Category: Google|Apr 15, 2020 | Author: Admin

A Study of the top 150,000 Android Apps Reveals 12,706 to Contain a Variety of Backdoors

Share on

A Study of the top 150,000 Android Apps Reveals 12,706 to Contain a Variety of Backdoors

Once again, numerous Android apps with suspicious behavior have surfaced online.

Once again, numerous Android apps with suspicious behavior have surfaced online. According to researchers, thousands of these Android apps on app stores (including Play Store) contain backdoors. Whereas, numerous others contain blacklist secrets. Android Apps With Backdoors Researchers from The Ohio State University, New York University, and CISPA Helmholtz Center for Information Security have conducted a detailed analysis of various mobile apps. According to the detailed shared in their research paper, thousands of Android apps exist online that contain backdoors.

In brief, they developed a tool named “InputScope” to unveil vulnerabilities and hidden behaviors of mobile applications. The tool analyzes the apps’ input validation behavior to uncover these hidden traits. Using this tool the researchers analyzed 150,000 Android apps from various app stores. These included the top 100,000 apps from Google Play Store, top 20,000 apps from an outside app store, and 30,000 pre-installed Samsung apps. They then found thousands of these Android apps to have backdoors.

We identified 12,706 apps containing a variety of backdoors such as secret access keys, master passwords, and secret commands that can allow users to access admin-only functions or attackers to gain unauthorized access to users’ accounts. Also, our analysis discovered 4,028 apps validating user input against blacklisted words of different categories such as insults, racial discrimination, political leader names, and mass incidents.

Responsible Disclosure After completing their study, the researchers followed responsible disclosure. They contacted all app developers to inform them of the flaws via their contact details available. For unpatched apps, the researchers preferred to keep their names hidden until the developers issue the fixes. Though, some of these apps have patched the flaws, for which the researchers disclosed the package names There is still a  huge number of apps exhibiting such dubious behaviors with a large number of these being unpatched which continue to pose a threat to Android users.

Let us know your thoughts in the comments.

Sponsored Ads:

Comments:


Only possible with VPN

Category: IT|Apr 22, 2024 | Author: Admin

Apple sidles into sideloading in the EU

Category: Apple|Apr 21, 2024 | Author: Admin

Report: Microsoft-OpenAI ownership might get conditional OK from EU regulators

Category: IT|Apr 20, 2024 | Author: Admin

Giant change at Google could change everything

Category: Google|Apr 19, 2024 | Author: Admin

Now Windows will be bothered about this too

Category: Microsoft|Apr 18, 2024 | Author: Admin

Test the new AI trick with Logitech

Category: IT|Apr 17, 2024 | Author: Admin

The US Government Has a Microsoft Problem

Category: Microsoft|Apr 16, 2024 | Author: Admin

Now comes the commercial

Category: Microsoft|Apr 15, 2024 | Author: Admin

Linux Foundation is leading fight against fauxpen source

Category: IT|Apr 14, 2024 | Author: Admin

3000 news articles!!! Happy reading!

Category: General|Apr 13, 2024 | Author: Admin

Google shuts down new product

Category: IT|Apr 12, 2024 | Author: Admin

YouTube CEO warns OpenAI that training models on its videos is against the rules

Category: IT|Apr 11, 2024 | Author: Admin

Google unveils Arm-based data center processor, new AI chip

Category: Google|Apr 10, 2024 | Author: Admin

Microsoft to invest $2.9 bln to expand AI, cloud infra in Japan

Category: Microsoft|Apr 9, 2024 | Author: Admin

Nintendo shuts off online access for 3DS and Wii U today

Category: IT|Apr 8, 2024 | Author: Admin
more