Are Google, Amazon approved home speaker apps 'Smart Spying'?
By MYBRANDBOOK
Security researchers have revealed that apps accepted by the Amazon Alexa and Google Home platforms could be used to phish users and to eavesdrop on them. Researchers from the firm, Security Research Labs (SRL) created two voice apps - Skills for Alexa and Actions for Google Home, in order to demonstrate the security vulnerabilities. SRL created several apps for each platform which appeared to be legitimate skills like a horoscope app, but which actually hide malicious code.
The apps were able to collect personal data including passwords, and also eavesdrop on users even after they thought that the speaker was no longer listening. This worked even after the app sounded as if it had closed, while it actually continued operating and took down a transcript of everything the user said after that point.
All of the malicious apps were approved by moderation teams, and were only removed when the researchers disclosed the issue to Amazon and Google.
SLR researchers have asked Amazon and Google to implement better protection, starting with a more thorough review process of third-party Skills and Actions made available in their voice app stores to prevent 'Smart Spies' attacks.
Both companies demand to strengthen their processes for reviewing apps, but the prevalence of malicious smartphone apps on platforms like the Google Play Store demonstrates how difficult the task of security vetting apps is.
Nazara and ONDC set to transform in-game monetization with ‘
Nazara Technologies has teamed up with the Open Network for Digital Comme...
Jio Platforms and NICSI to offer cloud services to government
In a collaborative initiative, the National Informatics Centre Services In...
BSNL awards ₹5,000 Cr Project to RVNL-Led Consortium
A syndicate led by Rail Vikas Nigam Limited (abbreviated as RVNL), along wi...
Pinterest tracks users without consent, alleges complaint
A recent complaint alleges that Pinterest, the popular image-sharing platf...
TALLY SOLUTIONS PVT. LTD.
BPE INDIA PVT. LTD.
LAVA INTERNATIONAL LTD.
POLYCAB INDIA PVT. LTD
Icons Of India : Debjani Ghosh
Debjani Ghosh is the President of the National Association of Software...
ICONS OF INDIA : ROSHNI NADAR MALHOTRA
Roshni Nadar Malhotra is the Chairperson of HCLTech, a leading global ...
ICONS OF INDIA : RAMESH NATRAJAN
Ramesh Natarajan, CEO of Redington Limited, on overcoming ‘technolog...
BEL - Bharat Electronics Limited
BEL is an Indian Government-owned aerospace and defence electronics co...
CERT-IN - Indian Computer Emergency Response Team
CERT-In is a national nodal agency for responding to computer security...
NPCI - National Payments Corporation of India
NPCI is an umbrella organization for operating retail payments and set...
Indian Tech Talent Excelling The Tech World - RAVI KUMAR S, CEO- Cognizant
Ravi Kumar S, appointed as CEO of Cognizant in January 2023, sets the ...
Indian Tech Talent Excelling The Tech World - NIKESH ARORA, Chairman CEO - Palo Alto Networks
Nikesh Arora, the Chairman and CEO of Palo Alto Networks, is steering ...
Indian Tech Talent Excelling The Tech World - Anirudh Devgan , President, Cadence Design
Anirudh Devgan, the Global President and CEO of Cadence Design Systems...