iOS, Samsung apps popped at Pwn2Own

By

Vulnerabilities quietly disclosed.

Apps running on Samsung Galaxy S4 and iOS have been hacked at the Pwn2Own 2013 contest in Tokyo.

iOS, Samsung apps popped at Pwn2Own

A local team from Mitsui Bussan Secure Directions collected $40,000 for installing malware and stealing personal data on the Android-powered Samsung Galaxy S4.

The group lured a user to a malicious website, gained system-level privileges and installed applications that allowed the team to gather information, including SMS messages, contacts and browsing history.

Chinese squad from Keen Cloud Tech took $27,500 for demonstrating two exploits against Safari on the iPhone 5. The group captured Facebook credentials on iOS 7.0.3 by stealing a Facebook cookie via social engineering, and also stole a photo on iOS 6.1.4.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

First npm worm "Shai-Hulud" released in supply chain attack

First npm worm "Shai-Hulud" released in supply chain attack

"VoidProxy" PhishKit targets Google and Microsoft users

"VoidProxy" PhishKit targets Google and Microsoft users

Apple adds "mercenary spyware" protection to new A19 chip

Apple adds "mercenary spyware" protection to new A19 chip

Phishing attack nets enormous npm supply chain compromise

Phishing attack nets enormous npm supply chain compromise

Log In

  |  Forgot your password?