Scientist developed clickjack rootkit for Android

The famous Xuxian Jiang (Xuxian Jiang) with his team from the University of North Carolina developed the rootkit clickjack-ing concept for Android. Its uniqueness lies not only in the fact that it can work without restarting the device, but also uses the Android framework in its work, without requiring a deep modification of the firmware or the system kernel. A rootkit can be loaded with an infected application and infect the system.



The video shows how on a device without a root, Jiang uses a rootkit to replace applications - in fact, the rootkit hides the application you need and, at the start of another, transfers control to it. When this is used, the standard functions of the shell, "that is completely different from previous approaches."
')
The professor explains that "none of the existing security software can detect an exploit."

The good news is that the problem is still discovered by “white hats” and the risk of infection for consumer devices is quite low. In addition, "now we have identified the problem and can begin to work on fixing it and protecting against such attacks."