Google to patch Chrome mobile hole after bank trojan hits 318k users

They only gave Microsoft 7 days.

Maybe they should focus on securing their own shit rather than checking other peoples for security issues, and then throwing a tantrum if it's not fixed in 7 days. Especially when someone points out a flaw in theirs they say "ah fuck it, we'll do it when we're ready".

The root of the problem here..

..isn't the insecure browser, it's the stupid AdSense network that's pushing links to malware. It doesn't matter how many browser bugs Google fixes if it's going to keep distributing dodgy Ads.

Adverts pushing malware you say, I don't believe it - it's a dirty plot from those nasty adblocker people! /s

This is why

I tell the devs who whine about the lack of income from my blocking ads to get stuffed...

...if you're too lazy to host (and vet) your own... I don't want to know...

You make a big deal out of a security issue that Microsoft hasn't patch that is being exploited but yet when it happens to you it won't be patched until the next version of Chrome.

Google = pot calling the kettle.

Mitigation

"Users need to install the banking trojan apps and tweak settings to allow installation of apps from stores other than Google Play to be infected"

That's the end of this "news”. Essentially this is nothing about malware or banking Trojans, its only about bring able to create files in a users download directory without their knowledge or permission. Everything else is just trying to tack something onto this story.

Ever little helps ???

Oooh Mobiles

Off topic but I'll chuck in...

For the last week I've seen (poor/slow) brute force FTP access attempts at the FTP server, looks like a botnet as they hit in turn sequentially from different IP's but using same user/password lists, most of the IP's have been cellular networks. Either I've got on to a list of an existing mobile botnet or some new exploited handsets are hitting targets and guessing user/pass combinations from the domain name.

One password tried was "derok010101" which gets some web hits but not specifically from mobiles.

I' love it!

Google outed Microslop over security vulnerabilities, then a week later gets gob smacked with their own security issues. Way to go Alphabet! Does Google have deep pockets for this screw-up?

Not sure who I dislike more, Google or Fakebook.