A File Sharing App With 1 Billion Downloads Has a Major Security Flaw

A File Sharing App With 1 Billion Downloads Has a Major Security Flaw

Getting data from one place to another is easy when you’ve got reliable internet connectivity, but that’s not the case everywhere. That’s why an Android app called SHAREit has more than a billion downloads. Unfortunately, Trend Micro says the app is also a security nightmare that could allow intruders to sneak a peek at your data or even install malware. Perhaps most troublingly, the developers have not responded to Trend Micro’s warnings.

SHAREit is a product of Singapore-based developer Smart Media4U, which positions the app as a way to host and share content even if you don’t have internet access. The app has become popular because it lets users share files directly via Wi-Fi Direct data transfers, and there’s a built-in media player to play streams from other devices. However, Trend Micro says the way the app shares information makes it easy for a third-party to hijack the connection and load up all manner of malicious things.

Trend Micro says it confirmed the vulnerability is more than theoretical. Its researchers were able to confirm that SHAREit is giving away far too much data when beaming files, and this vulnerability makes it easy to exploit. Trend Micro says further that it told Smart Media4U about the issues three months ago, and there has been no reply. Trend Micro decided to disclose the flaws now because users deserve to know their app might be leaking personal details.

The developer’s silence is particularly concerning because the app is far from abandoned. A staffer replies to reviews on the Play Store constantly, even going so far as to post his mobile number for people to share screenshots. They’ll go to all that trouble but won’t reply to Trend Micro after three months? That feels pretty shady to me.

If you’re using SHAREit, I would recommend you look at an alternative way of sharing files. It is unknown if there are any in-the-wild SHAREit attacks, but it’s probably only a matter of time now, Most of the app’s users appear to be in countries throughout the Middle East, Africa, and Asia. It’s not as popular in the US and Europe because it’s unusual for populations in those regions to have such spotty connectivity that they need to resort to direct sharing apps like SHAREit.

Continue reading

SpaceX Encrypts Falcon 9 Telemetry After Amateur Radio Operators Download Data
SpaceX Encrypts Falcon 9 Telemetry After Amateur Radio Operators Download Data

It all started a few weeks ago when several Redditors managed to lock onto the 2232.5 MHz telemetry downlink from a Falcon 9 upper stage.

How to Download Windows 10 for Free
How to Download Windows 10 for Free

If you want a free copy of Windows 10, you can still get it, if you've got a legal copy of Windows 7 or 8.

Click-Fraud Chrome Extensions Removed from Store After 500,000 Downloads
Click-Fraud Chrome Extensions Removed from Store After 500,000 Downloads

Researchers from security firm ICEBRG report finding a cluster of scam extensions in the Google Web Store with a combined download figure of more than 500,000.

How to Download YouTube Videos
How to Download YouTube Videos

We've singled out two options that get solid reviews and don't require you to install adware.