{"id":52203,"date":"2016-08-19T10:13:25","date_gmt":"2016-08-19T17:13:25","guid":{"rendered":"https:\/\/blogs.mcafee.com\/?p=52203"},"modified":"2025-08-06T22:33:56","modified_gmt":"2025-08-07T05:33:56","slug":"80-of-android-phones-are-at-risk","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/mobile-security\/80-of-android-phones-are-at-risk\/","title":{"rendered":"80% of Android Phones Are at Risk! Luckily, People Can Use Encryption for Safety"},"content":{"rendered":"

Let\u2019s imagine you traveled back in time, smartphone in pocket. Let\u2019s say a medieval peasant sees you using this strange device. Naturally, they\u2019d be curious. Would you be able to explain how it works? Most people wouldn\u2019t, for a reason\u2014smartphones are designed to be easy to use. And this can create a problem: tech-savvy criminals may view non-technical consumers <\/em>as medieval peasants, prime for swindling. In recent days, that seems like the case. Cyber-crooks have tried their hands at a new tactic<\/a>, based on a technical component of Android phones called the Linux kernel.<\/p>\n

To understand this method, some background information is in order. Software is built in layers. Think of how a house is constructed. The roof is supported by walls, supported by scaffolding, supported by a foundation. It\u2019s the same for operating systems, like Android. Specifically, the Linux kernel is a foundational layer in Android devices. It defines how applications interact with the device\u2019s hardware.<\/p>\n

Consequently, if cybercriminals can exploit the Linux kernel<\/a>, they can tap into your phone directly. This is a step up from traditional attacks, where rogues typically have to infiltrate a website to send your device malicious instructions. With the new method, that\u2019s not necessary\u2014your device\u2019s behavior can be altered without the middleman.<\/p>\n

What does this all mean? Imagine this: you happen to land on a website, which unbeknown to you, isn\u2019t secured. Suddenly, your phone shows a login prompt.\u00a0After entering your username and password, that info is now in perpetrator\u2019s hands. Criminals have controlled your device\u2019s behavior from deep within its own software. And experts estimate that the Linux kernel issue could affect up to 80% of Android phones. That\u2019s 1.4 billion devices<\/a>!<\/p>\n

Now, before anyone panics, there are some important caveats<\/a> that should help you feel at ease about using an Android smartphone. Crooks can\u2019t simply remotely access your phone. To pull this trick off, they must tap into a connection from your device like a website, message, or a link shared in their news feed. Specifically, they need to know the IP address and source. Even then, it would take 10 seconds to test the connection, then 45 seconds to inject malicious code. So this attack isn\u2019t likely to be used in bulk against your average Joe.<\/p>\n

At the same time, it\u2019s important for people to be aware of security issues, big and small. The more educated users are, the better they can protect themselves. Since we know the Linux kernel hack needs access to connections to your phone, for example, we can defend against this loophole being exploited. By using encrypted communications, cybercriminals can be denied entry from the get-go.<\/p>\n

The Benefits of Encryption<\/h2>\n

Here are some tips to make use of, that explain how encryption can secure your Android:<\/p>\n