Hide and Seek IoT Botnet Now Spreads to New Android Devices Using ADB over Wi-Fi

[silversurfer]

The Hide and Seek IoT botnet has added a new feature to its arsenal: it is now capable of infecting new Android-based devices via a Wi-Fi connection using an Android Debug Bridge (ADB) security flaw as discovered by Bitdefender Labs.

As reported by Bitdefender Labs, the new Hide and Seek variant is capable of recruiting new bots in the network by exploiting the Android Debug Bridge (ADB) feature used for troubleshooting by Android developers. Although not all Android devices come with ADB toggled on by default, some Android vendors decide to leave it enabled providing a simple to exploit attack vector using Wi-Fi ADB remote connections through the 5555. Connecting to an Android system where ADB is enabled by default allows attackers to get shell access as root, giving them the possibility to run and install anything on the compromised device with full admin privileges.

Source: https://news.softpedia.com/news/hide-and...3121.shtml