OnePlus backdoor means hackers could take over your phone

OnePlus 3T

A potentially risky backdoor in multiple OnePlus devices has been just unearthed by a knowing developer, revealing a hidden app that can be potentially used to gain root access and take control over the device. They are able to gain root if they have a password to bypass privilege escalation checks.

Some digging into the deep system apps on OnePlus phones has resulted in the exposure of the vulnerability that OnePlus devices possess. However, it can be exploited to enable backdoor rooting.

According to one developer named as Elliot Alderson, OnePlus has an application called as "EngineerMode", which is basically used to check whether the unit is working properly or not in the factory. However, it also holds a backdoor which is capable of root access, even if the device has not been unlocked. Furthermore, there was a hint to an "AngelaRoot" mode embedded in the APK itself. It is actually a modified version of a testing application created by Qualcomm. But on the other hand, we do hope that OnePlus patches this as well, because it is provides a legitimate backdoor to OnePlus 3, 3T, and OnePlus 5 devices.

On devices with the application present, an attacker could use the easily crackable password to hijack the device and execute malicious code. The company recently admitted to collecting personal information of users without their permission. While the company eventually reversed course on the data collection, another discovery has been made in the software of OnePlus phones. The app in question is EngineerMode APK, and it has been developed by Qualcomm for the device manufacturers to test hardware components. From there, just search for Engineer Mode to see if it is installed.

The discoverer of the app had a problem.

We've also reached out to OnePlus for comment.

Related:

  • Oil steady, tempered by caution over rising United States  output

    Oil steady, tempered by caution over rising United States output

    However, this is expected to cut only 2.5 million barrels per day (bpd), or about two per cent, off global oil demand by that time.
    Does sex trigger heart attacks?

    Does sex trigger heart attacks?

    A new study may lay your fears to rest: The risk that sex would trigger a sudden cardiac arrest is exceedingly small. Sumeet Chugh , of the Cedars-Sinai Medical Center Heart Institute in Los Angeles, said by email.
    Taylor Swift's 'Ready for It': Will play at Arrowhead next year

    Taylor Swift's 'Ready for It': Will play at Arrowhead next year

    The trek follows United Kingdom and European shows past year in the wake of the groups 2016 Rock and Roll Hall of Fame Induction. The US singer-songwriter, 27, will kick off the North American gigs with a show in Arizona on May 8, 2018.
  • Gigi Hadid: I don't have it all figured out

    Gigi Hadid: I don't have it all figured out

    You're never alone, and you're never stuck, no matter how down you feel". "Find what puts a pep in your step". Go on a walk at sunrise. "You have to work the hardest and you have to make sacrifices".
    Hate Crimes Rose 5 Percent in 2016, FBI Says

    Hate Crimes Rose 5 Percent in 2016, FBI Says

    Religious bias motivated 1,538 hate crimes previous year - over half against Jews, and about one-quarter against Muslims. It is crucial to note, however, while this is the most comprehensive report of hate crimes, it is still incomplete.
    Texas College Apartment Party Causes Floor to Collapse

    Texas College Apartment Party Causes Floor to Collapse

    Abioloa Busari, a junior at University of North Texas hosted the homecoming party and lives in the unit that collapsed. Denton police tell NBC 5 that they never received any 911 calls to complain about the noise before the collapse.
  • Multiple shootings kill 3, wound multiple students at school

    The Corning Union Elementary School District said part of the shooting spree occurred at Rancho Tehama Elementary School . The gunfire began around 8 a.m.in the community of Rancho Tehama Reserve, about 130 miles north of Sacramento .
    Almost  half of Americans have high blood pressure, new guidelines say

    Almost half of Americans have high blood pressure, new guidelines say

    But patients in the 120 systolic blood pressure group had a higher rate of kidney injury or failure, as well as fainting. The AHA says the new guidelines are created to help people address the potentially deadly condition much earlier.
    Australia Responsible for Dire Conditions of Refugees

    Australia Responsible for Dire Conditions of Refugees

    More than 600 refugees and asylum seekers have barricaded themselves inside the mothballed detention center on the island. They already demolished our shelters.
  • Mugabe in trouble: 4 army tanks move towards capital

    Mugabe in trouble: 4 army tanks move towards capital

    Eyewitnesses also said on Tuesday (Wednesday NZ time) that army tanks were seen about 20 kilometres west of the capital, Harare . In response the party's Youth League accused the military chief of subverting the constitution.
    Russian Federation  posts videogame image as 'irrefutable proof' USA  helps IS

    Russian Federation posts videogame image as 'irrefutable proof' USA helps IS

    The Kremlin denied that Putin had shown the wrong footage to the American director Oliver Stone during one of a series of interviews.
    Microsoft Black Friday deals: Xbox One S available for lowest price yet

    Microsoft Black Friday deals: Xbox One S available for lowest price yet

    If you want to know more about Windows Mixed Reality headsets , check out VRFocus' guide on the devices . There will also be a variety of deals on Xbox One bundles, games, subscriptions and accessories.

Comments

Other news