Android Vulnerability Puts Users Data At Risk
Android vulnerability in android apps puts users at risk. Due to security flaw in apps android user’s personal data may be hijacked. Around fifty percent (50%) Android devices are vulnerable to an attack. It’s a very serious matter for security of Android users. The Android vulnerability can replace a legitimate app with malicious software that can collect personal data from device.
This security flaw was uncovered in android operating system in January 2014. Google was informed about this android vulnerability in February 2014. Google was working to patch the security flaw. But half of all Android users are still vulnerable. According to the latest report from security firm Palo Alto Networks.
[pull_quote_center]We discovered a widespread vulnerability in Google’s Android OS we are calling “Android Installer Hijacking,” estimated to impact 49.5 percent of all current Android users. We have successfully tested both exploits against Android 2.3, 4.0.3-4.0.4, 4.1.X, and 4.2.x. The android vulnerability allows an attacker to modify or replace Android apps with malware without the user’s knowledge.[/pull_quote_center]
When a user installs an APK of android apps from any source, then at time of installation that particular app asks access to some details. As per shown in above image the facebook messenger app is asking to access permission for identity, contacts, calender and sms. At the installation time Android OS permits an attacker to hijack the user’s data. Recently, some e-commerce companies like Flipkart, Myntra etc shuts their mobile website and asking to users to install their mobile app. That’s why because these companies need to track user’s habits. Google, Amazon and Samsung have released patches for their devices. But still users are waiting security patch from Sony, HTC, Oneplus, Micromax etc.