Home > News content

Ali Weixin found loopholes Tencent emergency repair concurrent textual thanks

via:CnBeta     time:2018/2/14 11:35:10     readed:379

access:

Ali Cloud

Recently Android version of WeChat upgraded to 6.6.3, the official update log only one "fixes a few known issues," and WeChat official public number "WeChat pie" made an explanation of the update: The new version may affect the user Security loopholes.

Originally on February 7, the National Information Security Vulnerability Library (CNNVD) to WeChat feedback Android client loopholes in the attacker can obtain remote permissions through the loopholes, the user's property information security hazards are very large.

When a victim receives and clicks a message on WeChat, the vulnerability causes the victim to clone the account without any knowledge by the attacker. While the history of chat records are all stolen, attackers can simultaneously receive the victims of new information. Even worse, even micro channel payment can be cloned.

Image taken from "boss simulcast"video

This loophole was discovered by Ali Security Orion Labs and Pandora Labs, and the vulnerability information was reported to the relevant state departments for the first time and synchronizedTencentthe company.

WeChat team immediately overnight thorough investigation and analysis, and on February 9 on the line a new version of Android client.

February 12, WeChat official account "WeChat pie" published an article explaining the issue of the loophole. And recommend Android users to upgrade to 6.6.3 version. WeChat said that users do not have to upgrade do not worry, WeChat team has the first time possible malicious attacks, the server backstage for interception. Your WeChat is very safe.

In addition, WeChat also thanked the Ministry of Industry and Information Technology Network Security Administration and China Information Security Evaluation Center for their supervision and guidance all the time; and expressed their gratitude to the Ali security team for timely submission and feedback of loopholes.

It can be seen that when it comes to the user's security issues, even if it is recognized by everyone as "competitors" Alibaba and Tencent also stand in the same front, to eliminate security risks for the user.

Of course, during the Spring Festival, everyone should also have more hearts, do not easily click on unknown links, information and so on. As well as payment of consumer spending at the same time also carefully check the number of bills to avoid inadvertently led to property damage.

China IT News APP

Download China IT News APP

Please rate this news

The average score will be displayed after you score.

Post comment

Do not see clearly? Click for a new code.

User comments