{"id":205645,"date":"2016-04-10T13:28:27","date_gmt":"2016-04-10T13:28:27","guid":{"rendered":"http:\/\/4cd.e16.myftpupload.com\/?p=205645"},"modified":"2016-04-10T13:28:27","modified_gmt":"2016-04-10T13:28:27","slug":"flaw-in-truecaller-android-app-exposes-millions-to-hacks","status":"publish","type":"post","link":"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/","title":{"rendered":"Flaw in Truecaller Android app exposes millions to hacks"},"content":{"rendered":"<p dir=\"ltr\">This vulnerability, which has been fixed in the latest Android update, could have allowed anyone to potentially gain access to Truecaller users\u2019 information and change their call blocking settings. The millions of Android users who downloaded this app on their smartphones could be in danger.<\/p>\n<p dir=\"ltr\">The CM Security Research Lab recommends that Truecaller Android users update to the latest version on Google Play immediately.<\/p>\n<p dir=\"ltr\">The researcher found that Truecaller uses devices\u2019 IMEI as the only identity label of its users. Meaning that anyone gaining the IMEI of a device will be able to get Truecaller users\u2019 personal information (including phone number, home address, mail box, gender, etc.) and tamper app settings without users\u2019 consent, exposing them to malicious phishers.<\/p>\n<p><img class=\"aligncenter\" src=\"http:\/\/www.cmcm.com\/upload\/image\/20160328\/1459155362688068.jpg\" alt=\"\" \/><\/p>\n<p>By exploiting this flaw, the attackers can:<\/p>\n<ul class=\" list-paddingleft-2\">\n<li>\n<p dir=\"ltr\">Steal personal information like account name, gender, e-mail, profile pic, home address, etc.<\/p>\n<\/li>\n<li>\n<p dir=\"ltr\">Modify a user\u2019s application settings:<\/p>\n<\/li>\n<li>\n<p dir=\"ltr\">Disable spam blockers<\/p>\n<\/li>\n<li>\n<p dir=\"ltr\">Add to a black list for users<\/p>\n<\/li>\n<li>\n<p dir=\"ltr\">Delete a user\u2019s blacklist<\/p>\n<\/li>\n<\/ul>\n<p dir=\"ltr\"><img class=\"aligncenter\" src=\"http:\/\/www.cmcm.com\/upload\/image\/20160328\/1459155424641337.jpg\" alt=\"\" \/><\/p>\n<p dir=\"ltr\">The Cheetah Mobile Security Research Team notified the developer of Truecaller about this vulnerability as soon as they discovered the loophole and offered all it could to help the developer fix the issue. Now the maker of Truecaller has addressed the issue and released an update on March 22nd.<\/p>\n<p dir=\"ltr\">Although the flaw has been fixed in the latest version, the majority of the users are still in danger as they have not got access to the new release yet. The CM Security Research Lab advises Truecaller users to upgrade this app to the latest version as soon as possible.<\/p>\n<p dir=\"ltr\">&#8211;<\/p>\n<p dir=\"ltr\">Source: Cheetah Mobile<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This vulnerability, which has been fixed in the latest Android update, could have allowed anyone to potentially gain access to Truecaller users\u2019 information and change their call blocking settings. The millions of Android users who downloaded this app on their smartphones could be in danger. The CM Security Research Lab recommends that Truecaller Android users [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[106],"tags":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Flaw in Truecaller Android app exposes millions to hacks - Citi 97.3 FM - Relevant Radio. Always<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Flaw in Truecaller Android app exposes millions to hacks - Citi 97.3 FM - Relevant Radio. Always\" \/>\n<meta property=\"og:description\" content=\"This vulnerability, which has been fixed in the latest Android update, could have allowed anyone to potentially gain access to Truecaller users\u2019 information and change their call blocking settings. The millions of Android users who downloaded this app on their smartphones could be in danger. The CM Security Research Lab recommends that Truecaller Android users [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/\" \/>\n<meta property=\"og:site_name\" content=\"Citi 97.3 FM - Relevant Radio. Always\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/citi97.3\" \/>\n<meta property=\"article:published_time\" content=\"2016-04-10T13:28:27+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/4cd.e16.myftpupload.com\/wp-admin\/media-upload.php?post_id=205645&type=image&TB_iframe=1\" \/>\n<meta name=\"author\" content=\"Kojo Akoto Boateng\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@citi973\" \/>\n<meta name=\"twitter:site\" content=\"@citi973\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kojo Akoto Boateng\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/\",\"url\":\"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/\",\"name\":\"Flaw in Truecaller Android app exposes millions to hacks - Citi 97.3 FM - Relevant Radio. Always\",\"isPartOf\":{\"@id\":\"https:\/\/citifmonline.com\/#website\"},\"datePublished\":\"2016-04-10T13:28:27+00:00\",\"dateModified\":\"2016-04-10T13:28:27+00:00\",\"author\":{\"@id\":\"https:\/\/citifmonline.com\/#\/schema\/person\/1642ef473fe39bf0c4e2f2f252678eb1\"},\"breadcrumb\":{\"@id\":\"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/citifmonline.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Flaw in Truecaller Android app exposes millions to hacks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/citifmonline.com\/#website\",\"url\":\"https:\/\/citifmonline.com\/\",\"name\":\"Citi 97.3 FM - Relevant Radio. Always\",\"description\":\"Ghana News | Ghana Politics | Ghana Soccer | Ghana Showbiz\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/citifmonline.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/citifmonline.com\/#\/schema\/person\/1642ef473fe39bf0c4e2f2f252678eb1\",\"name\":\"Kojo Akoto Boateng\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/citifmonline.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/ba51f5385119e83762c67ecd6aa410ab?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/ba51f5385119e83762c67ecd6aa410ab?s=96&d=mm&r=g\",\"caption\":\"Kojo Akoto Boateng\"},\"url\":\"https:\/\/citifmonline.com\/author\/kojo\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Flaw in Truecaller Android app exposes millions to hacks - Citi 97.3 FM - Relevant Radio. Always","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/","og_locale":"en_US","og_type":"article","og_title":"Flaw in Truecaller Android app exposes millions to hacks - Citi 97.3 FM - Relevant Radio. Always","og_description":"This vulnerability, which has been fixed in the latest Android update, could have allowed anyone to potentially gain access to Truecaller users\u2019 information and change their call blocking settings. The millions of Android users who downloaded this app on their smartphones could be in danger. The CM Security Research Lab recommends that Truecaller Android users [&hellip;]","og_url":"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/","og_site_name":"Citi 97.3 FM - Relevant Radio. Always","article_publisher":"https:\/\/www.facebook.com\/citi97.3","article_published_time":"2016-04-10T13:28:27+00:00","og_image":[{"url":"http:\/\/4cd.e16.myftpupload.com\/wp-admin\/media-upload.php?post_id=205645&type=image&TB_iframe=1"}],"author":"Kojo Akoto Boateng","twitter_card":"summary_large_image","twitter_creator":"@citi973","twitter_site":"@citi973","twitter_misc":{"Written by":"Kojo Akoto Boateng","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/","url":"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/","name":"Flaw in Truecaller Android app exposes millions to hacks - Citi 97.3 FM - Relevant Radio. Always","isPartOf":{"@id":"https:\/\/citifmonline.com\/#website"},"datePublished":"2016-04-10T13:28:27+00:00","dateModified":"2016-04-10T13:28:27+00:00","author":{"@id":"https:\/\/citifmonline.com\/#\/schema\/person\/1642ef473fe39bf0c4e2f2f252678eb1"},"breadcrumb":{"@id":"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/citifmonline.com\/2016\/04\/flaw-in-truecaller-android-app-exposes-millions-to-hacks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/citifmonline.com\/"},{"@type":"ListItem","position":2,"name":"Flaw in Truecaller Android app exposes millions to hacks"}]},{"@type":"WebSite","@id":"https:\/\/citifmonline.com\/#website","url":"https:\/\/citifmonline.com\/","name":"Citi 97.3 FM - Relevant Radio. Always","description":"Ghana News | Ghana Politics | Ghana Soccer | Ghana Showbiz","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/citifmonline.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/citifmonline.com\/#\/schema\/person\/1642ef473fe39bf0c4e2f2f252678eb1","name":"Kojo Akoto Boateng","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/citifmonline.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/ba51f5385119e83762c67ecd6aa410ab?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/ba51f5385119e83762c67ecd6aa410ab?s=96&d=mm&r=g","caption":"Kojo Akoto Boateng"},"url":"https:\/\/citifmonline.com\/author\/kojo\/"}]}},"_links":{"self":[{"href":"https:\/\/citifmonline.com\/wp-json\/wp\/v2\/posts\/205645"}],"collection":[{"href":"https:\/\/citifmonline.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/citifmonline.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/citifmonline.com\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/citifmonline.com\/wp-json\/wp\/v2\/comments?post=205645"}],"version-history":[{"count":0,"href":"https:\/\/citifmonline.com\/wp-json\/wp\/v2\/posts\/205645\/revisions"}],"wp:attachment":[{"href":"https:\/\/citifmonline.com\/wp-json\/wp\/v2\/media?parent=205645"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/citifmonline.com\/wp-json\/wp\/v2\/categories?post=205645"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/citifmonline.com\/wp-json\/wp\/v2\/tags?post=205645"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}