New Man-in-the-Middle Attack Targets Smartphones


DoubleDirect technique can compromise both Android and iPhone systems.

A new man-in-the-middle attack is reportedly allowing attackers to steal credentials and deliver malware to smartphone systems. The DoubleDirect technique works on mobile phones and tablets running either Android or iOS.  The technique is described in a blog post by the mobile security firm Zimperium. The post states that DoubleDirect lets the attacker redirect services from Google, Facebook, Twitter, Hotmail,, and other sites, and attacks have been documented in 31 countries.
Zimperium says the attack employs the ICMP Redirect feature routers use to notify mobile hosts that a better route is available. According to the blog post, “… an attacker can also use ICMP Redirect packets to alter the routing tables on the victim host, causing the traffic to flow via an arbitrary network path for a particular IP. As a result, the attacker can launch a MITM attack, redirecting the victim’s traffic to his device.”
The blog post includes a link to a tool that Zimperium has developed to look for the presence of DoubleDirect.


Related content

comments powered by Disqus
Subscribe to our ADMIN Newsletters
Subscribe to our Linux Newsletters
Find Linux and Open Source Jobs

Support Our Work

ADMIN content is made possible with support from readers like you. Please consider contributing when you've found an article to be beneficial.

Learn More”>


		<div class=