Skip to main content

Spy-alert! Your Android phone may be listening to you, & secretly taking screenshots of activities


Spy-alert! Your Android phone may be listening to you, & secretly taking screenshots of activities


phone-privacy-tech-ThinkstockPhotos-658191736
Some popular apps on your Android phone may be actively listening to you, monitoring your habits and even secretly taking screenshots of your activity and sending them to third parties, a new study has found. 


These screenshots and videos of your activity on the screen could include usernames, passwords, credit card numbers, and other important personal information, the researchers said. 



"We found that every app has the ability to record your screen and anything you type," said David Choffnes, a Professor at Boston's Northeastern University.The findings will be presented at the Privacy Enhancing Technology Symposium Conference in Barcelona. 



For the study, the team analysed more than 17,000 of the most popular apps on the Android operating system, using an automated test programme written by the students. 


In all 9,000 of the 17,000 apps showed the potential to take screenshots.
"There were no audio leaks at all. Not a single app activated the microphone," said Christo 
Wilson, Professor at the varsity. 

"Then we started seeing things we didn't expect. Apps were automatically taking 
screenshots of themselves and sending them to third parties." 

Although these privacy breaches appeared to be benign, they emphasized how easily a 
phone's privacy window could be exploited for profit. 

"This opening will almost certainly be used for malicious purposes. It's simple to install and 
collect this information. And what's most disturbing is that this occurs with no notification to
 or permission by users," Wilson noted. 

Although the study was conducted on Android phones, there is no reason to believe that 
other phone operating systems would be less vulnerable, the researchers said. 




Comments

Popular posts from this blog

Spring Security with JWT for REST API

Spring is considered a trusted framework in the Java ecosystem and is widely used. It’s no longer valid to refer to Spring as a framework, as it’s more of an umbrella term that covers various frameworks. One of these frameworks is Spring Security , which is a powerful and customizable authentication and authorization framework. It is considered the de facto standard for securing Spring-based applications. Despite its popularity, I must admit that when it comes to single-page applications , it’s not simple and straightforward to configure. I suspect the reason is that it started more as an MVC application -oriented framework, where webpage rendering happens on the server-side and communication is session-based. If the back end is based on Java and Spring, it makes sense to use Spring Security for authentication/authorization and configure it for stateless communication. While there are a lot of articles explaining how this is done, for me, it was still frustrating to set it up for the f...

Java Functional Interfaces

  The term   Java functional interface   was introduced in Java 8. A   functional interface   in Java is an interface that contains only a single abstract (unimplemented) method. A functional interface can contain default and static methods which do have an implementation, in addition to the single unimplemented method. Here is a Java functional interface example: public interface MyFunctionalInterface { public void execute(); } The above counts as a functional interface in Java because it only contains a single method, and that method has no implementation. Normally a Java interface does not contain implementations of the methods it declares, but it can contain implementations in default methods, or in static methods. Below is another example of a Java functional interface, with implementations of some of the methods: public interface MyFunctionalInterface2{ public void execute(); public default void print(String text) { System.out.println(t...

Java Logger

In Java, logging is an important feature that helps developers to trace out the errors. Java is the programming language that comes with the logging approach. It provides a Logging API that was introduced in Java 1.4 version. It provides the ability to capture the log file. In this section, we are going to deep dive into the Java Logger API. Also, we will cover logging level, components, Logging handlers or appenders, logging formatters or layouts, Java Logger class, What is logging in Java? In Java, Logging is an API that provides the ability to trace out the errors of the applications. When an application generates the logging call, the Logger records the event in the LogRecord. After that, it sends to the corresponding handlers or appenders. Before sending it to the console or file, the appenders format that log record by using the formatter or layouts. Need for Logging It provides the complete tracing information of the application. It records the critical failure if any occur in ...