Google has released an emergency patch to prevent a rooting exploit that affects all Android devices.
The issue with this bug is that Google is not able to patch the vast majority of Android devices so hundreds of millions of devices are still going to be vulnerable to this exploit. However, this issue was severe enough for Google to release an unscheduled patch for its own Nexus products.
Google has warranted an advisory that stated these rooting apps could lead to a device compromise that could only be solved by reflashing the operating system.
Google was originally planning to schedule this patch for the next monthly update but it was released ahead of schedule after Zimperium a security firm, reported that the bug was being abused on a Nexus 5.
The advisory “applies to all unpatched Android devices on kernel versions 3.4, 3.10 and 3.14, including all Nexus devices. Android devices using Linux kernel version 3.18 or higher are not vulnerable,” Google said.
Google is also going to be removing all forms of these apps from the Google Play Store to prevent the spread of this malware. If you are not going to receive this update there are somethings that you can do to solve this issue.
What To Do If You Aren’t Getting The Patch
The easiest thing you can do is simply not attempt to root your device if you aren’t tech savvy. However, you should install a mobile antivirus such as 360 Mobile Security. This will prevent you from downloading anything malicious or visiting any malicious website that might be distributing it.
You should also consider checking all of your current apps to make sure they aren’t already installed or affecting your device. Open up your app drawer and look through all of your apps and check if you see any useless apps or anything regarding rooting. If your device is not rooted and you are installing root-only apps you should remove them anyways.
After you have removed all of these apps you should still check your device by running a scan with your antivirus. I also recommend that if you have downloaded an app that you think might be at risk you do a factory reset of your current device to be on the safe side.