Google Pixel pwned in 60 seconds

Το Google Pixel έγινε από μια ομάδα Κινέζων hackers ενώ δίπλα του έπεσαν Apple Safari και κλασσικά το Adobe Flash σε ένα hacking διαγωνισμό το PwnFest που πραγματοποιήθηκε στη Seoul την Παρασκευή.

Mountain View's latest device offering was hacked by a Chinese white-hat ς Qihoo 360, ο οποίος χρησιμοποίησε μια άγνωστη to achieve remote code execution winning $120.000 in prize money.Google Pixel

The exploit opens the Google Play store before Chrome runs and displays a webpage that reads: "Pwned By 360 Alpha Team".

Google is now trying to develop a patch that fixes vulnerability.

Let's say it is the second time in two weeks that Pixel security is breached. The first time (zero-day is still unpatched) exploit was developed by Qihoo 360's rival team, Tencent's Keen, and became public at Mobile Pwn2Own in Japan.

After hacking in Google Pixel they were in a different order:

Το Safari της Apple τώρα, πλήρως ενημερωμένο σε λειτουργικό MacOS δεν φάνηκε και πολύ τυχερό.Οι επίσης Κινέζοι hackers της Pangu μια ομάδα που είναι γνωστή για την κυκλοφορία εργαλείων για jailbreak του iOS μαζί με τον JH, παραβίασαν το πρόγραμμα περιήγησης του Cupertino χρησιμοποιώντας ένα zero day που τους έδινε root πρόσβαση. Για το hack χρειάστηκαν 20 δευτερόλεπτα και κέρδισαν 80.000 δολάρια.

The Qihoo 360 team also infringed Adobe Flash (using a finger) using a zero-day discovery that was discovered ten years ago and a vulnerability of Win32k. They won another 120.000 dollars, and it took four seconds.

Another notable hack of PwnFest was in Microsoft Edge and a zero day exploit against the VMWare Workstation, which was released on Thursday.

Qihoo 360 hackers left with 520.000 dollars in prize money from the event.

iGuRu.gr The Best Technology Site in Greecefgns

every publication, directly to your inbox

Join the 2.081 registrants.

Written by giorgos

George still wonders what he's doing here ...

Leave a reply

Your email address is not published. Required fields are mentioned with *

Your message will not be published if:
1. Contains insulting, defamatory, racist, offensive or inappropriate comments.
2. Causes harm to minors.
3. It interferes with the privacy and individual and social rights of other users.
4. Advertises products or services or websites.
5. Contains personal information (address, phone, etc.).