Chrome Security Flaw Allows Android Apps to be Installed Without User Knowledge

Advertisement
By NDTV Correspondent | Updated: 24 November 2014 20:18 IST
Chrome Security Flaw Allows Android Apps to be Installed Without User Knowledge

A new bug affecting the Chrome browser has been found, which reportedly allows drive-by installations of apps on users' handsets without their knowledge. Apps can then extract users' personal information and send it back to the malware author.

Security website Extension Defender reports that the Chrome browser extension bug "allows the company behind it to install an app on your phone without you providing your permission or ever even knowing it was installed."

The website notes that a company called Revjet.io which calls itself a "browser extension monetization" service uses code from another website, Vulcun.com, which enables the background installations. Vulcun.com is a desktop-to-mobile ad server, which lets developers integrate advertisements into their apps.

However, the small snippet of code runs periodically in the background and waits for an opportunity to install apps without a user noticing. The confirmation dialog and permission prompts are also hidden from users. App developers sometimes pay for ads which deliver click-throughs and app installs, so the ad service can make money by delivering installations whether or not users want them. Extension Defender notes that some of the apps used by the malware include 3Dnator, FB Auto-Poker, Post To Tumblr, and Alert Control.

Advertisement

Google has not responded to the report and is yet to take some steps to deal with the threat.

In related news, a report from earlier this month highlighted a Wi-Fi related bug that is causes trouble when users running the latest build of Android on a Nexus device try hooking up to a Wi-Fi network. The bug does not seem to have affected non-Nexus devices so far. Google, however, has acknowledged that issue and will issue an update soon.

 

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Advertisement

Related Stories

Popular Mobile Brands
  1. Devika and Danny, A New Telugu Drama, Is Now Streaming on Jio Hotstar
  1. Astronomers Discover Most Powerful Cosmic Explosions Since the Big Bang
  2. NASA’s IMAP Spacecraft Gears Up for Mission to Explore Solar System’s Edge
  3. Rocket Lab Launches Private Earth-Observing Satellite Toward Orbit for BlackSky
  4. NASA’s RASSOR Robot Digs Deep into Moon Mining Future with Successful Test
  5. Europa Could Briefly Sustain Life When the Sun Becomes a Red Giant Star, Scientists Say
  6. Seismic Mystery Solved: NASA’s SWOT Satellite Detects Greenland Mega-Tsunamis
  7. MAVEN Reveals How Mars Lost Its Atmosphere and Became a Barren World
  8. Rana Naidu Season 2 OTT Release Date: When and Where to Watch it Online?
  9. Devika and Danny, A New Telugu Drama, Is Now Streaming on Jio Hotstar
  10. Google Chrome Gets 'Highest Ever' Speedometer Score; Company Reveals Optimisations Behind Improved Performance
Gadgets 360 is available in
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.