Category Archives: Mobile Apps

Impatient users saddled with malicious copycats of popular Prisma app

Posted on by

If an iOS app gains extreme popularity but still does not come in a version for Android, it can be practically guaranteed that malware peddlers and scammers will take advantage of users’ impatience, and offer fake, malicious versions of it on Google Play and third-party Android apps stores. It usually happens with games, but any popular app will do. The latest example of this is the turn-photo-into-art app Prisma. First released on iOS in June … More → Continue reading Impatient users saddled with malicious copycats of popular Prisma app→

Kaspersky Safe Browser iOS app sports MITM SSL certificate bug

Posted on by

Security researcher David Coomber has unearthed a vulnerability (CVE-2016-6231) in the Kaspersky Safe Browser iOS app that effectively contradicts its name. As it turns out, the app does not validate SSL certificates it receives when connecting to secure sites, and this could be exploited by attackers with Man-in-the-Middle capabilities to “present a bogus SSL certificate for a secure site which the application will accept silently.” After that, all the information that is exchanged between the … More → Continue reading Kaspersky Safe Browser iOS app sports MITM SSL certificate bug→

Intel Crosswalk bug invalidates SSL protection

Posted on by

A bug in the Intel Crosswalk Project library for cross-platform mobile development can open users to man-in-the-middle attacks, researchers from Nightwatch Cybersecurity have found. What is the Intel Crosswalk Project? “The Crosswalk Project, created by Intel’s Open Source Technology Center, allows mobile developers to use HTML, CSS and Javascript to develop and deploy mobile apps across multiple platforms from the same codebase,” the researchers explained. The project supports deployment to iOS, Windows Phone and Android, … More → Continue reading Intel Crosswalk bug invalidates SSL protection→

Pokemon Go: How to protect your device from scams, malware, and privacy issues

Posted on by

Pokemon Go has become a global sensation, but it has also attracted the attention of scammers and attackers. Find out how to protect your mobile device on your quest to become a Pokemon master.Read More Continue reading Pokemon Go: How to protect your device from scams, malware, and privacy issues→

Playing Pokemon GO can lead to unexpected dangers

Posted on by

Interest in Pokemon GO, the mobile augmented reality mobile game that has users going places in the real world to capture, train, and battle with virtual Pokemon, has exploded the moment it was released late last week. But who would have thought that playing it could be so dangerous? Mere days after its release, gamers and aspiring gamers are being targeted with malware posing as the app and Pokemon GO-themed scams. Proofpoint researchers warn about … More → Continue reading Playing Pokemon GO can lead to unexpected dangers→

How MDM software exposes your personal data

Posted on by

Bitglass tracked the personal mobile devices of several willing employee volunteers with mobile device management (MDM) software to understand how MDM could be misused and to assess the true extent of access employers have to personal data and user behavior. Researchers configured the MDM software to route mobile data traffic through a corporate proxy and installed corporate-issued certificates on employee devices to decrypt SSL traffic. This, a common configuration in enterprise MDM deployments for inspecting … More → Continue reading How MDM software exposes your personal data→

The dynamics of mobile app collusion and malicious activities

Posted on by

Mobile app collusion happens when cybercriminals manipulate two or more apps to orchestrate attacks on smartphone owners. McAfee Labs has observed such behavior across more than 5,000 versions of 21 apps designed to provide useful user services such as mobile video streaming, health monitoring, and travel planning. The basics of colluding apps Unfortunately, the failure of users to regularly implement essential software updates to these 21 mobile apps has raised the possibility that generations of … More → Continue reading The dynamics of mobile app collusion and malicious activities→

Runkeeper: A fitness app or a tracking app?

Posted on by

Popular fitness app Runkeeper tracks users even when not in use, does not delete personal data when users stop using it, and shares users’ personal data with an advertising company in the US, the Norwegian Consumer Council (NCC) says in a complaint lodged with the Norwegian Data Protection Authority. Based on a report by independent research org SINTEF, Runkeeper, Vipps (Norwegian payment app) and Happn (dating app) are especially problematic when it comes to users’ … More → Continue reading Runkeeper: A fitness app or a tracking app?→