New Man-in-the-Middle Attack Targets Smartphones
A new man-in-the-middle attack is reportedly allowing attackers to steal credentials and deliver malware to smartphone systems. The DoubleDirect technique works on mobile phones and tablets running either Android or iOS. The technique is described in a blog post by the mobile security firm Zimperium. The post states that DoubleDirect lets the attacker redirect services from Google, Facebook, Twitter, Hotmail, Live.com, and other sites, and attacks have been documented in 31 countries.
Zimperium says the attack employs the ICMP Redirect feature routers use to notify mobile hosts that a better route is available. According to the blog post, “… an attacker can also use ICMP Redirect packets to alter the routing tables on the victim host, causing the traffic to flow via an arbitrary network path for a particular IP. As a result, the attacker can launch a MITM attack, redirecting the victim’s traffic to his device.”
The blog post includes a link to a tool that Zimperium has developed to look for the presence of DoubleDirect.
Related content
-
Detecting and analyzing man-in-the-middle attacks
Wireshark and a combination of tools comprehensively analyze your security architecture. - New SSL Attack Exploits an Old Problem
-
News for Admins
Electron app vulnerability, WordPress sites infected by malware, Torvalds calls Intel's patch garbage, AMT flaw in Intel chips allows attacker to create a backdoor, and first malware for Mac OS in 2018.
-
Understanding Layer 2 switch port security
What happens when an intruder with a laptop parks at an empty cubicle and attaches to your local network? If you don't want to find out, it might be time to think about implementing some switch port security. - New Ransomware Infects by Using MS Word Macros