3 days ago

EngageLab Flaw Opened 30M Wallet Apps to Android Data Theft: Microsoft

TLDR: Microsoft found the EngageLab SDK bug could expose private wallet data across 30M Android installs globally. The flaw abused Android intents to grant hostile apps persistent read and write provider permissions. EngageLab fixed the issue in v5.2.1 by changing MTCommonActivity to non-exported status. Google Play removed affected wallet apps, while Android added safeguards for [...]

The post EngageLab Flaw Opened 30M Wallet Apps to Android Data Theft: Microsoft appeared first on Blockonomi.

Source: Blockonomi →