*Security research firm Checkmarx recently disclosed that a Google Camera app could be used to spy on Android users.
Forbes.com writes that an attacker can “take control of smartphone camera apps and remotely take photos, record video, spy on your conversations by recording them as you lift the phone to your ear, identify your location, and more. All of this performed silently, in the background, with the user none the wiser.” Hackers can also get unrestricted access to all on-device videos and photos.
Via IBI Times:
The search engine giant states that the issue was addressed on affected Google devices through a Play Store update on the Google Camera App released in Jul. 2019. Google also rolled out a patch to all impacted OEMs within the same month. At present, it appears that the issue has been fixed; however, there is no telling how many users lost their data because of the issue.
OTHER NEWS YOU MIGHT HAVE MISSED: ‘Queen and Slim’: Political and Relevant Storytelling for This Generation – EUR Red Carpet Coverage – WATCH
A Google Spokesperson said in a statement to Forbes:
“We appreciate Checkmarx bringing this to our attention and working with Google and Android partners to coordinate disclosure. The issue was addressed on impacted Google devices via a Play Store update to the Google Camera Application in July 2019. A patch has also been made available to all partners.”
Thornton-Trump, a cyber threat intelligence expert and CompTIA global faculty member, shared with the outlet his take on the disclosure.
“My jaw dropped when I read this report about just how vulnerable the camera app was,” Thornton-Trump says, “it did not sound like a vulnerability, it sounded more like an Advanced Persistent Threat (APT) actor with fully-featured spyware.”
He added, “Everyone is safer today because of the great work and integrity of the Checkmarx researchers.”
He also noted that “anyone with anything to protect needs to update right away.” Thornton-Trump says, “if you can’t update the device due to age or a lack of manufacturer support it’s time for a new device.”
We Publish News 24/7. Don’t Miss A Story. Click HERE to SUBSCRIBE to Our Newsletter Now!
