The Zimperium researchers have named this new attack as DoubleDirect Attack.

DoubleDirect

The so-called DoubleDirect technique enables an attacker to redirect a victims traffic to the attackers rig.

As a result, the attacker can launch a MITM attack, redirecting the victims traffic to his equipment.

New Man-in-the-Middle attack called DoubleDirect Attack targeting Android and iPhone users

Traditional ICMP Redirect attacks has limitations and known to be half-duplex MITM.

Zimperium has uploaded a complete Proof of Concept for the DoubleDirect Attack which can be downloadedhere.

Who is at risk?

spot_img

Neither Google or Apple has officially commented on the Zimperium researchers findings as of yet.

source: www.techworm.net