Category: Google|May 23, 2021 | Author: Admin

Personal data of over 100 million Android users has been leaked

Share on

Incorrectly configured cloud services are blamed when it turns out that over 100 million Android users have had their data spread for all to see.

Many sinners
It was security researchers from Check Point who revealed that the personal data of more than 100 million Android users has been exposed to the open internet as a result of incorrectly configured cloud services, there is talk of a selection of services and various reasons for the leak.

 

The data was found in unprotected real-time databases used by 23 apps with download numbers ranging from 10,000 to 10,000,000.

 

Over a dozen evildoers
The revelation shows that an alarming number of Android developers do not follow basic procedures to ensure that the apps' databases are adequately secured. The number of mobile apps that have configuration errors in databases shows that this problem is very widespread and can be easily exploited by those with malicious intent.

 

Real-time databases are used to store data in the cloud and synchronize it with connected clients (app users) in real-time. The researchers from Check Point found several databases that were unprotected so that anyone could access personal information, some of it considered sensitive, belonging to more than 100 million users.

 

 

Of the total of 23 apps that Check Point analyzed, more than a dozen of these have 10 million installations or more, most of them had their real-time databases configured incorrectly and thus exposed personal information about users to the outside world.

 

The data the researchers found included name, email, date of birth, messages, locations, gender, password, photos, payment details, phone number, and received push messages. Of all the apps that were examined, the researchers found that there were a dozen apps that were the worst, and several of the apps that exposed this type of information are available in Google Play and have more than 10 million installations, examples of which are Screen Recorder, Logo Maker and Astro Guru.

 

 

Revealed security keys
The research group also found a group of apps that had security keys built into the app itself, in one of the apps they even found access details to Push services hard-coded.

 

One of the worst, Screen Recorder, which also has 10 million installations, so researchers found access details for the cloud storage the app used. These access details could potentially allow attackers to access screenshots from app users. The same also applied to the iFax app, whereby using the access details you could see documents and faxes belonging to more than half a million users.

 

Security through obscurity
Through the research at Check Point, the researchers found that some developers used base64 encryption of security keys that do not really provide any kind of security as decoding of the keys is not protected.

 

Even if the application does not store keys in clear text, all that is needed is to find the part of the code that initializes access to cloud services, which mostly receives the keys as parameters, and follows their values. Eventually, if the keys are coded into the app, we will receive the value in them, writes Check Point.

 

Have you used any of the apps that Check Point has checked out?

Sponsored Ads:

Comments:


There are already problems with them

Category: Apple|Sep 26, 2022 | Author: Admin

GTA VI-HACKER (17) should be arrested

Category: General|Sep 25, 2022 | Author: Admin

25 percent consider quitting up

Category: General|Sep 24, 2022 | Author: Admin

This is Logitech's Sky-Handened with up to 12 hours of gaming

Category: General|Sep 23, 2022 | Author: Admin

The Taliban think PUBG is too violent

Category: General|Sep 22, 2022 | Author: Admin

If YouTube crashes on the iPhone, this is the solution

Category: General|Sep 21, 2022 | Author: Admin

See the graphics RTX 40 is capable of - here are the prices - DLSS 3 only to RTX 40

Category: General|Sep 20, 2022 | Author: Admin

Now the Rockstar Monster leak comments on the GTA VI

Category: General|Sep 19, 2022 | Author: Admin

Snapchat, Tiktok and Instagram can destroy the iPhone 14 Pro

Category: Apple|Sep 18, 2022 | Author: Admin

Updated: Uber's employees did not believe what they saw: Must have become the pig-hack by 18-year-old

Category: General|Sep 17, 2022 | Author: Admin

Only one mobile lasts longer than the iPhone 14 Pro Max in a surf test

Category: Apple|Sep 16, 2022 | Author: Admin

This is the date The Sims 4 goes free

Category: General|Sep 15, 2022 | Author: Admin

Google gives up

Category: Google|Sep 14, 2022 | Author: Admin

DOWNLOAD NOW: iOS 16 has been released

Category: Apple|Sep 13, 2022 | Author: Admin

Here it is: OnePlus 11 Pro

Category: General|Sep 12, 2022 | Author: Admin
more