Connecting to LinkedIn...

W1siziisijiwmtuvmdqvmtuvmdgvntqvmzgvnzi1l01ptlrbu0hfqkxpr19vtljftkrfukvex0lnqudfx3jlc2l6zwrfyw5kx3jlbmrlcmvklmpwzyjdlfsiccisinrodw1iiiwimtkymhgxmjuwiyjdxq

Blog

WhatsApp conversations can be stolen on Android devices

13/03/2014 by

W1siziisijiwmtqvmtavmjgvmtuvndgvmzivmtc2l2zpbguixsxbinailcj0ahvtyiisijywmhg0mdbcdtawm2uixv0

A Dutch researcher published a proof of concepton Tuesday that shows how a malicious application can be used to steal WhatsApp conversations on Android devices – which is particularly disconcerting considering a reported 400 million people use the cross-platform instant messaging service each month.

In this instance, the WhatsApp database being stored to the Android device’s SD card can be accessed by another app, so long as the user allows it, according to a blog post by Bas Bosschert. The root of the problem lies in the Android Application Sandbox, which is meant to isolate app data and code execution.

In his proof of concept, Bosschert created an app that can access the SD card and can be used to upload the WhatsApp databases to a web server he established. The app displays a loading screen during the WhatsApp database upload, ultimately tricking users into thinking something is going on in the background.

“The WhatsApp database is a SQLite3 database which can be converted to Excel for easier access,” Bosschert wrote. “Lately WhatsApp is using encryption to encrypt the database, so it can no longer be opened by SQLite. But we can simply decrypt this database using a simple python script. This script converts the crypted database to a plain SQLite3 database (got key from Whatsapp Xtract).”

On Monday, WhatsApp – which was acquired by Facebook in February for $19 billion – launched an update for its app, but this issue still persists, according to Bosschert.

“I think this is a significant issue since it shows how poor security and programming practices can affect all of us as users, even when there is no malicious intent,” Domingo Guerra, president and founder of Appthority, said.

This article has been extracted from http://www.scmagazine.com/, please click on this link to read the article in full http://www.scmagazine.com/whatsapp-conversations-can-be-stolen-on-android-devices/article/338015/

Montash is a multi-award winning , global IT recruitment firm. Specialising in permanent and contract positions across mid-senior appointments across a wide range of industry sectors and IT functions including:

ERP, BI & Data, Information Security, IT Architecture & Strategy, Scientific Technologies, Demand IT and Business Engagement, Digital and E-commerce, Infrastructure and Service Delivery, Project and Programme Delivery.

For more information please contact us on +44 (0) 20 7014 0230 or alternatively send us an email on info@montash.com.

comments powered by Disqus

Social Stream

Latest News

W1siziisijiwmtcvmdyvmtkvmtavndkvmtavntuvc2h1dhrlcnn0b2nrxzqymzk2mjg2ni5qcgcixsxbinailcj0ahvtyiisijm4mhgxmdajil1d

Long Term Transition, Not Long Term Tradition...

2017-06-20 09:00:00 +0100

It seems odd that while 88% of businesses are undergoing some kind of digital transformation[1], only 25%[2] of them have a clear understanding of their digital transformation journey. So what's driving so many businesses to pursue digital with such recklessness? Broadly speaking, the reason is simply the unprecedented rate of change in digital solutions and services. As we ride the digital tidal wave, consumers and employees change their expectations, ...

W1siziisijiwmtcvmdyvmtmvmtavmjqvmjuvodcxl3nodxr0zxjzdg9ja181njewnja3mzmuanbnil0swyjwiiwidgh1bwiilcizodb4mtawiyjdxq

How Great Leaders Cultivate Great Teams

2017-06-13 12:00:00 +0100

There's a difference between being a boss and being a leader. Leaders know how to inspire the best from their teams to achieve industry-leading results. For our latest blog, we spoke to our Managing Director, Roy Dungworth, to discover how businesses can create a culture that inspires great people to do great things together. Success in business doesn't begin and end with great leadership. Great leaders inspire their teams to want to do more and be bett...