32-Bit
Link 1 | Link 2

64-Bit
Link 1 | Link 2

FBReader Premium 2.6.3 Arm
Link 1 | Link 2

FBReader Premium 2.6.3 x86
Link 1 | Link 2

Google releases its monthly update for its Nexus users; which eliminated some severe security vulnerabilities in its Android OS. The latest update patches a bug which can be exploited by an MMS, Email or a website which contains a specially crafted media file.



These patched flaws are effecting Android KitKat 4.4.4,  Android Lollipop 5.1 and Android 6.0 versions. Two critical remote execution vulnerabilities in media server could allow an attacker to cause memory corruption and remote code execution as the media server process.

The patched bugs are reported on January 4th this year. Blackberry was the only vendor who released an update for its PRIV handsets, within few hours of Google's OTA update for Nexus users. Samsung users will have to wait for a week or two before they update their Android handsets.

The critical flaws which are fixed in Nexus devices are:

• Remote Code Execution Vulnerability in Broadcom Wi-Fi Driver
• Remote Code Execution Vulnerability in Mediaserver
• Elevation of Privilege Vulnerability in Qualcomm Performance Module
• Elevation of Privilege Vulnerability in Qualcomm Wi-Fi Driver
• Elevation of Privilege Vulnerability in the Debugger Daemon 

Android Tablets with pre-installed Trojan were sold on Amazon and some other online market places, which will install a malicious malware and corrupts antivirus apps silently from devices. The Trojan is dubbed as "Cloudsota", which was first discovered by the Cheetah Mobile Security Lab researchers.



This Trojan is developed by Chinese hackers according to Cheetah Mobile Security Lab researchers because the Trojan code, location of malware server and it was manufactured by Chinese companies. Cheetah Mobile Security Lab researchers posted the reviews of many customers who purchased these cheap Android tablets from online marketplaces like Amazon.

The researchers further identified that an attacker can remotely control these infected tablets. The number of tablets delivered which are infected with these Trojans are believed to be around 17,233 but there is a large number which is already been shipped by Amazon and other online marketplaces. 

Cloudsota infected devices are redirecting to some strange ads pages, automatically removing anti-virus apps, changing the users default home page. Because the Trojan has root permission, it will be restored automatically after rebooting the device. So, practically users cannot remove this Trojan from their devices.

United States, Mexico and Turkey are the countries where these pre-installed Trojan tablets are shipped. But the tablets with no brand name are believed to be highly effected according to the Cheetah Mobile research team. There are around 30 brands with are also infected with Cloudsota Trojan, but severity level is pretty low.

The Amazon and other online marketplaces are still selling these infected Trojans. So, people should avoid ordering any unbranded or low priced tablets from these marketplaces for now. Some Android tablet brands which are believed to be infected with Cloudsota Trojan are  JYJ 7, JEJA 7 Zoll, FUSION5, Alldaymall Tablet, Yuntab SZ Wave, and Tagital.

All of these infected tablets are manufactured by the Chinese manufactures, who didn't even responded to the Cheetah Mobile security lab when they suggested them to analyze their firmware. This is not the first time a n Android device is sold with a per-installed Trojan. People in Asia and Africa has been target before with the same type of campaigns.

Android developers today released a new update for its Nexus devices; which fixes seven severe vulnerabilities two of them are rated as "critical".

The update is part of the google's new security policy which was announced in August, where google will release an update every month with an aim to eliminate all new vulnerabilities in its OS.

The two highly critical vulnerabilities eliminated in this latest Android update are - "Remote Code Execution Vulnerabilities in Mediaserver" and "Remote Code Execution Vulnerability in libutils".

Four out of five other vulnerabilities fixed are rated as highly severe. The Nexus users are over the moon after the news of this latest update.

Critical Vulnerability details: 

Remote Code Execution Vulnerability in libutils - (CVE-2015-6609) 

This critical vulnerability is effecting version 6.0 and below. The vulnerability was first discovered and reported by the Copperhead Security researcher, "Daniel Micay". This vulnerability can be used through audio file processing. It could allow an hacker to cause memory corruption and remotely execute code, (code can be a malware).

The core reason behind security team rating this vulnerability critical is because of the possibility of remote code execution in a privileged service.  The affected component has access to audio and video streams as well as access to privileges that third-party apps cannot normally access.

There are other 4 vulnerabilities which the Android security team rated as highly severe - full report. While only one vulnerability severity level is Moderate. The rating of these vulnerability is based on the effects, a device can suffer if an attacker successfully exploits it.

All the Nexus users should not waste any time in updating their devices, since the vulnerabilities are being fixed. Security researchers has applauded the Google's latest policy of releasing updates like these every month, which fixes flaws in its OS. It will not only makes their users feel secure but will also increases the Nexus market share in long run.

Android emulators/simulators are largely required to run Android apps & games on PC (Windows 7/8/8.1/10) . However, choosing the correct Android emulator might become a daunting task, as if not selected properly they can really slow down your Computer (e.g Bluestacks) . So, here we bring you the best 7 Android emulators for your PC – Windows 7/8/8.1/10 which you can use to run android on computer

1 – Droid4X

A malware name Kemoge was discovered by researchers on Wednesday which is effecting Android users in more than 20 countries.The malware was discovered by the Fireeye Researchers which they believe is written by Chinese developers or controlled by Chinese hackers. This malware can only effect users who install third-party apps in their android devices. But still Kemoge is spreading very quickly around the world.

Android Anti-Root Detection Proof of Concept (POC)

rd

rd is a proof-of-concept of sandboxing apps that performs root detection.

Root detection is the cargo-cult of Android security. Everyone does it, nobody knows why.

How does it work?

By using ptrace to call dlopen on the remote process. The loaded library has a constructor that replaces the code of access with its own.

If you look at the Android source code, File.exists calls access. If an app tries to check the presence of su, We simply have to emulate its absence.

LICENSE

It is released under the WTFPL, so you are free to show that root detection is useless.

Download

Adrian Ludwig, lead engineer for Android Security at Google criticized a number of myths surrounding the definitions of malware and spyware in general. The assumptions include that the spread of malware is always increasing, most devices are not protected, and all malware can infect them.

"There is a certain amount of pessimism in security," said Adrian Ludwig, at the RSA Conference on Tuesday.



According to Ludwig nearly all Android users actually do have built-in protections on their devices out of the box, mobile malware can be classified and isolated, and mobile malware isn't actually increasing. Ludwig also assured that Google aims to take the best platform security tools available and make them free for others to build upon, in order to keep Android secure.


Android is firmly rooted in openness, Ludwig stressed from thousands of unique devices available, millions of lines of code in Android Open Source, and hundreds of OEMs, ISVs and security solutions encompassed in the ecosystem.

Google has launched a few of the initial safeguards that includes verifying apps and the Android Safety Net, which has scanned and verified more than one billion devices over the last year. Only less than one percent of devices have been found to have a Potentially Harmful App (PHA) installed, according to the Internet giant.

However, there are a few exceptions described as "regional variations," include Russia and China as markets where PHA installs are significantly higher.

"There is not uniformity in what people are encountering," Ludwig said, reiterating findings can vary day by day and region by region.

Ludwig suggested that install trends also tend to have a characteristic shape by "type," that could range from a bad application to a kind of apps targeting an asset, such as a bank.

"There is a growth in the prevalence in that kind of harmful app," Ludwig confirmed, explaining at some points it crosses a threshold and we begin to become aware that is going on.

Google is most likely looking to add more options to unlock your device according to a new report. It is said that some Android users are now receiving a new “Trusted Voice” feature, which is quite similar to face unlock but instead of requiring your face, it relies on your voice.

Unlocking a device has become far more secure over the years, evolving from PIN numbers to other methods, like a fingerprint. Android also offers other methods, including Trusted Place, Trusted Devices, and On-Body Detection, and now the list is growing again.



      However, Google hasn't officially announced the feature. It appears to be an addition to the other Smart Lock options found in Android 5.0 that arrived with version 7.0 of Google Play Services. Android Police have noted from multiple users that the fully formed feature is rolling out.

Trusted Places keeps your device unlocked in certain locations, such as at home or any place where you feel safe. It lets you do the same when your phone is connected to a Bluetooth device like a smart watch or Bluetooth speaker.

 Google has taken a good initiative by creating different choices to give people faster access to their phones and tablets. And the "OK Google" feature is actually quite good at working only with a device owner's voice.

Trusted Voice works by matching to the user’s voice model, and only when the phrase “Ok Google” is spoken. Google has also reported that other methods of locking a handset, like a PIN, pattern or password unlock are still more secure than this new method.

Google will give you a warning if you try to activate it that if someone has a recording of your voice saying “Ok Google”, they could probably unlock your device.

According to a recent report from Google Inc., the Android ecosystem is as safe as it's ever been. However some experts question key data points that support Google's conclusions.


The Android Security Report scrutinized all of the data collected regarding Android vulnerabilities found in the past year, assesses the overall security of the ecosystem and describes the advances in Android platform security that most users don't have yet.


The report comprises three major sections: the data regarding malicious apps collected by Android's chief steward; vulnerabilities patched; and the addition of new security features to the Android system.

Google claims that in 2014, the Android devices infected with malware were fewer than 1% and those who only use the Google Play Store for apps at much lower risk, although common update issues are still apparent for enterprise.

Google's lead for Android security, Adrian Ludwig, described Google's Android security model as a "layered approach," while some security features are innate to the open source system layer, and some reside in the "surface layer" which is represented by Google Play services.

Google Play services are the set of APIs and tools that is used by developers to facilitate application integration with the Android platform and Google services.

"The value of the surface layer is the ability to collect data, which helps with the road map," Ludwig said. "It should also help others identify opportunities for improving apps, or give confidence in the platform based on the threats known.”

Google Play services are getting increasingly important to Android security, as a number of security-specific services serve to protect the device and its applications.

The two main security features of Google Play services that exist on devices – Verify Apps and Safety Net – are available on Android versions 2.3 and higher, which equates to about 99.5% of the devices in use.