Handelsblatt1 hour agoTech1 min readGermany

Manufacturer tools affected: Android move: Many data transfer apps are unsafe

Researchers from Graz University of Technology and A-SIT have discovered critical vulnerabilities in seven common data transfer apps from manufacturers such as Samsung, Google and Huawei.

Quick Look

Researchers at TU Graz and A-SIT in Vienna have discovered critical security gaps in seven common Android data transfer apps.
This allowed attackers within WiFi range to access sensitive data or, in some cases, introduce malware.

AI-generated summary

Why It Matters

Researchers from TU Graz and A-SIT examined Android apps for data transfer from seven smartphone manufacturers.

Font size

When moving to a new smartphone, private data can be at risk: photos, contacts, access data. There are security gaps in Android apps for data transfer. What you should pay attention to now.

Security risks when moving data: Vulnerabilities in transfer apps could allow unauthorized persons to access private smartphone data. Photo: Arne Immanuel Baensch/dpa-tmn

Graz/Vienna. Whether Samsung, Google or Xiaomi: Almost all major smartphone manufacturers offer tools for moving data to the new phone. However, attackers within Wi-Fi range could access all sorts of private data due to security gaps in the apps - from photos to login information. This is what researchers from TU Graz and the Center for Secure Information Technology A-SIT in Vienna found out.

The scientists found critical vulnerabilities in all seven Android apps examined from Google (Switch), Honor (Device Clone), Huawei (Phone Clone), Oppo (Clone Phone), Samsung (Smart Switch), Vivo (EasyShare) and Xiaomi (Mi Mover). The manufacturers have now provided security updates.

Check apps for updates before moving

Before moving to a new smartphone, users should therefore definitely check in the Play Store whether the latest version of the respective data transfer app is installed - on both phones. In some cases, an update of the entire operating system is necessary.

The applications, often referred to as switch or cloning tools, usually establish a direct WiFi connection between the two smartphones to transfer data. The researchers found that an attacker with equipment costing less than 100 euros only had to be within radio range (around 20 to 45 meters indoors) to access data - according to the study, such as photos, contacts, SMS, health data, WiFi passwords or even access data.

Partial risk of malware

In individual cases it was also possible to smuggle malware onto the new smartphone via manipulated app packages. The researchers reported the security gaps to the manufacturers before publishing the study.

What to Watch

AI outlook — possibilities, not facts

Users install pending security updates for transfer apps
Likely · Within days

Open Questions

Were the security vulnerabilities actively exploited by attackers before they became known?
Are all users of the affected app versions already protected?