Google issues patch for Android icon permissions attack
Android 2014 = Windows
IDG News Service - Google has issued a patch for an attack that could lead an Android user to a phishing site, according to security vendor FireEye.
FireEye recently spotted an malicious Android application that could modify the icons of other applications so that when they're launched, they send victims to a phishing website.
The malware is abusing a set of permissions known as "com.android.launcher.permission.READ_SETTINGS" and "com.android.launcher.permission.WRITE_SETTINGS."
The permissions allow an application to modify configuration settings of Android's Launcher, including that of icons, wrote researchers Hui Xue,A Yulong ZhangA andA Tao Wei on a company blog.
http://www.computerworld.com/s/article/9247674/Google_issues_patch_for_Android_icon_permissions_attack
