Security researchers expose Gmail smartphone hack

security researchers expose gmail smartphone hack big app
Researchers from the Universities of Michigan and California say they’ve come up with a smartphone hack that can get into your Gmail account via your mobile device. A number of apps are affected by the vulnerability but Gmail was exploited with a 92 percent success rate.

According to the details of the research, the hack — as you might expect — relies on a malware app posing as a genuine bit of software, so you should be safe if you take good care over what’s allowed to run on your handset. Once the malicious code is in place it can use a mobile device’s shared memory to jump into other apps, including Gmail.

Related: Gmail acts to sort out new scam using non-Latin characters

“The assumption has always been that these apps can’t interfere with each other easily,” said Zhiyun Qian, one of the team working on the project. “We show that assumption is not correct and one app can in fact significantly impact another and result in harmful consequences for the user.” Banking apps were also successfully breached using the same method.

The hack relies on being able to predict what the user will do next and timing an interception perfectly, so some apps proved more vulnerable than others. Of the seven apps tested, Gmail was the easiest to access while the Amazon app was the most difficult. The exploit was run on an Android phone though the researchers say the same principles can potentially be applied to iOS and Windows Phone.

Thanks to the procedures put in place to block and root out malware, the vulnerability reported here shouldn’t worry the majority of users. Nevertheless it’s a working demonstration of how a device’s shared memory can be misused, and another reminder to take care with your app installs — particularly if you’re on a rooted device.

A Google spokeswoman welcomed the report: “Third-party research is one of the ways Android is made stronger and more secure,” she said. The findings will be revealed in full at the USENIX Security Symposium in San Diego.

[Header image: Alexander Supertramp / Shutterstock.com]

Mobile

Third-party call recording apps no longer work with Android 9.0 Pie

There is a lot to love about Android 9.0 Pie. But as users update their phones, they noticed an annoying new issue: Google removed a workaround an Android 9.0 Pie that developers used to power third-party recording apps.
Mobile

How to find a lost phone, whether it's Android, iPhone, or any other kind

Need to know how to find a lost phone? Here, we’ll help you locate your lost or stolen phone using both native and third-party apps and services, whether it’s a smartphone or an older variety.
Mobile

Sixth public beta of iOS 12 still lacks one key feature

At this year's Worldwide Developer Conference, Apple unveiled its latest operating system, iOS 12. From app updates to group FaceTime, ARKit 2.0, and more, here are all the new features in iOS 12.
Mobile

Samsung rebrands Gear app as ‘Galaxy Wearables,’ supports Android 9.0 Pie

Following reports that Samsung Gear owners were experiencing connectivity issues after downloading Android 9.0 Pie, the company released an update to the app. The Samsung Gear app is also now officially known as Galaxy Wearable.
Wearables

Huawei could announce a trio of new smartwatches at IFA in late August

The Huawei Watch 3 may be a ways off from release, but that doesn't mean Huawei isn't working on what it could look like. A new patent from Huawei hints at a smartwatch with space to store a pair of true wireless earbuds.
Mobile

Apple aficionados, these cute pillows are made just for you

Created as "a cuddly tribute to the tech that changed our lives," these cute pillows will be hard to resist for diehard Apple fans. Each one features an iconic Apple product, including the first iMac and the game-changing iPod.
Mobile

iPad battery explosion prompts Apple Store evacuation in Amsterdam

An iPad battery exploded in an Apple Store over the weekend, causing breathing issues for staff members, and requiring the fire brigade and an ambulance to attend. The incident took place in Amsterdam.
Mobile

Airport’s low-tech solution to digital chaos involves the humble whiteboard

A U.K. airport has suffered a major computer error, caused by data connection problems, which has stopped flight boards from showing crucial passenger information. The solution is wonderfully low-tech.
Mobile

Free yourself! How to unlock a phone from the icy hands of your wireless carrier

Do you want to know how to unlock a phone through your carrier or a third-party service like DoctorSIM? Regardless of which way you want to go, we've compiled a list of requirements and methods for doing so.
Wearables

Part smartwatch, all fitness tracker, the Charge 3 is a blast from Fitbit’s past

Fitbit announced its next wearable: The Fitbit Charge 3. The new fitness tracker features a touchscreen OLED display, smartwatch capabilities, enhanced fitness features and more. Here's everything you need to know about it.
Wearables

Apple registers six models of Apple Watch Series 4 in European Union

Ready for an all new Apple Watch for 2018? It looks like Apple may be planning a complete redesign with improved health features. Here are all the details about the upcoming Apple Watch Series 4.
Photography

From DIY to AAA, here’s how to take a passport photo in 6 different ways

If you're applying for a passport or renewing one, you need to submit a photo in your official application. There are strict guidelines, but fortunately, it's something you can do at home. Here's how to take a passport photo.
Mobile

Huawei P20 photos show bezel-less display with teardrop notch, triple camera module

Huawei is no stranger when it comes to big phones. And this year it plans to go even bigger with the Huawei Mate 20 and Mate 20 Pro. Here's what we think we know about the new range.
Mobile

(Update: deal expired) The Essential Phone is on sale for a bargain price of $224

The Essential Phone (PH-1) was one of the best-reviewed phones of 2017, and it comes from Andy Rubin, the co-creator of Android itself. It has a striking design with a bezel-less display and the price is now down to $500.