Vulnerabilities in Android: which are the most common and how to prevent them

Android is a free software operating system based on Linux, which belongs to Google and is present in all Xiaomi smartphones . It is primarily intended for mobile devices. Years ago it was an unknown, but that changed after its acquisition by the company behind the most used search engine in the world during 2005.

Since then, the operating system has evolved, becoming one of the most used internationally . Today there are millions of devices, of various brands, that have Android. Each new update opens the doors to innovative features.

However, the updates also seek to address vulnerabilities in the operating system . Every day a new computer threat appears trying to penetrate the security of Android. and that therefore can affect our Xiaomi, Redmi or POCO .

What are the most common vulnerabilities?

Google is responsible for providing, frequently, patches in its updates to repair possible vulnerabilities that affect the system. The manufacturer's developers are constantly checking to find gaps as quickly as possible.

During 2019, Google reported solving around 42 critical vulnerabilities in the Android operating system. Some of the components that were affected were:

• Framework: The framework is the basic structure of a software. In this section, the computer attackers unleashed malware that breached security to execute remote code, through an infested image in PNG format.
• Kernel: This is how the kernel of the operating system is called. This section presented vulnerabilities caused by the execution of a remote code, generated by executing a malicious application.
• Libraries: Libraries are the space where the data of the mobile device is stored: documents, images, videos, application data, among others. Its security was compromised by the presence of files contaminated with malware.

However, with the passage of time, new vulnerabilities have been presented, which affect other sections of the operating system, which is why it is also common for them to be compromised. These are:

• Qualcomm processors: The Qualcomm processor is present in the vast majority of Android devices, so it is normal for attackers to have it in their sights. The developers have found a vulnerability in the tethering driver. Here hackers take the opportunity to create a computer hole to steal private data.
• Browsers: Browsing the Internet may seem simple, but you need to be very careful about which portals you visit. The vast majority of vulnerabilities are caused by malware coming from malicious websites. These are responsible for installing harmful software on the device, with the intention of blocking your terminal to request a payment.
• Applications: Finally, the Apps are another sensitive section in the security of all mobile devices. Especially when said App does not come from an official store. Attackers use adware (malicious advertising) to download dangerous software onto your mobile that could steal your information.

There are many other vulnerabilities that can affect other parts of the device, such as the microphone or the camera. For this reason, it is essential to know how to recognize when your terminal is in danger and especially if our Xiaomi has been compromised.

How to identify that your device was compromised?

Knowing how to recognize when a mobile device is infested by malware is not an easy task. Computer attackers have been very careful to disguise the presence of such malicious programs .

On the other hand, malware can also hinder the way you use the device. They are small changes that, normally, would be taken as a slight error in the interface. However, it can be something much more serious.

Your smartphone could be compromised and infecting other devices.

All devices, both Android and iOS, are prone to a hacking attempt. While the developers are in charge of designing updates that fix the vulnerabilities, the user must be aware of all the signs of possible malware . Here we list a few:

• Increase the presence of ads on your mobile device, no matter what application or browser you are using.
• Moments after installing an application, its icon disappears without a trace.
• The battery in your terminal drains much faster than normal, even if you haven't used it all day.
• Unknown apps appear on your mobile device. They cannot even be located in the Google Play store, as they are installed by malware from an unknown source.
• Apps tend to crash more often. It is common for mobile devices to crash. However, malware can leave your phone with the screen locked for much longer.
• Data usage reaches very high levels for no apparent reason.
• As a consequence of the previous point, the telephone bill increases suddenly. If you haven't made great use of your data plan, it is possible that a virus is affecting your device.
• Finally, an infected computer tends to overheat for no reason. Although the causes can be several, the presence of malware is usually one of the main ones.

What are the most common malware that could affect your Xiaomi?

There are various kinds of computer viruses that can compromise the security of your device. Each one has its own peculiarities, and they can damage your terminal in different ways. Next, we are going to describe the most common types of malware that can attack your Android device.

Ransomware

It is a malicious program that is responsible for encrypting your private information. In order to unlock your data, you must send a ransom payment to the attackers. However, it is necessary to point out that your files are never released, so we advise you not to fall into the impulse to pay.

Spyware

Spyware could collect all of your personal information stored on your smartphone.

Spyware is a malicious software that acts silently. It enters the terminal and is responsible for stealing private information to send it to the attackers' server. It is usually posed as legitimate applications, in order to record all user activity: text messages, keystrokes, user names, passwords, etc.

Trojans

A Trojan is a malware that usually comes inside a legitimate application. To make it dangerous, user must install it first. Trojans are responsible for blocking the device or destabilizing applications.

Worms

It is considered one of the most dangerous types of malware. Its peculiarity is that, once installed, all files on the device are reproduced and affected. They can appear through emails, unofficial applications, uncertified websites, and even through text messages.

How can I prevent vulnerabilities in Android?

As you can see, cyber attacks can seriously compromise the integrity of your Android device, and put your private information at risk. For that reason, we are going to provide you with a series of recommendations to avoid the presence of these malicious programs on your terminal.

Keep your device updated

It is essential to keep the Android mobile always updated. As we mentioned earlier, developers are constantly designing patches to fix security flaws. An updated terminal is less likely to be attacked.

1. Don't download unknown files

At no time open an email or message that you are not expecting. Much less download the files it contains. Attackers use email addresses or messaging applications to send malware to users to carry out scams or Phishing (phishing). If you don't know who the sender is, report the email and delete it.

2. Be careful with the Apps you download

Before installing an unknown application, find out about it on the Internet.

Applications are one of the most frequent means of infection. The Play Store has a service called Google Play Protect to verify the security of the Apps you install on the device.

3. Install a reliable antivirus

In the Google Play store you can find various antivirus to increase the protection of your device. Most of these offer free versions, but if you can, you can subscribe to a paid plan for additional protection against different types of malware.

4. Avoid pop-up advertising

On the Internet, it is common to find pop-up advertising on different portals or applications. Remember that some of these notices may be malicious adware. If you start to notice an increase in ads, close your browser and run a security scan of your device.

5. Do not enter unsafe websites

Make sure at all times that the website you are entering has a lock on the URL bar. This means that you have a secure connection certificate. It means that the data you send is kept private at all times. If the page does not have such a certificate, you suspect that it is a malicious site.

6. Activate parental control

Finally, if you have children, activate parental control on their respective phones. This way you make sure that they do not enter dubious websites, or download applications from unknown sources. We also recommend informing them about the potential risks of browsing unsafe sites.

Security is one of the fundamental aspects for every Android user. Mobile devices have become an essential element in everyone's life. For this reason, to safeguard your private data, take into consideration the measures that you consider necessary.

Johnny Carrizalez Higuera

Graduate in social communication. Passionate about new technologies, cinema and literature.

The entry Vulnerabilities in Android: which are the most common and how to prevent them was published first in XIAOMIADICTOS: Xiaomi news and news website .