Are Google, Amazon approved home speaker apps 'Smart Spying'?
By MYBRANDBOOK
Security researchers have revealed that apps accepted by the Amazon Alexa and Google Home platforms could be used to phish users and to eavesdrop on them. Researchers from the firm, Security Research Labs (SRL) created two voice apps - Skills for Alexa and Actions for Google Home, in order to demonstrate the security vulnerabilities. SRL created several apps for each platform which appeared to be legitimate skills like a horoscope app, but which actually hide malicious code.
The apps were able to collect personal data including passwords, and also eavesdrop on users even after they thought that the speaker was no longer listening. This worked even after the app sounded as if it had closed, while it actually continued operating and took down a transcript of everything the user said after that point.
All of the malicious apps were approved by moderation teams, and were only removed when the researchers disclosed the issue to Amazon and Google.
SLR researchers have asked Amazon and Google to implement better protection, starting with a more thorough review process of third-party Skills and Actions made available in their voice app stores to prevent 'Smart Spies' attacks.
Both companies demand to strengthen their processes for reviewing apps, but the prevalence of malicious smartphone apps on platforms like the Google Play Store demonstrates how difficult the task of security vetting apps is.
Legal Battle Over IT Act Intensifies Amid Musk’s India Plans
The outcome of the legal dispute between X Corp and the Indian government c...
Wipro inks 10-year deal with Phoenix Group's ReAssure UK worth
The agreement, executed through Wipro and its 100% subsidiary,...
Centre announces that DPDP Rules nearing Finalisation by April
The government seeks to refine the rules for robust data protection, ensuri...
Home Ministry cracks down on PoS agents in digital arrest scam
Digital arrest scams are a growing cybercrime where victims are coerced or ...
Icons Of India : Arjun Malhotra
Arjun Malhotra, the Chairman of Magic Software Inc., is widely recogni...
Icons Of India : Girish Mathrubootham
Girish Mathrubootham is the Founder of Freshworks (previously known ...
Icons Of India : NATARAJAN CHANDRASEKARAN
Natarajan Chandrasekaran (Chandra) is the Chairman of Tata Sons, the h...
IREDA - Indian Renewable Energy Development Agency Limited
IREDA is a specialized financial institution in India that facilitates...
IOCL - Indian Oil Corporation Ltd.
IOCL is India’s largest oil refining and marketing company ...
IFFCO - Indian Farmers Fertiliser Cooperative
IFFCO operates as a cooperative society owned and controlled by its fa...
Indian Tech Talent Excelling The Tech World - Sundar Pichai, CEO- Alphabet Inc.
Sundar Pichai, the CEO of Google and its parent company Alphabet Inc.,...
Indian Tech Talent Excelling The Tech World - Aman Bhutani, CEO, GoDaddy
Aman Bhutani, the self-taught techie and CEO of GoDaddy, oversees a co...
Indian Tech Talent Excelling The Tech World - Dheeraj Pandey, CEO, DevRev
Dheeraj Pandey, Co-founder and CEO at DevRev , has a remarkable journe...