Android app news: Shocking HTC security flaw exposed

Is your HTC Android handset leaking your personal data like a dripping tap? Security researchers have discovered a worrying flaw that lets any app with internet permissions access your email account, contacts and much more.

Security researchers have uncovered a staggering flaw in some HTC Android handsets which allows malicious apps with internet permissions access to your most precious data.

Reporting his findings to the Android Police blog, Trevor Eckhart has discovered that in recent updates HTC has introduced logging tools that pool important together information on your handset (for some unknown reason...).

As a result, any app on these devices which requests permission to access internet services can then pull a host of information from those files.

For example, crooks could get their dirty little mitts on your accounts, emails addresses and sync status', GPS locations, phone numbers, text messages and system logs from every running application.

Potentially a seemingly harmless game, that requests internet permission could easily claim access to the data that's contained in these files.

The Android police blog also says that "theoretically, it may be possible to clone a device using only a small subset of the information leaked here."

Mr Eckhart claims to have brought this to HTC's attention five days before taking his findings to the blog and heard nothing back from the Taiwanese giant.

The company has now issued a statement to TechRadar saying: "HTC takes our customers' security very seriously, and we are working to investigate this claim as quickly as possible. We will provide an update as soon as we're able to determine the accuracy of the claim and what steps, if any, need to be taken."

Among those handsets believed to be affected are Evo 3D and Thunderbolt.

Link:Android Police (via TechRadar)

Comments

Be the first to comment…

Back to top
Close
T3 Newsletter
Sign up to recieve the T3 newsletters by entering your details below

Your Details

As you're registering with us. we'd like to think that you'd enjoy receiving the following emails; if you'd rather not receive them, please untick the boxes:

I would like to receive other emails from T3, Future Publishing Limited and it's group companies containing news, special offers and product information
I agree to the terms of use and privacy policy and confirm that I am over 16 years of age *
Close
Log in or Join

By clicking below you agree to our terms and conditions and our privacy policy

Log in to T3.com with your preferred social network

Log in with your T3.com account

CloseJoinPlease complete these additional details

Join T3.com with your preferred social network

OR

Join T3.com

Please tick this box to confirm you are 16 years old or over

Just so we know you're human

Newsletters

I would like to receive T3 email newsletters, packed full of the latest tech news, competitions and exclusive offers.

I would like to receive other emails from T3, Future Publishing Limited and its group companies containing news, special offers and product information.

I would like to receive offers from carefully selected third Parties. We will not share your data with the third party.

Close Edit your profile

Change your password

Newsletters

I would like to receive T3 email newsletters, packed full of the latest tech news, competitions and exclusive offers.

I would like to receive other emails from T3, Future Publishing Limited and its group companies containing news, special offers and product information.

I would like to receive offers from carefully selected third Parties. We will not share your data with the third party.

Social networks

You have authorised these social networks to interact with your T3.com account.

Please ensure you deactivate or revoke access to this website from within your social networks settings to ensure all permissions are removed.

Close Forgotten your password

Forgotten your password?

Please enter the email address that you used to sign up and we'll send you a new password

Close
Forgotten password
Don't have a T3 Account? Join now