A Local Cross-Site Scripting Attack against Android Phones
Michael Backes, Sebastian Gerling, Philipp von Styp-Rekowsky · 2011
In the rst quarter of 2011, Android has become the top-selling operating system for smartphones. Its increase in market share has made Google’s mobile operating system an attractive target for attackers. In this paper, we present a novel cross-site scripting attack that allows unprompted installation of arbitrary applications from the Android Market. Our attack is based on a single malicious application, which, in contrast to previously known attacks, does not require the user to grant it any permissions.