Category: Google|Apr 15, 2020 | Author: Admin

A Study of the top 150,000 Android Apps Reveals 12,706 to Contain a Variety of Backdoors

Share on

A Study of the top 150,000 Android Apps Reveals 12,706 to Contain a Variety of Backdoors

Once again, numerous Android apps with suspicious behavior have surfaced online.

Once again, numerous Android apps with suspicious behavior have surfaced online. According to researchers, thousands of these Android apps on app stores (including Play Store) contain backdoors. Whereas, numerous others contain blacklist secrets. Android Apps With Backdoors Researchers from The Ohio State University, New York University, and CISPA Helmholtz Center for Information Security have conducted a detailed analysis of various mobile apps. According to the detailed shared in their research paper, thousands of Android apps exist online that contain backdoors.

In brief, they developed a tool named “InputScope” to unveil vulnerabilities and hidden behaviors of mobile applications. The tool analyzes the apps’ input validation behavior to uncover these hidden traits. Using this tool the researchers analyzed 150,000 Android apps from various app stores. These included the top 100,000 apps from Google Play Store, top 20,000 apps from an outside app store, and 30,000 pre-installed Samsung apps. They then found thousands of these Android apps to have backdoors.

We identified 12,706 apps containing a variety of backdoors such as secret access keys, master passwords, and secret commands that can allow users to access admin-only functions or attackers to gain unauthorized access to users’ accounts. Also, our analysis discovered 4,028 apps validating user input against blacklisted words of different categories such as insults, racial discrimination, political leader names, and mass incidents.

Responsible Disclosure After completing their study, the researchers followed responsible disclosure. They contacted all app developers to inform them of the flaws via their contact details available. For unpatched apps, the researchers preferred to keep their names hidden until the developers issue the fixes. Though, some of these apps have patched the flaws, for which the researchers disclosed the package names There is still a  huge number of apps exhibiting such dubious behaviors with a large number of these being unpatched which continue to pose a threat to Android users.

Let us know your thoughts in the comments.

Sponsored Ads:

Comments:


Password program hacked again

Category: IT|Dec 3, 2022 | Author: Admin

Update your iPhone

Category: Apple|Dec 2, 2022 | Author: Admin

Tesla gets Dolby Atmos

Category: General|Dec 1, 2022 | Author: Admin

If Twitter is kicked out by Apple and Google, Musk will make his own mobile phone

Category: IT|Nov 30, 2022 | Author: Admin

The EU is investigating TikTok

Category: IT|Nov 29, 2022 | Author: Admin

Must be scrutinized extra carefully

Category: IT|Nov 28, 2022 | Author: Admin

Important drivers launched

Category: IT|Nov 27, 2022 | Author: Admin

Soon, Apple will make the big iPhone change

Category: Apple|Nov 26, 2022 | Author: Admin

Approaching the Apple iPhone

Category: Google|Nov 25, 2022 | Author: Admin

Microsoft is making an iPhone comeback

Category: Microsoft|Nov 23, 2022 | Author: Admin

This is how the iPhone 15 Pro becomes much faster

Category: Apple|Nov 22, 2022 | Author: Admin

Apple makes iPhone more like Android (if you want)

Category: Apple|Nov 21, 2022 | Author: Admin

These countries cheat the most and this is how they do it

Category: General|Nov 20, 2022 | Author: Admin

How to set up NightScout Docker using CyberPanel Hosting panel

Category: Tutorials|Nov 19, 2022 | Author: Admin

It will soon be over and out, warns Microsoft

Category: Microsoft|Nov 18, 2022 | Author: Admin
more