Security omission in Google Cloud Messaging

gcm

Kaspersky Lab has announced that they have found a backdoor in the Google Cloud Messaging service that allows developers to directly communicate through their servers with applications installed on Android devices. Backdoor can be used by criminals to send text messages to premium numbers, as well as for theft of data from Android devices.

As one of the malware that exploit Google Cloud Messaging service they mentioned  Trojan-SMS.Android.Op.Fake. which is installed in 97 countries on more than one million Android devices. Beside sending  SMS messages to premium numbers and stealing contacts from the address book, trojan virus has the ability to delete messages and contacts and send messages with the included links to malicious applications to all contacts in the user directory.

Kaspersky Lab have informed Google about their omission, and stated that the only way to protect user against such failures is for Google to block the accounts of developers who turn out to be criminals.

[Ed - But wait... the cloud is safe right?]

Tell is what you think about this in our Forum

No comments

Leave your comment

In reply to Some User