Skip to main content

Vulnerable apps on Google Play put millions of users at risk of an attack

Google play
Ymgerman/123RF
Another day, another Android vulnerability discovered. Researchers at the University of Michigan have discovered more than 400 apps that are vulnerable to open port malware attacks. All of the apps are found on Google Play, and many of them have tens of millions of installs so far.

In other words, millions of Android users are currently at risk of an attack — though we don’t yet know if anyone has been affected as a result of the vulnerability.

To identify the vulnerable apps, researchers used a custom tool to analyze hundreds of thousands of apps on the Google Play Store. As a result of the analysis, 410 apps were identified as vulnerable to open port attacks. In those apps, there were just shy of a thousand total exploits. Which app are affected is not yet known, but the researchers indicate that the vulnerabilities have been reported to developers, which means most, if not all, of the vulnerabilities will be patched in the near future.

So what exactly is an open port attack? Put simply, an open port is a tiny vulnerability in the apps code that acts like a crack in a wall, allowing hackers to get in and gain access to user data and eventually remotely install malware onto the phone.

Unfortunately, we may never know exactly what apps are affected and how to protect ourselves in this specific case, but there are always a few things you can do to minimize your risk of being hacked. For example, never download apps that aren’t from the Google Play Store. Not all apps are safe — but at least you won’t be downloading apps with malware in the code. You should also generally stick to well-known developers on the Google Play Store, as they’ll often be more serious about developing safe apps.

Editors' Recommendations

Christian de Looper
Christian’s interest in technology began as a child in Australia, when he stumbled upon a computer at a garage sale that he…
Google just redesigned one of its biggest apps, and it’s bad
Google Chat app on the Play Store.

Google Chat — Google's business-oriented messaging platform that is similar to Slack and Microsoft Teams — just got a big update for its Android and iOS apps. The update dramatically changes how you navigate the app and, uh, well, it sure is something.

Google Chat's mobile app used to be broken up into two pages: Chat (direct messages between you and other users) and Spaces (larger chat rooms for multiple people). As with most apps, you switched between these with a navigation bar at the bottom of your screen.

Read more
App subscription fatigue is quickly ruining my smartphone
App Store displayed on an iPhone 14 Pro against a pink background

When I first got an iPhone in 2008, I remember checking out web apps, which were basically websites that I would keep bookmarked on the home screen. Every time I opened them up, they somehow didn’t look like I just launched mobile Safari. Eventually, Apple launched the App Store in July 2008, mostly eliminating the need for antiquated web apps.

Since the App Store opened up, we've gotten to see innovative new apps and games that took our iPhones to a completely new level — showing us what our devices were capable of. I was excited to see and hear about new apps for a variety of things, from task managers to camera replacement apps to photo editors to journals and so much more. Games were also making use of the iPhone’s accelerometer and gyroscope sensors, so it wasn’t just always about touchscreen controls.

Read more
App developers get relief from Google tax in one of Android’s biggest markets
Tinder on the GooglePlay App Store.

Just over a week ago, Google was fined approximately $113 million in India for forcing its in-house billing system on developers making Android apps. While the fine was hefty in and of itself, the laundry list orders issued by the Competition Commission of India were the real concern for Google.

The company has now complied with the most controversial directive by removing the mandatory Google Play billing policy for in-app purchases made in India. In an official update, the company notes that it is “pausing enforcement of the requirement for developers to use Google Play's billing system for the purchase of digital goods and services for transactions.”
Why does it matter?

Read more