• Home
  • Reviews
  • Featured
  • Archives
  • Videos
  • Devices
  • Tegra
  • Send Tips
  • Contact
  • AndroidCommunity on Twitter AndroidCommunity on Facebook AndroidCommunity on Google+ AndroidCommunity RSS Feed

Android Community

    • MUST READ

      STORIES

    • Intel-powered Galaxy Tab 3 leaked in benchmarks

      May 21, 2013

    • Samsung Galaxy Note 3 with Android 4.3 spotted in benchmark results

      May 21, 2013

    • Verizon HTC One running Android 4.2.2 could be coming soon

      May 21, 2013

  • Trending Topics
  • Jelly Bean
  • NVIDIA
  • Galaxy S 4
  • HTC One
  • Nexus 7
  • Sell Your Used Phone

Apps used by millions of users susceptible to email and password theft

5
  • By Dave LeClair
  • on 22 Oct, 2012

Apps used by millions of users susceptible to email and password theft

A new security breach has been found in many Android apps that could compromise users’ email accounts, bank information, and social networking credentials. The cause of this is inadequate encryption protections, according to a new research study. This could cause some serious security concerns for users of these apps.



In all, there are 41 apps called to attention in this study. Sadly, the researchers did not cite specific applications that have this weakness, but they did say the apps in question have been downloaded somewhere between 39.5 million and 185 million times, based on Google’s statistics. This could definitely be something Android users need to keep an eye on, as broadcasting your private data to malicious individuals is never a good thing.

The researchers said that Google could take steps to prevent this from happening, but they did not say whether any of the apps in question were developed by Google directly. They did say that in their testing they were able to get “bank account information, payment credentials for PayPal, American Express and others.” They were also able to get access to “Facebook, email and cloud storage credentials and messages . . . access to IP cameras was gained and control channels for apps and remote servers.”

The researches downloaded 13,500 free apps from Google Play to perform its testing. Unfortunately, without specific apps listed, it’s hard for Android users to know which apps they should worry about. There’s no guarantee that your information will be compromised even if you use these apps, but it certainly something to keep your eye on when using an app that requires access to your private information.

[via ArsTechnica]
Share
  • Student wins science fair with 30-second phone battery charger
  • Verizon HTC One reality returns as DROID DNA offer pops up
  • Samsung Galaxy Note 3 with Android 4.3 spotted in benchmark results

Tags: Andorid appsAndroid SecurityGoogleGoogle Play

  • daehder

    I would have thought that if it was as huge a problem as they say it is that they would make the apps known or inform Google of these apps security risks.

    It’s very difficult to take these studies seriously if they only output the scaremongering without evidence. What is worse is that journalists put it out into the world as factual.

  • BobQ

    Daehder, you are correct. Why state there are atleast 41 apps that can comprise your private info and don’t let us know what it is. This site is just trying to grab our attention for displaying their ads.

  • crankyd00d

    To me it sounds like this “research” was funded by the likes of Apple or Microsoft. Release the names of the apps so we can bitch at the developers and get it fixed, otherwise what a waste of everybody’s time

    • fsd717

      I’m very well agree with you on this one but more likely coming from the fruit company I think.

  • dg

    This is a standard “man in the middle” vulnerability. The apps in question are not using adequate security when communicating across the internet. This is not an “Android problem”, the same concerns exist with iOS or even desktop apps.

    This report is useless. Things will only change if the app developers are shamed into doing things correctly. This requires publishing the names of the apps.

  • Search

  • REVIEWS

    • AT&T LG Optimus G Pro ReviewAT&T LG Optimus G Pro Review
    • Iron Man 3 game Review: what you need to knowIron Man 3 game Review: what you need to know
    • Samsung GALAXY S 4 ReviewSamsung GALAXY S 4 Review
    • Samsung Galaxy Note 8.0 ReviewSamsung Galaxy Note 8.0 Review
    • Pebble review: Two weeks with a smartwatchPebble review: Two weeks with a smartwatch
  • HANDS-ON & QUICK LOOKS

    • Opera for Android exits beta, we go hands onOpera for Android exits beta, we go hands on
    • NVIDIA Tegra 4i demos i500 LTE modem on Cat 4: 150Mbps of speedNVIDIA Tegra 4i demos i500 LTE modem on Cat 4: 150Mbps of speed
    • HP Slatebook x2 Tablet hands-onHP Slatebook x2 Tablet hands-on


  • T-Mobile G1 Accessories
  • RECENT COMMENTS

  • About
  • Contact
  • Terms of Use
  • Privacy Policy
  • Advertise

Copyright 2013 Android Community