Sunday, July 3, 2022
  • Hype
  • Murai
  • Lipstiq
  • Diva
  • Varnam
  • Moviedash
  • Autofreaks
Lowyat.NET
  • News
    • Lifestyle
    • Computing
    • Hardware
    • Internet
    • Rumours & Leaks
    • Software
  • Forums
    • Kopitiam
    • Tradezone
    • Property Talk
    • Finance & Business
    • Fast and Furious
  • Gaming
    • PC Gaming
    • Console
    • Esports
  • Mobile
    • Apps
    • OS
    • Tablets
    • Phones
    • Telco
      • Celcom
      • DiGi
      • Maxis
      • Tune Talk
      • U Mobile
      • Buzzme
  • Pricelists
    • Hardware
      • Compu-zone
      • Viewnet
      • Thundermatch
      • Sri Computers
    • Notebooks
      • Compu-zone
    • Smartphones
      • Thundermatch
  • More
    • Automotive Tech
    • Drone
    • Enterprise
    • Entertainment
    • Fashion
    • E-Hailing
    • Wearables
No Result
View All Result
Lowyat.NET
  • News
    • Lifestyle
    • Computing
    • Hardware
    • Internet
    • Rumours & Leaks
    • Software
  • Forums
    • Kopitiam
    • Tradezone
    • Property Talk
    • Finance & Business
    • Fast and Furious
  • Gaming
    • PC Gaming
    • Console
    • Esports
  • Mobile
    • Apps
    • OS
    • Tablets
    • Phones
    • Telco
      • Celcom
      • DiGi
      • Maxis
      • Tune Talk
      • U Mobile
      • Buzzme
  • Pricelists
    • Hardware
      • Compu-zone
      • Viewnet
      • Thundermatch
      • Sri Computers
    • Notebooks
      • Compu-zone
    • Smartphones
      • Thundermatch
  • More
    • Automotive Tech
    • Drone
    • Enterprise
    • Entertainment
    • Fashion
    • E-Hailing
    • Wearables
No Result
View All Result
Lowyat.NET
No Result
View All Result
Home Mobile Phones Android Phones

Xiaomi Smartphones Discovered To have Pre-Installed Security Flaw

by Yin Shen
April 5, 2019
311
SHARES
Share on FacebookShare on Twitter

Most smartphones come with pre-installed apps out of the box. Some might be useful and some might not even be used at all. Check Point Research recently found out that Xiaomi’s pre-installed security app suffers from a security flaw that could affect millions of Xiaomis smartphones.

The pre-installed app is called Guard Provider, and contains anti-virus scanners from Avast, AVL and Tencent that serve to detect potential malware. The security flaw found by the researchers lies within the app’s update mechanism.

According to Check Point Research, the security app receives updates through an unsecured HTTP connection. Attackers could take advantage of the Avast Update APK to insert the malware via a man-in-the-middle (MITM) attack. However, the attackers will need to be connected to the same Wi-Fi network as the targeted Xiaomi device.

ADVERTISEMENT

On a relative note, Check Point Research also pointed out the disadvantages of using several SDKs within the same app; because they all share the app context and permissions, a problem in one SDK could very easily compromise the protection of others. Thus, private data on an SDK cannot be isolated therefore can also be accessed by the others.

Xiaomi has already released a patch to fix the security flaw. It’s understandable that users would trust the phone manufacturers’ pre-installed apps, but it’s clear that even they can slip up sometimes.

(Source: Android Authority, Check Point Research// Image: Check Point Research)

Tags: Anti VirusAvastsecurity flawtencentxiaomi
Back to top
Share124Tweet78SendShare

ADVERTISEMENT

RELATED ARTICLES

Spotify logo
Apps

Spotify Android App Gets Stuck On Splash Screen For Some

by Ian Chee
July 3, 2022

If you like listening to music, you probably have the Spotify app installed on your phone. And if you're using...

Read more
WhatsApp Online Status
Apps

WhatsApp May Finally Let You Hide Your Online Status

by Heirul Kamel
July 3, 2022

WABetaInfo reports that WhatsApp is currently working on a much requested privacy feature for its messaging service: the ability to...

Read more
Infinix 180W Thunder Charge
Mobile Phones

Infinix Unveils 180W Thunder Charge Technology

by Ikmal Rozlan
July 3, 2022

Infinix has announced its new Thunder Charge technology that is capable of juicing up a phone at a whopping 180W,...

Read more
Ayaneo Announces Next 2 Handheld Gaming Console
Gaming

Ayaneo Announces Next 2 Handheld Gaming Console

by John Law
July 1, 2022

Ayaneo, the China-based handheld gaming console maker, recently made a surprise announcement, with the launch of its next handheld console...

Read more
Load More
No Result
View All Result

TRENDING TODAY

  1. 1
    ISP

    TM Is Upgrading Network Infrastructure Nationwide: Provides Wi-Fi 6 Router To 100Mbps Plan

  2. 2
    News

    Employees In Klang Valley Spend 44 Hours In Traffic Jams Every Month

  3. 3
    News

    Ipoh Installs Smart Traffic Lights; 5G Network To Come In October

Consumer Tech News & Reviews Malaysia

NETWORK

  • Hype
  • Murai
  • Lipstiq
  • Diva
  • Varnam
  • Moviedash
  • Autofreaks

ABOUT

  • Advertise
  • Careers
  • Privacy Statement
  • Contact Us
  • Editorial Policy
  • Terms & Conditions

©2022 LOWYAT MEDIA, LLC. ALL RIGHTS RESERVED.

No Result
View All Result
  • News
    • Lifestyle
    • Computing
    • Hardware
    • Internet
    • Rumours & Leaks
    • Software
  • Forums
    • Kopitiam
    • Tradezone
    • Property Talk
    • Finance & Business
    • Fast and Furious
  • Gaming
    • PC Gaming
    • Console
    • Esports
  • Mobile
    • Apps
    • OS
    • Tablets
    • Phones
    • Telco
      • Celcom
      • DiGi
      • Maxis
      • Tune Talk
      • U Mobile
      • Buzzme
  • Pricelists
    • Hardware
      • Compu-zone
      • Viewnet
      • Thundermatch
      • Sri Computers
    • Notebooks
      • Compu-zone
    • Smartphones
      • Thundermatch
  • More
    • Automotive Tech
    • Drone
    • Enterprise
    • Entertainment
    • Fashion
    • E-Hailing
    • Wearables

©2022 LOWYAT MEDIA, LLC. ALL RIGHTS RESERVED.

We use cookies to improve your experience. Learn More.