Android users, Microsoft has a 'warning' about these apps with billions of downloads

Android apps

Microsoft’s security research team has flagged some apps — downloaded by 4 billion users — that could put Android smartphones at risk. In a blog post, Microsoft’s Threat Intelligence Team said, “We identified several vulnerable applications in the Google Play Store that represented over four billion installations. We anticipate that the vulnerability pattern could be found in other applications.”

Microsoft highlighted two apps — one Xiaomi’s File Manager and the other one WPS office which had 1 billion plus and 500 million plus installs respectively. The company said that it immediately informed Xiaomi and after its disclosure, the Chinese tech giant fixed the security vulnerability. WPS Office has also updated the app and fixed the flaw. Although the issue was fixed in February, in case any user has these apps on their Android phones, it is advised to update them immediately.

What kind of threat the apps posed?

According to Microsoft, the malicious app can overwrite some server settings allow it to “communicate with an attacker-controlled server and send the user’s authentication tokens or other sensitive information.”

Microsoft also said that it it recommends thats user keep mobile applications up to date through the Google Play Store (or other appropriate trusted source) to ensure that updates addressing known vulnerabilities are installed. “Users should only install applications from trusted sources to avoid potentially malicious applications,” said Microsoft.

The company also said that it had shared the findings with Google’s Android Application Security Research team and collaborated with Google to guide Android application developers to help them recognise and avoid such patterns.

“As threats across all platforms continue to evolve, industry collaboration among security researchers, security vendors, and the broader security community is essential in improving security for all,” noted Microsoft’s Threat Intelligence Team.

Also read: