Home

Apr 15, 2020

A Study of the top 150,000 Android Apps Reveals 12,706 to Contain a Variety of Backdoors

authorarticle: Master3395
android.jpg
video: 
youtube: 
sources: 
keywords: android, android app, Android app malware, Android Application, Android Apps, Android apps backdoor, android apps containing malware, android apps evade app permission, android device, Android devices vulnerable, Android flaw, android malware, Android Pho
Category: Google
Posted by: Admin

A Study of the top 150,000 Android Apps Reveals 12,706 to Contain a Variety of Backdoors

Once again, numerous Android apps with suspicious behavior have surfaced online.

Once again, numerous Android apps with suspicious behavior have surfaced online. According to researchers, thousands of these Android apps on app stores (including Play Store) contain backdoors. Whereas, numerous others contain blacklist secrets. Android Apps With Backdoors Researchers from The Ohio State University, New York University, and CISPA Helmholtz Center for Information Security have conducted a detailed analysis of various mobile apps. According to the detailed shared in their research paper, thousands of Android apps exist online that contain backdoors.

In brief, they developed a tool named “InputScope” to unveil vulnerabilities and hidden behaviors of mobile applications. The tool analyzes the apps’ input validation behavior to uncover these hidden traits. Using this tool the researchers analyzed 150,000 Android apps from various app stores. These included the top 100,000 apps from Google Play Store, top 20,000 apps from an outside app store, and 30,000 pre-installed Samsung apps. They then found thousands of these Android apps to have backdoors.

We identified 12,706 apps containing a variety of backdoors such as secret access keys, master passwords, and secret commands that can allow users to access admin-only functions or attackers to gain unauthorized access to users’ accounts. Also, our analysis discovered 4,028 apps validating user input against blacklisted words of different categories such as insults, racial discrimination, political leader names, and mass incidents.

Responsible Disclosure After completing their study, the researchers followed responsible disclosure. They contacted all app developers to inform them of the flaws via their contact details available. For unpatched apps, the researchers preferred to keep their names hidden until the developers issue the fixes. Though, some of these apps have patched the flaws, for which the researchers disclosed the package names There is still a  huge number of apps exhibiting such dubious behaviors with a large number of these being unpatched which continue to pose a threat to Android users.

Let us know your thoughts in the comments.

authorarticle: Master3395
android.jpg
video: 
youtube: 
sources: 
keywords: android, android app, Android app malware, Android Application, Android Apps, Android apps backdoor, android apps containing malware, android apps evade app permission, android device, Android devices vulnerable, Android flaw, android malware, Android Pho

Comments:

comments powered by Disqus

Return

Sponsored Ads:

Discord

Page 1 of 573  >  >>

What's in the latest Edge update? Rollbacks and new browser telemetry policies

Edge.jpg

Oct 20, 2020 | Category: Microsoft | Comments

Microsoft's Edge 86 includes a "rollback" function that lets IT admins restore an earlier version of the browser and gives the built-in PDF viewer support for document tables of content.

read more…

What the new iPhone 12 means for 5G

apple.jpg

Oct 19, 2020 | Category: Apple | Comments

By now, you’ve probably heard that Apple’s iPhone 12 lineup will have 5G capabilities. And you have also probably heard us discuss how 5G speeds are still only available in some parts of the country with some carriers. 

read more…

Microsoft ends support for Office 2010, bangs the Office 365

Office.jpg

Oct 18, 2020 | Category: Microsoft | Comments

Microsoft on Tuesday reminded customers that Office 2010 and Office 2016 for Mac have received their final security updates, as the suites have now dropped off the company's support list.

read more…

Page 1 of 573  >  >>