Clone2Pwn: Android data migration flaws let attackers steal data over Wi-Fi

Researchers at TU Graz and A-SIT found Clone2Pwn vulnerabilities in the stock Android data migration tools of Samsung, Google and Xiaomi. An attacker within Wi-Fi range could intercept sensitive data during transfer to a new phone.

• Flaws affect stock data migration on Samsung, Google and Xiaomi devices
• Clone2Pwn attack works within Wi-Fi range without physical access
• Study conducted by TU Graz and A-SIT