Severe AirDroid vulnerability threatens tens of millions of Android users

Popular remote management utility AirDroid has attracted tens of millions of users with the lure of sharing the messages and files on their phones with their PCs, but you might want to think twice about firing it up today. Mobile security firm Zimperium has published a report detailing several major vulnerabilities that threaten to hijack your device.

The security issue—which still exists in the latest 4.0.1 release, according to Zimperium—is related to “insecure communication channels” that “send the same data used to authenticate the device to their statistics server.” That means someone on the same network could use a simple man-in-the-middle attack to intercept the user’s email address and password associated with AirDroid. Furthermore, the hacker could then download malicious updates to the app that in turn give them full control over the device.

To read this article in full or to leave a comment, please click here