The malicious apps installed on a mobile device or through a person-in-the-middle attack, an attacker can send malicious commands to the SHAREit app. SHAREit app on Play Store with over 1 billion installs. Trend Micro researcher wrote that the root cause of the app’s security flaws in Android is that it lacks appropriate restrictions needed to determine who can access the app’s code.

It is also not easily detectable,” Trend Micro blog post read.ĭata hijacking due to lack of proper restrictions “We decided to disclose our research three months after reporting this since many users might be affected by this attack because the attacker can steal sensitive data and do anything with the apps’ permission. The bug only affected the app’s Android version while the iOS version is safe as it uses a different codebase. SEE: Security of Millions At Risk Due to Unpatched Android Appsįurthermore, researchers identified that a hacker could do anything with the app apart from stealing sensitive data. Moreover, Trend Micro researchers noted that previously identified vulnerabilities used to download and steal documents from user devices are also linked with this app.

However, the vulnerabilities associated with these features are mostly unintended flaws. The app allows sharing and downloading of various file types, including Android Package (APK). It is worth noting that SHAREit was one of the 59 Chinese apps that the union government in India banned temporarily and permanently. The app has over one billion downloads on Google Play Store.Īccording to researchers, the app contains multiple unpatched vulnerabilities that hackers could abuse to run malicious code on devices where the app is installed and expose sensitive user data. Trend Micro researchers have identified a bug in the Android file sharing app SHAREit.

Shareit app android