Are Google, Amazon approved home speaker apps 'Smart Spying'?
By MYBRANDBOOK
Security researchers have revealed that apps accepted by the Amazon Alexa and Google Home platforms could be used to phish users and to eavesdrop on them. Researchers from the firm, Security Research Labs (SRL) created two voice apps - Skills for Alexa and Actions for Google Home, in order to demonstrate the security vulnerabilities. SRL created several apps for each platform which appeared to be legitimate skills like a horoscope app, but which actually hide malicious code.
The apps were able to collect personal data including passwords, and also eavesdrop on users even after they thought that the speaker was no longer listening. This worked even after the app sounded as if it had closed, while it actually continued operating and took down a transcript of everything the user said after that point.
All of the malicious apps were approved by moderation teams, and were only removed when the researchers disclosed the issue to Amazon and Google.
SLR researchers have asked Amazon and Google to implement better protection, starting with a more thorough review process of third-party Skills and Actions made available in their voice app stores to prevent 'Smart Spies' attacks.
Both companies demand to strengthen their processes for reviewing apps, but the prevalence of malicious smartphone apps on platforms like the Google Play Store demonstrates how difficult the task of security vetting apps is.
The latest version of X helps prevent deepfakes on social medi
To combat deepfakes and shallowfakes, Elon Musk revealed a new update t...
India and Namibia collaborate on a payment system similar to U
Once operational, the platform will enable digital transactions in Namibia,...
Sebi issues show-cause notices to six Adani group firms
Sebi issued show-cause notices to six Adani Group firms, including Adani ...
Microsoft to build a new data centre to support Thailand's tec
Microsoft has revealed intentions to construct a regional data centre as w...
INFOSYS TECHNOLOGIES PVT. LTD.
JUVAS SOLUTIONS PVT. LTD.
ATRIE TECHNOLOGY PVT. LTD.
POLYCAB INDIA PVT. LTD.
Technology Icons Of India 2023: Bharat Goenka
Bharat Goenka is the Managing Director of Tally Solutions. He is well ...
Technology Icons Of India 2023: C P Gurnani
CP Gurnani (popularly known as ‘CP’ within his peer group), is the...
Technology Icons Of India 2023: Shailendra Katyal
Shailendra is instrumental in Lenovo achieving the no.1 position in PC...
C-DAC keeps India ahead in IT & Electronics R&D space
Centre for Development of Advanced Computing (C-DAC) is the premier R&...
C-DOT enabling India in indigenous design, development and production of telecom technologies
An autonomous telecom R&D centre of Government of India, Center of Dev...
TCIL continues to strengthen India with its technology expertise
TCIL undertakes consultancy & turnkey projects in the field of Telecom...
EXCLUSIVE NETWORKS SALES INDIA PVT. LTD.
Exclusive Networks is a globally trusted cybersecurity specialist hel...
ACCERON INFOSOL PVT. LTD.
It is a leading value added distributor in the IT security space and h...
WPG C&C COMPUTERS & PERIPHERALS PVT. LTD.
WPG C&C Computers & Peripherals (India) was incorporated in 2008 and ...