Malicious app required to make “Pixnapping” attack work requires no permissions.
  • krooklochurm@lemmy.caEnglish
    61·
    2 days ago

    Man in the middle an app download or find some kind of exploit to inject the code from a website, ta da.

    I mean, obviously there’s more to it than this but.

    That’s how these things work. They’re chained.

    • NaibofTabr@infosec.pubEnglish
      2·
      2 days ago

      Hmm, yes that can happen, but can it happen if you’re downloading directly from the Play store?

      • reksas@sopuli.xyzEnglish
        4·
        2 days ago

        first you download something and it has nothing malicious, then you update it later and then it has something.

        • NaibofTabr@infosec.pubEnglish
          2·
          2 days ago

          I’m sure there are apps that have malware built in yes, but I mean the MITM approach during an app download that you were describing.