Apps running on Samsung Galaxy S4 and iOS have been hacked at the Pwn2Own 2013 contest in Tokyo.
A local team from Mitsui Bussan Secure Directions collected $40,000 for installing malware and stealing personal data on the Android-powered Samsung Galaxy S4.
The group lured a user to a malicious website, gained system-level privileges and installed applications that allowed the team to gather information, including SMS messages, contacts and browsing history.
Chinese squad from Keen Cloud Tech took $27,500 for demonstrating two exploits against Safari on the iPhone 5. The group captured Facebook credentials on iOS 7.0.3 by stealing a Facebook cookie via social engineering, and also stole a photo on iOS 6.1.4.
_(23).jpg&h=140&w=231&c=1&s=0)
_(20).jpg&h=140&w=231&c=1&s=0)
_(26).jpg&w=100&c=1&s=0)
iTnews Executive Retreat - Security Leaders Edition
_(1).jpg&h=140&w=231&c=1&s=0)
