Archive — US — techcrunch
Researchers uncover unknown Android flaws used to hack into a student’s phone
Amnesty International revealed previously unknown zero-day vulnerabilities in Android, allowing authorities to hack phones using Cellebrite tools. These flaws, affecting over a billion devices, were discovered during an investigation into the hack of a student activist's phone in Serbia. Google has since fixed these issues, while Cellebrite has suspended use of its products in Serbia amid growing concerns over digital rights violations.
Key points
- Amnesty International discovered three zero-day vulnerabilities in Android linked to Cellebrite's phone-unlocking tools.
- These vulnerabilities affect the core Linux USB kernel, potentially impacting over a billion Android devices.
- The investigation began after a student activist's phone was hacked by Serbian authorities using Cellebrite tools.
- Cellebrite ceased operations with Serbian authorities in light of allegations of abuse regarding the use of their technology.
- The vulnerabilities allowed unauthorized access to phones without the users' consent, violating human rights.
Why it matters
- The discovery aligns with ongoing global concerns about digital surveillance and privacy as governments increasingly employ spyware.
- The incident reflects the broader issue of digital rights violations, especially during protests or civil unrest.
- By 2025, trends in IT emphasize increased scrutiny of cybersecurity practices, particularly regarding misuse of forensic technology.
The findings by Amnesty International highlight significant flaws in Android security that endanger user privacy; addressing these vulnerabilities is crucial as digital rights and cybersecurity remain pressing global issues.