Wednesday, September 23, 2020

14 Android apps that are putting your critical accounts at risk

Fourteen apps, which combined represent an estimated 80 million downloads, have serious flaws in the way they handle social logins, according to an analysis by AppBugs.

AppBugs, which makes an app for tracking security vulnerabilities, found the problems in a variety of Android apps, all of which use social logins — in which you log in to the app using your Google, Microsoft, Facebook, Twitter, or similar accounts.

Indicated problems are due to flaws in the way the apps handle SSL certificates, which web servers use to verify their identities. The flaws make it possible for an attacker to use a forged SSL certificate, enabling their own server to receive the users’ login credentials.

Here is the list of problem apps found by AppBugs. For more details, see AppBug’s page on social plugin vulnerabilities in mobile apps, which includes videos demonstrating each vulnerability.

  • MeituPic
  • Astro File Manager with Cloud
  • gReader
  • Windows Live Hotmail Push Mail
  • JustUnFollow
  • Brother iPrint & Scan
  • Software Data Cable
  • FriendCaster Chat
  • PrintHand Mobile Print
  • Phone for Google Voice & GTalk
  • Instachat
  • InstaMessage
  • InstaG
  • FoxIt MobilePDF

MOST READ

Gulf Air Resumes Direct Flights to Dhaka

Gulf Air, the national carrier of the Kingdom of Bahrain, announces that it has resumed its direct flights to and from Dhaka’s Hazrat Shahjalal...

Interior Minister: valid PCR certificates for entry to Bahrain via causeway

The Interior Minister General Shaikh Rashid bin Abdullah Al Khalifa said that Polymerase chain reaction (PCR) certificates accredited by the Saudi Health Ministry within 72...

Declaration Supporting Peace: A historic, brave step aimed to enhance regional security and stability

The declaration supporting peace signed by the Kingdom of Bahrain with the State of Israel is a historic move towards establishing peace in the...

Plans to improve electricity, water services discussed

Electricity and Water Affairs Minister, Wael bin Nasser Al-Mubarak, received here today the representative of the third constituency of the Northern Governorate at the...

Bahrain marks World Patient Safety Day

Bahrain joins the world in marking the World Patient Safety Day observed on September 17. This year's theme is “Health Worker Safety: A Priority...

Gulf Air Appoints Bahraini Country Manager in Kuwait

Gulf Air, the national carrier of the Kingdom of Bahrain, announces that it has appointed Mr. Mohamed Ibrahim Al Hamer as a Country Manager...

Bahrain exports BD190 Million Worth of Products of National Origins during August 2020

The Information &eGovernment Authority (iGA) issued its foreign trade report of August 2020, encompassing data on the balance of trade, imports, exports (national origin),...

The American University of Bahrain (AUBH) welcomes class of 2024

The American University of Bahrain (AUBH), re-opened its campus in Riffa, following an orientation session for the incoming Class of 2024 students. AUBH Founding...

Driver License and Vehicle Certificates Can Now Be Issued Via Bahrain.bh!

Having earlier introduced a number of traffic services such as Payment of Traffic Conventions and Issuance of International Driving Licenses, the National Portal bahrain.bh...

HM King’s humanitarian initiatives lauded by Sudan’s foreign minister

Sudan’s Acting Foreign Minister Omar Qamar Al Din Ismail has praised the support of His Majesty the King to Sudan in various circumstances and...

BRAVE CF 42 full fight card released with 12 nations represented and the Flyweight Tournament quarter-finals

BRAVE Combat Federation returns to the Kingdom of Bahrain, for the second consecutive week with BRAVE CF 42, on September 24th. The promotion released the full...

The Avenues-Bahrain 3rd Year Anniversary Celebration

The Avenues-Bahrain is celebrating its 3rd year anniversary since opening its doors to the public on the 29th of October 2017. The Avenues –...

SCE launches training course for radiological and nuclear emergencies

The Supreme Council for Environment (SCE)’s CEO Dr. Mohammed Mubarak bin Dainah, launched the national training course on responding to radiological and nuclear emergencies. The...

Carrefour Bahrain Introduces ‘Click and Collect’: The Latest Innovation for Faster and More Flexible Online Shopping

Carrefour, operated by Majid Al Futtaim in the Kingdom of Bahrain, is introducing Click and Collect, a new service that will give online shoppers...

Kdan Mobile’s DottedSign Includes AATL Certificates to Ensure Users the Highest Level of Electronic Signature Process

Kdan Mobile Software Ltd., a global software as a service (SaaS) company, has announced that its e-signature service DottedSign now includes a digital identity...