Clever LG Droid Bug Can Attack You Through Birthday Notifications

SNAP vulnerability affects Smart Notice application pre-installed on every new LG device.

Bugsec and Cynet researchers have discovered a vulnerability in LG Android phones pre-installed notification application that allows an attacker to run arbitrary JavaScript code on the devices.
The SNAP bug, as researchers have dubbed it, takes advantage of the fact that the Smart Notice app doesnt validate the information it presents to the user. Via the birthday notification or callback reminder functions, researchers were able to add a new contact to the devices contact list -- a malicious contact, with a script embedded.
Using this method, researchers say they could lift data, force the user to malicious websites, or make the phone go crazy, getting it stuck in an infinite loop until a hard reset. See the
research teams demo
for more.

Last News
▸ 7 arrested, 3 more charged in StubHub cyber fraud ring. ◂ Discovered: 23/12/2024 Category: security	▸ Nigerian scammers now turning into mediocre malware pushers. ◂ Discovered: 23/12/2024 Category: security	▸ Beware EMV may not fully protect against skilled thieves. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Clever LG Droid Bug Can Attack You Through Birthday Notifications