing Android Pre-Installed Apps
36mRevisiting Stealthy Sensitive Information Collection from Android Apps