Are you an Android user? Well, you should watch out of the invisible attacks as they might empty your accounts with you even realising, The Sun reported.
Microsoft researchers have recently found that Android apps may be vulnerable to attacks such as data theft, malware software’s and other issues due to a common security weakness.
According to The Sun, four of the affected apps, whose names haven’t been disclosed, have been downloaded more than 500 million times.
The attacks were found in Android applications that are shared with other users.
Known as “Dirty Stream”, these malicious apps send a file with a manipulated filename or path to another app.
This provides the attackers an opportunity to create a fake app that can send a file with a malicious filename directly to a receiving app without the user’s approval or knowledge.
Examples of typical file sharing targets include email clients, messaging apps, social networking apps, browsers and file editors.
As per Microsoft, “When a share target receives a malicious filename, it uses the filename to trigger a process that could end with the app getting compromised.”
In some cases, an attacker may be able to persuade a receiving app to exchange authentication tokens and other data with a server under their control by using a malicious app to rewrite the app’s settings.
Microsoft officials have also informed Google’s android security team of the impending problem.
