Connect with us

Apps

Tips From a Hacker to Keep Smartphones Safe

Published

on

We can do many things using our mobile devices: hail a taxi, book a hotel, send and receive money, purchase goods online or in-store, chat and share media files, control other devices (such as door locks or security cameras) and more. But then there’s the other side of the equation: All these activities and conveniences create a huge cyberattack surface. The problem can be anywhere: in the local network, on your device, connected via Bluetooth or USB cable, exploiting vulnerabilities from far away. Cybercriminals can even use your smartphone speakers—for example, a malicious application can deliver voice commands to your Google Assistant.

To better understand these risks, let’s first look at how they work. Mobile applications consist of two basic parts: a client-side application you interact with (what you see on your Android or iOS device) and a server-side application run remotely, usually in the form of a web server). The client-side app communicates with the server-side app using the HTTP protocol, just like your browser. By default, most apps cannot share memory or private storage with each other. However, some complex apps, such as photo editors, messaging or social networking apps may need to communicate with other apps on the device or gain access to your files, camera or text messages. These have a wider attack surface.

At Positive Technologies, we work to find vulnerabilities in legitimate apps that can be exploited by criminals and consider different ways smartphone users can be attacked.

The most common way mobile users are attacked is through trojans hidden in apps. Victims unknowingly download these malicious apps themselves and grant them access to text messages and other apps and functions.

If you install one of these trojan-laced apps, hackers can spy on you through your camera and microphone and access your contacts, text messages and other stored data. Trojans not can only collect private data silently but also pretend to be your banking app interface to steal money and log-in details and even install other malicious apps. These will often force victims to grant them all the permissions they need. For example, a trojan application called “Virus Cleaner” can only provide the capabilities it promises if dangerous permissions are granted by the user.

But even without broad permissions, some malicious apps can cause great damage. If you’re using an outdated version of the mobile operating system, there may be security bugs that can be exploited by malware silently to allow the app to gain system privileges, which would allow it to steal all stored data on the phone including logins, passwords, banking data and more. And for those who root or jailbreak their phone, the same attack scenario is possible because system privileges then become available for any application on the device.

Many of us like to check social networking apps and messengers while sitting in a cafe, and many work remotely using mobile devices. But what if the Wi-Fi router used at the coffee house gets hacked? Our statistics show that 43% of mobile banking applications are not protected from being attacked in this scenario. If you use an untrusted internet connection, all information on your phone is at risk of being read and even modified by attackers—your logins, passwords, banking information and messages and more.

Smartphone manufacturers do their best to protect your device when it’s lost or stolen, but there are still tricks attackers can use to make a buck. Even if your smartphone is locked, they can read the notifications on a locked screen (which can contain one-time passwords when attempting to reset an account). They can use a USB cable to connect your phone to a computer and steal data or talk to Siri or Google Assistant to make calls and send messages.

But what if attackers can actually unlock your stolen or lost smartphone? First of all, an unlocked smartphone can be grabbed from someone’s hand—this trick was used by Metropolitan Police to download data from a smartphone. In these cases, attackers can run applications, backup applications using a computer and gain access to stored data such as contacts, web browser history, photos, other files.

But perhaps the most dangerous attacks are truly remote, from hackers who don’t have physical access to your phone and don’t even need you to install malware. They can send specially crafted web links to your mobile browser or messenger to gain a foothold on your phone. According to our research, 36% of mobile banking apps can be hacked this way.

In some cases, the only factor leading to a mobile hack can be a vulnerable app installed. These ‘zero-click’ attacks require no action from the user. Example: A Whatsapp zero-click bug was discovered last year that allowed criminals to attack phones using the voice call feature to install malware applications.

Recommendations

So what can you do to keep your mobile device safe? Here are some simple rules, tips and tricks.

First, make sure you always install applications from trusted sources such as Google Play or the Apple App Store. Avoid installing applications you find through a link on the Safari browser on Apple devices and don’t download APK files (Android application files with a .apk extension). Applications distributed in a way other than through official app stores are more likely to be malicious. Using official app stores won’t guarantee that you avoid mobile trojans altogether, but it will dramatically lower the chances. Even in legitimate app stores, be wary of apps with names like “Super Battery,” “Turbo Browser” or “Virus Cleaner 2019.”

Next, think about what permissions you grant to applications you install or run. For example, game apps probably don’t need access to your microphone, location or text messages. Here is a partial list of some dangerous permissions requested by trojans:

  • Contacts.
  • Microphone.
  • Read SMS [Android only].
  • Device Admin [Android only].
  • Draw over other apps [Android only].
  • Accessibility services (features for users with disabilities) [Android only].

The permission to “Draw over other apps” is granted automatically on Android devices. When an application has this permission, it will be allowed to display its windows over other apps. But an attack technique called “tapjacking” takes the taps you make on the app showing on your screen and applies them to an underlying app you cannot see, which may allow hackers to access your data. You can revoke this permission after installing an app in Settings -> Apps -> Settings -> Draw over other apps.

Cryptographic certificates are used to verify applications before installation or for establishing a secure connection between your application and its server. Sometimes you need to decide manually whether you trust certificates or not—for example, when you visit a website that uses a self-signed certificate or when you install an application using Safari. You may be forced to install a certificate on your device to allow network monitoring if it is the policy of your company. But the same mechanism can be used by criminals to run malware on your device or to monitor the traffic of unsecured applications. Don’t install untrusted certificates on the device. To prevent criminals from seeing all data traveling to and from your device, avoid using untrusted Wi-Fi connections, such as those in public places. You can also significantly lower your risk of being attacked by mobile malware or remote hackers if you install operating system and application updates in a timely manner.

When you leave your device unattended, someone can easily read your banking app one-time password from notifications on your lock screen. Disabling lock-screen notifications will help protect your privacy in this scenario.

In addition to not clicking on suspicious links in your mobile browser, avoid untrusted links in other mobile apps as well. Some vulnerabilities can be exploited through links received from Messenger, email and many other types of apps. Enable two-factor authentication for the apps that provide this feature. Using a one-time password with your regular login and password will make your account unappealing to hackers. This is also good to do with accounts that you access from your computer.

There are many ways your phone and other mobile devices can be hacked. But with the right information and tactics, you can thwart many of the most common attacks.

Continue Reading

Apps

Days Gone Game Download for Android

Published

on

Days Gone is an open-world survival horror and action-adventure video game developed by SIE Bend Studio. Moreover, this horror-adventure game published by Sony Interactive Entertainment. Unreal Engine 4 used for the development of this game. The game set in a post-apocalyptic Oregon held after a global pandemic. However, a former drifter Deacon St. John. seeks to survive with the help of his mate by staying in a shelter with resources like food, water, weapons, and booze.

Days Gone Android

App Version 1.0 BETA
Apk Size 112 MB
Publisher Sony
Supported Versions Android 4.1 and up
App Package com.sony.daysgone
Content Rating PG13+

How to Install Days Gone on Android

  • Go to the apk website to download Days Gone APK.
  • Open Days Gone.apk either from the download folder on your Android Device.
  • Allow an unknown resource to be installed on your phone. However, you will get the launcher on your mobile phone and tap on it.
  • Complete the verification process and additional data download. Next, play the game on your mobile.

Gameplay

As I already said, the game sets in a post-apocalyptic environment and the main protagonist is Deacon St. John. The third-person view of the game is the player navigates an open-world setting. The player uses handguns, equipment with improvised weapons. Stealth is used to protect and defend against hostile humans and creatures.

The main player is to complete his objectives by using stealth mode or assault mode. The weather is dynamic like day-night cycle mode and also features slow by day. Fast by night with deep thrill chilling environment. John’s transportation is a motorcycle, and it is modified with several parts to enhance speed and durability.  As a player, you need to defend yourself against threats as it is a survival-horror game. Take care of your vehicle because you need to travel to different locations, clean the bandit camps, freak dens, and killing zombies.

Related: PUBG lite hack app: Latest Version September 2021

Game Features

The game featured a muddy and disturbed environment with zombies and firefighters, and the graphics are good, and the story is interesting with the necessary action. The game background music is good and apt to the environment. John’s character was well designed. Especially, his face features angry, sullen, and when it comes to his personal life. His wife has been divorced and claimed to be death.

Related: PUBG Mobile Lite new update, Download APK- Latest news

Days Gone PS4

Players can experience epic gameplay with additional features. They can play the game with their earned weapons, NERO boosters, skills, collectibles, and more. You can play NG+ on any mode like easy, normal, hard, and survival. Additionally, players can new trophies and new weapons from several modes.

Days Gone PC

Players begin a new journey on PC. They have two challenge modes Survival Mode and Challenge Mode. Players can play the main story, and also they can access new game content. In Survival, I and Survival II modes are difficult to play because enemies are harder. Indicators removed, and no fast travel and gameplay are highly tensed environment.  In Challenge mode, there are 12 different challenges available. The player needs to fight with zombies, freaks, and bike races as he needs to climb up the leaderboard. The player can earn credits to unlock bike skins and characters.

Related: Free Fire Max registration: Release Date, How to Download APK, Rewards, Redeem Codes Details

Continue Reading

Apps

Download Modern Critical Warfare action offline games 2018 APK 0.0.2j for Android

Published

on

World of Warcraft Action Offline

The World of Warcraft is all set to release its newest epic, the Modern Critical Strikes package that promises to be an expansion pack for World of Warcraft, and one that many are expecting to be well worth the money spent on it. As always, Blizzard Entertainment will be releasing a new patch with this new game, and it will be essential to players to make sure they are up to date on this before downloading and installing the latest patch. Not only will the new game to add a number of new levels and additional content, it will also include brand new equipment for the characters in the game, as well as a brand new system for playing” PvE “and” PvP “online. Here are some of the details about the exciting new addition to World of Warcraft:

There are currently over a dozen World of Warcraft massively multiplayer online role-playing games available, but only one of them offers players the chance to truly enjoy the highly addictive action that is the staple of modern critical combat, with a number of unique settings and combat mechanics that are not found in other MMORPGs. STJ Games, Incorporated has developed a number of fantastic arcade style mobile games, and now they have decided to bring this excellent content to life on the Android platform. As with the other versions of the Modern Critical Strike series, users will find that the touch screen interface is easily navigable, and that Android users will really enjoy the various little details that have been added to this popular action-adventure game. A great deal of the fun comes from the new arcade style level design that Blizzard has used, and players will have a good amount of fun figuring out how to defeat the ever growing numbers of enemies that appear on screen.

This all adds up to an exciting prospect for avid World of Warcraft players around the world, and it looks as though the company is gearing up for a number of new releases, including perhaps the return of the Lich King. With the success of STJ games on consoles, it’s only a matter of time before the PC version becomes available. Of course, the success or failure of STJ depends on whether or not the player base continues to grow as rapidly as the developer hopes it will. As you might expect, the success of STJ depends very much on the user base, which would seem to indicate that there are a lot of people out there who play this game. Whether or not they can enjoy it on their PC is another matter entirely.

Continue Reading

Apps

How to download PUBG Mobile 1.6, android and iOS

Published

on

PUBG Mobile 1.6: How to download PUBG Mobile 1.6 on your android and iOS, Download Link and Step by step guide
PUBG Mobile 1.6: How to download PUBG Mobile 1.6 on your android and iOS, Download Link and Step by step guide

PUBG Mobile 1.6: How to download PUBG Mobile 1.6 on your android and iOS, Download Link and Step by step guide – After the massive success of the PUBG Mobile 1.5 Update, Krafton has given PUBG Mobile players another reason to be excited. The much-awaited PUBGM 1.6 update is live for players globally with new maps, weapons, vehicles, and many other cool features. Players can download the game on their mobile devices from the Google Play Store (Android) and Apple App Store (iOS). Sometimes users face the problem while downloading the game but don’t worry we have covered you. In this article, we have covered all steps to download the PUBG Mobile 1.6 Update APK and OBB file on your mobile.

PUBG Mobile 1.6: How to download PUBG Mobile 1.6 on your android and iOS, Download Link and Step by step guide

PUBG Mobile 1.6 Update: PUBG pros and enthusiasts alike can download the game and enjoy the new feature on their mobile. If you don’t have PUBG Mobile on your device and want to download it on your android device. Please head over to the Google Play Store to install the game on the device. If you having any problem with downloading the game from Google Play Store, we have got you covered. We bring the download link of PUBG Mobile 1.6 Update APK and OBB File from where you can download the game on your device.

Also Read: PUBG New State delayed: Check the new release date of PUBG New State leaked by Apple App store

PUBG Mobile 1.6 Update APK and OBB file: Step by step guide to install

Latest APK Download Link– Download now

Latest OBB File Download Link- Download now

PUBG Mobile 1.6: How to download PUBG Mobile 1.6 on your android and iOS, Download Link and Step by step guide

PUBG Mobile 1.6 APK & OBB Global Version Download Link and Step by step guide?

Step 1: To begin the installation process, players need to download the APK file from the given link.

Step 2: After the download is complete, players need to enable the “Install from unknown source”. Ignore this step if done already.

Step 3: Locate & Install the downloaded APK file on your device

Step 4: After installation, open the game & download all the necessary resources. Once the process has complete players may restart the game & enjoy the all-new Titan theme at the battlegrounds.

Advertisement

Continue Reading

Trending