Bitdefender Labs
CompanySecurity timeline
- Vulnerability reported by Cyber Security NewsGhostMap Android flaw can trap phones in endless reboot loops
- Vulnerability reported by Bitdefender HOTforSecurityBitdefender Labs finds Android flaw where a crafted app can trigger a crash loop
- Vulnerability reported by Bitdefender LabsCrafted Android app can trap phones in a crash loop without being opened
Recent news
GhostMap Android flaw can trap phones in endless reboot loops
Bitdefender Labs disclosed GhostMap, a flaw in Android's APK parsing that can crash systemserver on install and cause a repeating boot loop, with no user interaction or permissions needed. Safe mode does not help, and a factory reset is the only reliable recovery without ADB access. Google closed the first report as Won't Fix (Not Reproducible), then said the issue sits outside the security update scope and may be addressed in a future release.
Bitdefender Labs finds Android flaw where a crafted app can trigger a crash loop
Bitdefender Labs has reported an Android flaw that lets a specially crafted app repeatedly crash a device and put it into a crash loop. The article says a single app installation can leave the phone needing a factory reset. No fix or affected versions are given in the article.
Crafted Android app can trap phones in a crash loop without being opened
Bitdefender Labs has disclosed an Android flaw, referred to as GhostMap, in which installing a specially crafted app can put a device into a crash loop. The app does not need to be launched and requests no permissions, and it contains no code that has to execute. The article does not give affected Android versions, a CVE identifier or a patch.
Phishing emails exploit reported Binance security incident to target crypto holders
Bitdefender Labs reports that phishing emails are already using reports of a security incident at Binance, which was estimated at $6.3 billion in crypto assets, to pressure recipients. The messages urge holders to send Bitcoin or verify their wallets, and follow a familiar pattern of fake support, compensation offers and urgent account warnings. Recipients should treat unsolicited wallet or account verification requests as suspect.