| Online: | |
| Visits: | |
| Stories: |
| Story Views | |
| Now: | |
| Last Hour: | |
| Last 24 Hours: | |
| Total: | |
Nearly Half of Mobile Apps Have Security Flaws: Study
Nearly half (48 percent) of Android apps have at least one high risk security or privacy flaw including data leakage, improperly validated SSLs and remote code execution, according to research conducted by SecureNow.
Among the worst offenders were gaming apps. The problem is that the app developers as well as the Google Play Store (for Android devices) and the App Store on iTunes (for iOS devices) are more focused on monetizing apps than in making sure they are secure, NowSecure CEO Andrew Hoog told Mobile Marketing & Technology. “In general the focus was on monetization, not security.”
So while developers and app users expect the apps to be properly vetted for security by the Play and iTunes stores, that’s not the case, according to Hoog. “They will find the glaring problems.” But more minor flaws, which can still lead to breaches for the user, are typically undetected.
Hoog added that the most popular apps tended to be the least secure, likely because once an app becomes popular, developers are focused on new features, to encourage repeat business from customers.
Among the worst apps in terms of security, according to Hoog, are:
- Zero Launcher – the popular lock screen replacement app leaks GPS coordinates, the serial number of the phone, device type and kernel version, enabling a passive network attacker to steal data and track a user’s location
- Key.me – an app that takes pictures and stores digital images of keys for easy duplication leaks the username and password, GPS coordinates and the key images giving the attacker the ability to track the user.
- SimSimi – A children’s game that allows a network-based attacker to modify network traffic to gain complete control of the device and siphon off all personal data.
Mobile security will be among the topics to be discussed at the 2015 Mobile Payments Conference, Aug. 31-Sept. 2 at the Hyatt Regency Chicago.
Source: http://mobilemarketingandtechnology.com/2015/05/28/nearly-half-of-mobile-apps-have-security-flaws-study/
