Hackers could be using your Android camera to spy on you
Researchers have discovered an alarming security flaw that could let some Android apps spy on users without their knowledge.
Discovered by security firm Checkmarx, the bug could allow an attacker to take control of the phone's camera and take photos or record videos through a rogue application without a user's permission.
Samsung and Google phones appear to be the most at risk from the flaw, which could affect "hundreds of millions" users, the researchers said. But Checkmarx said it informed other phonemakers, because they, too, could be vulnerable to the same security flaw.
The researchers discovered attackers could gain access to stored videos or photos and operate the camera even when the app is closed. And they found that the phone's proximity sensor could be used to alert the attacker when the phone was held close to the user's face.
Checkmarx first alerted Google and Samsung to the flaw over the summer. Both companies confirmed the bug.
Google, which released a patch in July, thanks Checkmarx.
"We appreciate Checkmarx bringing this to our attention and working with Google and Android partners to coordinate disclosure," a Google spokesperson said in a statement. "The issue was addressed on impacted Google devices via a Play Store update to the Google Camera Application in July 2019. A patch has also been made available to all partners."
Samsung told CNN Business that the company has released patches since the issue was discovered.
"We recommend that all users keep their devices updated with the latest software to ensure the highest level of protection possible," a Samsung spokesperson said.
Samsung and Google phones appear to be the most at risk from the flaw, which could affect "hundreds of millions" users, the researchers said. But Checkmarx said it informed other phonemakers, because they, too, could be vulnerable to the same security flaw.
The researchers discovered attackers could gain access to stored videos or photos and operate the camera even when the app is closed. And they found that the phone's proximity sensor could be used to alert the attacker when the phone was held close to the user's face.
Checkmarx first alerted Google and Samsung to the flaw over the summer. Both companies confirmed the bug.
Google, which released a patch in July, thanks Checkmarx.
"We appreciate Checkmarx bringing this to our attention and working with Google and Android partners to coordinate disclosure," a Google spokesperson said in a statement. "The issue was addressed on impacted Google devices via a Play Store update to the Google Camera Application in July 2019. A patch has also been made available to all partners."
Samsung told CNN Business that the company has released patches since the issue was discovered.
"We recommend that all users keep their devices updated with the latest software to ensure the highest level of protection possible," a Samsung spokesperson said.
AI Disclaimer: An advanced artificial intelligence (AI) system generated the content of this page on its own. This innovative technology conducts extensive research from a variety of reliable sources, performs rigorous fact-checking and verification, cleans up and balances biased or manipulated content, and presents a minimal factual summary that is just enough yet essential for you to function as an informed and educated citizen. Please keep in mind, however, that this system is an evolving technology, and as a result, the article may contain accidental inaccuracies or errors. We urge you to help us improve our site by reporting any inaccuracies you find using the "Contact Us" link at the bottom of this page. Your helpful feedback helps us improve our system and deliver more precise content. When you find an article of interest here, please look for the full and extensive coverage of this topic in traditional news sources, as they are written by professional journalists that we try to support, not replace. We appreciate your understanding and assistance.
