Category: Google|Apr 15, 2020 | Author: Admin

A Study of the top 150,000 Android Apps Reveals 12,706 to Contain a Variety of Backdoors

Share on

A Study of the top 150,000 Android Apps Reveals 12,706 to Contain a Variety of Backdoors

Once again, numerous Android apps with suspicious behavior have surfaced online.

Once again, numerous Android apps with suspicious behavior have surfaced online. According to researchers, thousands of these Android apps on app stores (including Play Store) contain backdoors. Whereas, numerous others contain blacklist secrets. Android Apps With Backdoors Researchers from The Ohio State University, New York University, and CISPA Helmholtz Center for Information Security have conducted a detailed analysis of various mobile apps. According to the detailed shared in their research paper, thousands of Android apps exist online that contain backdoors.

In brief, they developed a tool named “InputScope” to unveil vulnerabilities and hidden behaviors of mobile applications. The tool analyzes the apps’ input validation behavior to uncover these hidden traits. Using this tool the researchers analyzed 150,000 Android apps from various app stores. These included the top 100,000 apps from Google Play Store, top 20,000 apps from an outside app store, and 30,000 pre-installed Samsung apps. They then found thousands of these Android apps to have backdoors.

We identified 12,706 apps containing a variety of backdoors such as secret access keys, master passwords, and secret commands that can allow users to access admin-only functions or attackers to gain unauthorized access to users’ accounts. Also, our analysis discovered 4,028 apps validating user input against blacklisted words of different categories such as insults, racial discrimination, political leader names, and mass incidents.

Responsible Disclosure After completing their study, the researchers followed responsible disclosure. They contacted all app developers to inform them of the flaws via their contact details available. For unpatched apps, the researchers preferred to keep their names hidden until the developers issue the fixes. Though, some of these apps have patched the flaws, for which the researchers disclosed the package names There is still a  huge number of apps exhibiting such dubious behaviors with a large number of these being unpatched which continue to pose a threat to Android users.

Let us know your thoughts in the comments.

Sponsored Ads:

Comments:


Mac update fixes important bugs

Category: Apple|Mar 27, 2024 | Author: Admin

The Windows Format Dialog Remains Unchanged After 30 Years

Category: Microsoft|Mar 26, 2024 | Author: Admin

Google's new AI search results promotes sites pushing malware, scams

Category: Google|Mar 25, 2024 | Author: Admin

YouTube ordered not to talk about it

Category: IT|Mar 24, 2024 | Author: Admin

It became too difficult for Apple

Category: Apple|Mar 23, 2024 | Author: Admin

Windows 11 Notepad finally gets spellcheck and autocorrect

Category: Microsoft|Mar 22, 2024 | Author: Admin

This is how Android 15 gets better

Category: Google|Mar 21, 2024 | Author: Admin

Warns Apple

Category: Apple|Mar 20, 2024 | Author: Admin

Microsoft again bothers Chrome users with Bing popup ads in Windows

Category: Microsoft|Mar 19, 2024 | Author: Admin

Increased by 164 percent

Category: IT|Mar 18, 2024 | Author: Admin

Anthropic launches its fastest and cheapest AI model yet

Category: IT|Mar 17, 2024 | Author: Admin

What is Darwin AI and how could Apple use its new tech?

Category: Apple|Mar 16, 2024 | Author: Admin

DO NOT update Minecraft!

Category: IT|Mar 15, 2024 | Author: Admin

Did you experience the problem? Now it is fixed

Category: Microsoft|Mar 14, 2024 | Author: Admin

Over 12 million auth secrets and keys leaked on GitHub in 2023

Category: IT|Mar 13, 2024 | Author: Admin
more