A research firm in UK has found a vulnerability in the Android mobile software which can be used as a “Master Key” where by an intruder can take complete control of the phone. The bug could be exploited to let an attacker do what they want to a phone including stealing data, eavesdropping or using it to send junk messages. It is reported that the loophole has been present in every version of the Android operating system released since 2009.
It is unfortunate that Google has not been able to fix the bug for such a long time and is playing with the security of the users.
It is these same phones which RBI and the Banks in India are relying on for critical Banking operations.
I hope RBI realizes its folly in promoting Mobile Banking without properly taking control of the security aspects and takes immediate corrective steps.
Naavi
