Today: Jul 05, 2024

Security experts uncover two significant smartphone privacy concerns | Digital Trends

January 27, 2024



Apple iPhone 15 Pro Max Andy Boxall / Digital Trends
The findings of two investigations have raised concerns about the privacy and security of smartphone users. First, a comprehensive investigation by 404 Media has unearthed that a company called Patternz is utilizing a mobile ad delivery system to gather information through apps and pass it on to consumers. The report revealed that Patternz is a “secret spying tool capable of tracking billions of phone records through advertising companies.” Patternz operates through popular apps such as 9Gag and various caller ID apps. The company claims it can manage almost any app with advertising capability, putting more than half a million apps at risk of becoming part of its surveillance network. This affects users of both iPhone and Android devices. ISA, the company behind Patternz, collects data from RTB players such as Google and X (formerly Twitter), and the products it offers can include precise location data accurate to within a meter, as well as a history of user activity and contacts.
Concerns have also been raised about the effectiveness of Apple’s App Tracking Transparency, designed to mitigate advertising tracking. Cybersecurity experts argue that such tools aid government surveillance, with companies like ISA openly offering their services to national security agencies. The head of the National Security Agency has acknowledged that the NSA purchases Americans’ internet browsing data from data vendors, bypassing the requirement for warrants. This disclosure followed a demand for answers from Senator Ron Wyden, who had been trying for three years to disclose the NSA’s purchases of Americans’ internet records. This revelation underscores the potential misuse of collected information and its implications for privacy and security.

A picture of people standing on a phone screenCreated using Dall-E 2 / Digital Trends The existence of such tools also raises doubts about Apple’s best-selling App Tracking Transparency, which aims to reduce such advertising tracking. Cybersecurity experts say such tools help government surveillance, and the likes of ISA are already announcing their services to national security agencies. It was not an accident. The head of the National Security Agency has admitted that the NSA buys Americans’ internet browsing from data vendors, ignoring the need for documents. The confirmation of the bomb came after Senator Ron Wyden (D-OR) stood up for the appointment of the head of the NSA, Timothy Haugh, and demanded answers about the agency’s actions in collecting Americans’ internet data. Wyden, who has been trying for three years to reveal that the NSA buys Internet records of Americans, received a letter on December 11 from the current Director of the NSA Paul Nakasone confirming the purchase. Reuters first reported on the letter. Information can be bad
Ivory program informationChristine Romero-Chan / Digital Trends But marketing is only half the battle. A study conducted by Mysk revealed that malicious actors are using iPhones’ information to collect important information for monitoring and sending personalized data. Whenever an app receives a push notification, iOS briefly wakes it up, giving it a brief window to update the settings before displaying them to the user. It is not surprising that various social networks, famous for their data collection habits, are using the same time provided by push notifications. Developers can intelligently use this method to provide code back whenever they want, just by sending notifications. Numerous applications are utilizing this function to send detailed data to the device while it is running in the background, and to manage fingerprinting. “The rate at which many applications send information about the device after being triggered by a notification is surprising,” the security firm said. The research has found suspicious behavior even on popular platforms like Facebook, TikTok, and LinkedIn. What do the experts say?
An illustration of a woman looking at the phoneDesigned using Dall-E 2 / Digital Trends The only solution to this problem? Stop notifications. “Recently, adversaries seem to be using transparent information and advertisements that can lead the victim to install spyware on their devices,” Jon Clay, CEO of global cybersecurity firm Trend Micro, tells Digital Trends. So, what can the average person do to prevent unauthorized surveillance, which can provide sensitive information such as location and local information? “Many people believe that mobile devices are automatically protected,” says Clay, noting that installing ad blockers can provide some form of security or protection software. What happens on your iPhone doesn’t stay on your iPhone. Alan Bavosa, vice president of security at Appdome said: He added that users are often left vulnerable to these attacks because they don’t know what’s happening on their devices in the first place. “There are small things users can’t do to make things worse, like downloading apps from regular app stores without modifying (jailbreaking or rooting) their devices,” Bavosa tells us. “But this is a supplement, not a cure.”

A person with an Apple iPhone 15 Plus and an Apple iPhone 15 Pro Max.Apple iPhone 15 Pro Max (left) and Apple iPhone 15 Plus Andy Boxall / Digital Trends Unfortunately, it seems that the onus ultimately falls on the user, and, in turn, it’s a way to protect yourself. A common suggestion from cybersecurity experts is to manually dig into the settings program and block third-party notifications and possibly device sensors. “Adware and other spyware can be published by malicious actors in legitimate markets and legitimate software,” said Shawn Loveland, chief operating officer at Resecurity. “It is recommended that you do not install programs or applications that you do not need.” Even if bad actors have found ways to work around it, asking apps not to track user activity on your iPhone is a smart move. “It’s a good idea to periodically check app permissions, especially location and microphone settings, and disable any that aren’t needed,” says John Chapman, co-founder of MSP security firm Blueshift. Others will come later this year as Apple plans to ask manufacturers to explain why they should get push notifications and tracking systems related to iPhones. It won’t solve all problems at once, but it’s a good start. Editor’s Note.

OpenAI
Author: OpenAI

Don't Miss