Weekly Cybersecurity News

Welcome to the Weekly Cybersecurity News. We bring you the latest cybersecurity news from this week that impacts millions of lives around the globe. A recent study has revealed a significant privacy threat for Android users, termed the AndroCon attack, which exploits semi-processed GPS signal metadata to collect detailed environmental information and track human activity with high accuracy. In another development, Google has warned about preinstalled Showcase app on millions of Pixel devices which could allow cybercriminals to execute man-in-the-middle (MITM) attacks and inject malicious code. To know about these and other important news, read the below article.

New ‘AndroCon’ Attack Exploits GPS Signal Metadata to Breach User Privacy:

A recent study from the Indian Institute of Technology Delhi has introduced a significant privacy threat for Android users, termed the AndroCon attack, which exploits semi-processed GPS signal metadata to collect detailed environmental information and track human activity with high accuracy. Conducted over a year, the research revealed that up to 90% of Android users may be vulnerable as apps can access extensive GPS data, enabling actions such as mapping indoor spaces and identifying user movements without needing additional sensors. With remarkable accuracy rates in detecting context and activities, even in challenging scenarios, AndroCon poses alarming risks, especially since this vulnerability persists even when devices are in flight mode. Researchers recommend restricting apps to coarse location permissions and call for increased transparency from Google regarding privacy implications, while reinforcing the importance of user awareness of GPS data risks.

Source: Cyber Insider

Google Deletes App On Millions Of Pixel Phones—‘Dangerous’ New Spyware Warning Issued:

Google has issued a critical warning after a serious security vulnerability was discovered in the pre-installed Showcase app on millions of Pixel devices, which could allow cybercriminals to execute man-in-the-middle (MITM) attacks and inject malicious code. The vulnerability, highlighted by smartphone security firm iVerify, stems from the app's design to retrieve configuration files over unsecured HTTP, creating a potential backdoor for exploitation. Despite no current evidence of active attacks, the concerns have prompted Palantir to consider removing Android devices from their environment entirely. Google plans to address the issue by removing the app in an upcoming software update, though questions remain about the rationale for its widespread installation. This incident marks a challenging moment for Google amid its Pixel 9 launch and intensifies scrutiny of its security practices.

Source: Forbes

Google Reveals Play Store Changes Before App Deletion In 21 Days:

Google is set to implement significant changes to the Play Store that include enforcing stricter regulations on app quality, which will lead to the deletion of low-quality apps in 21 days, ostensibly to enhance security and user privacy. These changes also involve more complex restrictions on APK uploads to third-party stores, the potential for sideloaded apps to receive updates through the Play Store, and the use of user location data for tailored content and enforcement of regional guidelines. While Google aims to improve user safety and align more closely with Apple's security standards, concerns arise regarding the practicality of these changes, especially with Android 15's anticipated release and potential delays from major device manufacturers like Samsung. Ultimately, the effectiveness of these adaptations in making the Play Store a safer environment remains to be seen, amid growing scrutiny over its increasing focus on Google's products and advertising.

Source: Forbes

Google says it's focusing on privacy with Gemini AI on Android:

Google is prioritizing privacy with its new Gemini AI integrated into Android devices, emphasizing data protection through end-to-end encryption and local data processing for sensitive information. Gemini, which offers a wide range of functionalities such as summarizing articles, generating documents, and assisting with travel plans, operates both on-device via Gemini Nano for simpler tasks and through secure cloud infrastructure for more complex operations. Key privacy measures include no involvement of third-party AI, user control over interactions, and innovative technologies like sealed computing for secure data processing. Enhanced transparency and a forthcoming detailed white paper on data protection further underline Google’s commitment to privacy as Gemini AI features become widely available.

Source: Bleeping Computer

Android Users Should Disable 2G Connectivity, Says Google:

Google has urged Android users to disable 2G connectivity on their devices to enhance security against SMS attacks, which exploit outdated protocols to deliver phishing links and malware. Although most carriers have shut down their 2G networks, many smartphones can still connect to 2G, making them vulnerable to criminals using cell-site simulators to impersonate network signals and bypass security measures. Users can disable 2G by navigating to their device's settings, though some manufacturers have yet to implement this feature. An additional anti-cell-site simulation feature will soon be introduced to notify users of untrustworthy connections, beginning with Pixel devices in Android 15. In contrast, iPhone users lack an easy option to block 2G and can only do so through Lockdown mode, which restricts device functionality.

Source: How-To-Geek

Signal has been blocked by Venezuela and Russia:

Signal, the encrypted messaging app, has been blocked in both Venezuela and Russia, coinciding with heightened government crackdowns on dissent following Venezuela's recent disputed presidential election and Russia's assertion of the app violating its legislation. In Venezuela, the block comes amid protests against President Nicolás Maduro, while in Russia, users can’t register for Signal without a VPN. Signal has acknowledged the issue and suggests users enable its censorship circumvention feature to regain access. Additionally, reports indicate a mass outage of YouTube in Russia, although this is not due to technical issues from the platform itself.

Source: The Verge

Indian telcos to cut off scammy, spammy, telemarketers for two whole years:

India's Telecom Regulatory Authority (TRAI) has mandated that telecom companies eliminate calls from unregistered telemarketers for up to two years to combat the pervasive issue of spam and scam calls. Under this new directive, if a telemarketer is found violating regulations, telcos are required to share the information using a blockchain-based platform, allowing other carriers to swiftly cut off their services. This decision, prompted by a surge in complaints—1.2 million in 2023 alone—aims to enhance consumer protection and streamline telemarketer bans, replacing the previous method that allowed offenders to easily shift between providers. The TRAI previously experimented with a blockchain scam list, achieving a 60% reduction in complaints between early 2021 and late 2022, but deemed further action necessary, leading to the current crackdown.

Source: The Register

Malware scam cases dip but Android users in S’pore still try to install high number of risky apps:

In Singapore, despite a significant drop in reported malware scams, with cases falling from 1,899 in 2023 to just 35 in the second quarter of 2024, Android users are still attempting to install a high number of risky apps, totaling around 900,000 attempts since February. Google's enhanced Play Protect measures have successfully blocked these installations, safeguarding over 200,000 devices from vulnerabilities, highlighting both the ongoing risks of sideloading unofficial apps and the effectiveness of collaborative anti-scam initiatives involving tech players and local banks. Authorities encourage continued partnerships to enhance security, while new features, such as labeling government apps and introducing more secure messaging options, are being implemented to further protect users from fraud and malicious activities.

Source: The Straits Times