This top SMS tool is still exposing user info online

The popular SMS messaging app for Android GO SMS Pro is still exposing the privately shared photos, videos and files of millions of users ...

The popular SMS messaging app for Android GO SMS Pro is still exposing the privately shared photos, videos and files of millions of users despite the fact that Trustwave researchers recently disclosed that the app has a major security flaw.

The cybersecurity firm discovered back in August that media files sent via GO SMS Pro are stored insecurely on a publicly accessible server that can be accessed using some very minor scripting. Although it isn't possible to link the media files to specific users, those files that include faces, names or other identifying characteristics put the privacy of users at risk online.

A new version of GO SMS Pro was uploaded to the Play Store the day before Trustwave publicly disclosed that the app had a serious security flaw. Google then removed the app from its store but at the time of writing, version 7.94 of the app is available to download.

According to Trustwave, it appears that the app's developer GOMO is trying to fix the issue but a complete fix is still not available. In version 7.93 of GO SMS Pro the ability to send media files has been completely disabled while version 7.94 allows users to upload media to the app but these files don't appear to go anywhere when sent to another user.

Still vulnerable

Despite GOMO's attempts to fix its app, Trustwave has confirmed that older media used to verify the original vulnerability is still available online. The exposed media files contain quite a bit of sensitive data including driver's licenses, health insurance account numbers, legal documents and pictures of a more 'romantic' nature.

Cybercriminals are well aware of the flaw in GO SMS Pro and Trustwave has discovered numerous tools and scripts designed to exploit the vulnerability on sites such as Pastebin and GitHub. Several of these more popular tools are updated on a daily basis and the firm has also observed underground forums sharing images downloaded directly from the app's servers.

Unfortunately, GOMO has been less than cooperative when it comes to working with Trustwave on fixing the vulnerability. 

The developer has made some changes to GO SMS Pro but for the time being, Trustwave recommends that users “avoid sending media files that you expect to remain private or that may contain sensitive data using this popular messenger app”.



from TechRadar - All the latest technology news https://ift.tt/3oiLtij
via IFTTT

COMMENTS

BLOGGER
Name

Apps,3858,Business,151,Camera,1155,Earn $$$,3,Gadgets,1741,Games,926,GTA,1,Innovations,3,Mobile,1697,Paid Promotions,5,Promotions,5,Sports,1,Technology,8106,Trailers,796,Travel,37,Trending,4,Trendly News,25335,TrendlyNews,108,Video,5,XIAOMI,13,YouTube - 9to5Google,107,
ltr
item
Trendly News | #ListenNow #Everyday #100ShortNews #TopTrendings #PopularNews #Reviews #TrendlyNews: This top SMS tool is still exposing user info online
This top SMS tool is still exposing user info online
Trendly News | #ListenNow #Everyday #100ShortNews #TopTrendings #PopularNews #Reviews #TrendlyNews
http://www.trendlynews.in/2020/12/this-top-sms-tool-is-still-exposing.html
http://www.trendlynews.in/
http://www.trendlynews.in/
http://www.trendlynews.in/2020/12/this-top-sms-tool-is-still-exposing.html
true
3372890392287038985
UTF-8
Loaded All Posts Not found any posts VIEW ALL Readmore Reply Cancel reply Delete By Home PAGES POSTS View All RECOMMENDED FOR YOU LABEL ARCHIVE SEARCH ALL POSTS Not found any post match with your request Back Home Sunday Monday Tuesday Wednesday Thursday Friday Saturday Sun Mon Tue Wed Thu Fri Sat January February March April May June July August September October November December Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec just now 1 minute ago $$1$$ minutes ago 1 hour ago $$1$$ hours ago Yesterday $$1$$ days ago $$1$$ weeks ago more than 5 weeks ago Followers Follow THIS PREMIUM CONTENT IS LOCKED STEP 1: Share. STEP 2: Click the link you shared to unlock Copy All Code Select All Code All codes were copied to your clipboard Can not copy the codes / texts, please press [CTRL]+[C] (or CMD+C with Mac) to copy