Security researchers expose Gmail smartphone hack

security researchers expose gmail smartphone hack big app
Researchers from the Universities of Michigan and California say they’ve come up with a smartphone hack that can get into your Gmail account via your mobile device. A number of apps are affected by the vulnerability but Gmail was exploited with a 92 percent success rate.

According to the details of the research, the hack — as you might expect — relies on a malware app posing as a genuine bit of software, so you should be safe if you take good care over what’s allowed to run on your handset. Once the malicious code is in place it can use a mobile device’s shared memory to jump into other apps, including Gmail.

Related: Gmail acts to sort out new scam using non-Latin characters

“The assumption has always been that these apps can’t interfere with each other easily,” said Zhiyun Qian, one of the team working on the project. “We show that assumption is not correct and one app can in fact significantly impact another and result in harmful consequences for the user.” Banking apps were also successfully breached using the same method.

The hack relies on being able to predict what the user will do next and timing an interception perfectly, so some apps proved more vulnerable than others. Of the seven apps tested, Gmail was the easiest to access while the Amazon app was the most difficult. The exploit was run on an Android phone though the researchers say the same principles can potentially be applied to iOS and Windows Phone.

Thanks to the procedures put in place to block and root out malware, the vulnerability reported here shouldn’t worry the majority of users. Nevertheless it’s a working demonstration of how a device’s shared memory can be misused, and another reminder to take care with your app installs — particularly if you’re on a rooted device.

A Google spokeswoman welcomed the report: “Third-party research is one of the ways Android is made stronger and more secure,” she said. The findings will be revealed in full at the USENIX Security Symposium in San Diego.

[Header image: Alexander Supertramp / Shutterstock.com]

Mobile

With Spotify for WearOS, you no longer need your phone to stream music

A Spotify app will soon be available for download on Wear OS smartwatches. Whether you're working out or lounging at home, you'll soon be able to access and control your music straight from your wrist.
Mobile

Google will start charging Android manufacturers to use its apps in Europe

Google announced that it will be charging Android device manufacturers in Europe a licensing fee to use its apps and services. The announcement comes as an effort to comply with new European Commission regulations.
Photography

Adobe’s Premiere Rush is a video-editing app designed for social media projects

At Adobe MAX 2018, Adobe unveiled updates across the board for all of its Creative Cloud apps, from the release of Premiere Rush CC, a social-focused video editor, to Project Gemini, a digital drawing and painting tool.
Photography

Photography News: Raw edits on iPad and an A.I. research lab for PicsArt

In this week's photography news, Canon launched an iPad app that allows for RAW edits on the go. Popular mobile editing app PicsArt now has a research lab dedicated entirely to A.I.-powered tools.
Mobile

The Kindle Paperwhite is waterproof, so now you can read it in the tub

Amazon released a new version of the Kindle Paperwhite ebook reader, boasting improved software, more storage, and a feature that customers have been asking for: Waterproofing.
Deals

Verizon’s buy one, get one offer is the best deal on the new Google Pixel 3

If you need a new smartphone and want the best (without shelling out a grand or more), the new Google Pixel 3 and Pixel 3 XL are fantastic options. Verizon's BOGO offer is the best way to score a deal, letting you snag a free phone and save…
Social Media

YouTube is back after crashing for users around the world

It's rare to see YouTube suffer serious issues, but the site went down around the world for a period of time on October 16. It's back now, and we can confirm it's loading normally on desktop and mobile.
Mobile

Huawei Mate 20 Pro vs. Samsung Galaxy Note 9: Flagship fight

When it comes to stunning flagships, Samsung and Huawei are often the first names the come to mind. And the new Huawei Mate 20 Pro is no exception. So how does it compare to the Samsung Galaxy Note 9? We put the two to the test to find out.
Mobile

Here’s how Google’s Call Screening A.I. works, and how to use it

Google's Pixel 3 and 3 XL smartphones can take excellent photos, but there are a few artificial intelligence features that steal the show. Call Screening uses Google Assistant to answer the phone for spam calls.
Mobile

Key settings you need to change on your Sony Xperia XZ3

The first thing you need to do when you buy a new phone is dig into the settings and customize it to your liking. We’ve got step-by-step instructions for tweaking key settings on your Sony Xperia XZ3 right here.
Photography

Adobe MAX 2018: What it is, why it matters, and what to expect

Each year, Adobe uses its Adobe MAX conference to show off its latest apps, technologies, and tools to help simplify and improve the workflow of creatives the world over. Here's what you should expect from this year's conference.
Gaming

Huawei thinks its Mate 20 X is better than the Nintendo Switch

Huawei positioned its Mate 20 X, a gaming-centric smartphone, as a Nintendo Switch killer, calling it "the best portable gaming machine." The Mate 20 X has better design specs than the Switch, but it also comes with a steep price.
Mobile

These are the best LG V40 ThinQ cases to stop unsightly damage

The LG V40 ThinQ is the latest entry in LG's long line of great V series phones, but it's not invincible. The best way to protect it from potential damage is with one of the best LG V40 ThinQ cases.
Mobile

The best Xperia XZ3 cases to keep your new Sony phone shiny

The Xperia XZ3 is a great phone with powerful hardware, a capable camera, and a lovely glass design. But glass is fragile, and can be broken. Here are some of the best Xperia XZ3 cases to prevent that.