According to an independent report, the applications pre -installed on Samsung phones endanger the security of users.
The accusations come from Sergey Toshin, the founder of the Oversecured Security Company.According to him, the applications pre-installed on the Samsung phones raise "multiple vulnerabilities", taking the form of bugs and security deficiencies that allow users to spy and even divert the devices.
Sergey Toshin would have been able to find more vulnerabilities on Samsung's smartphones, three of them constituting serious security threats.However, he does not disclose exact details about the problems discovered, just stating that the worst of problems could help hackers intercept SMS, tricking users.Two of these vulnerabilities are, however, more serious, and can be exploited without any intervention from the user.Thus, an attacker could "read and/or write files, benefiting from high access privileges on the device."
Apparently, all the vulnerabilities discovered at Samsung phones have already been reported through the Bug Bounty program provided by the South Korean company.Thus, Sergey Toshin's company would be rewarded for the effort, the security issues being remedied before the respective vulnerabilities were exploited in real attacks.In the first part of this year, Overscured has already accumulated $ 30000 in the form of rewards, to signal 14 security issues that affected Samsung devices.
For now, it is not clear how long it will take until Samsung will remedy each of the problems that have been informed.Probably, as long as they are not disclosed by the company that discovered them, vulnerabilities will not create special discomfort to Samsung phone owners.