Express Computer
Home  »  Security  »  Hackers break into open-source Android mobile platform LineageOS

Hackers break into open-source Android mobile platform LineageOS

0 759

Hackers have broken into the core infrastructure of LineageOS, a free and open-source operating system for smartphones, tablet computers and set-top boxes, based on the Google Android mobile platform.

In a tweet, the company admitted the breach happened on Saturday night and it was detected well within time before the attackers could do any harm.

“Around 8PM PST on May 2nd, 2020 an attacker used a common vulnerabilities and exposures (CVE) in our saltstack master to gain access to our infrastructure,” said the company.

“We are able to verify that: Signing keys are unaffected, Builds are unaffected, Source code is unaffected,” added LineageOS.

According to LineageOS developers, the hacking took place after the attacker used an unpatched vulnerability to breach its Salt installation.

Salt is an open-source framework provided by Saltstack that is usually deployed and used to manage and automate servers inside data centers, cloud server setups, or internal networks, reports ZDNet.

Cyber security firm F-Secure has already disclosed two major vulnerabilities in the Salt framework that could be used to take over Salt installations.

The two vulnerabilities which, when combined, could allow attackers to bypass login procedures and run code on Salt master servers left exposed on the internet.

There are currently more than 6,000 Salt servers left exposed online that can be exploited via this vulnerability, if left unpatched.

LineageOS extends the functionality and lifespan of mobile devices from more than 20 different manufacturers owing to its open-source community of contributors from all around the world.

LineageOS is the successor to the custom ROM CyanogenMod, from which it was forked out in December 2016.

LineageOS was officially launched on December 24, 2016, with the source code available on both GitHub and GitLab.

Since its launch, LineageOS development builds are available for 109 phone models, with over 1.7 million active installs.

Get real time updates directly on you device, subscribe now.

Leave A Reply

Your email address will not be published.

LIVE Webinar

Digitize your HR practice with extensions to success factors

Join us for a virtual meeting on how organizations can use these extensions to not just provide a better experience to its’ employees, but also to significantly improve the efficiency of the HR processes
REGISTER NOW 
India's Leading e-Governance Summit is here!!! Attend and Know more.
Register Now!
close-image
Attend Webinar & Enhance Your Organisation's Digital Experience.
Register Now
close-image
Enable A Truly Seamless & Secure Workplace.
Register Now
close-image
Attend Inida's Largest BFSI Technology Conclave!
Register Now
close-image
Know how to protect your company in digital era.
Register Now
close-image
Protect Your Critical Assets From Well-Organized Hackers
Register Now
close-image
Find Solutions to Maintain Productivity
Register Now
close-image
Live Webinar : Improve customer experience with Voice Bots
Register Now
close-image
Live Event: Technology Day- Kerala, E- Governance Champions Awards
Register Now
close-image
Virtual Conference : Learn to Automate complex Business Processes
Register Now
close-image