Estimated read time: 2-3 minutes
This archived news story is available only for your personal, non-commercial use. Information in the story may be outdated or superseded by additional information. Reading or replaying the story in its archived form does not constitute a republication of the story.
SALT LAKE CITY — Some of a smartphone’s most basic functions are leaving users vulnerable to hackers, and one Utah computer forensics expert said Thursday many people are in the dark about the potential hazards.
Orem-based Decipher Forensics partner and digital forensics examiner Richard Hickman said, for example, many flashlight apps for Android phones contain spyware that could potentially give someone a way inside the devices.
“Flashlight apps in particular are one that has been a concern for quite some time,” Hickman said.
Hickman pointed to multiple Android flashlight apps that ask for “unnecessary” permissions before download, like “full network access” and “view network connections.”
“Why does your flashlight need that stuff?” he questioned. “Why does it need permission to look at my photos? It doesn’t need that.”
Hickman said the malware is a way to collect data, but could be used ultimately for other purposes.
“They’re just going to be collecting as much information on you as possible,” Hickman said. “It could lead to anything from identity theft to trying to sell that information for advertising.”
Flashlight apps in particular are one that has been a concern for quite some time.
–Richard Hickman
Hickman noted, though, flashlight apps aren’t the only ones to ask for extra permissions, and Android and iPhone users alike should look closely at the permissions before deciding whether to download any app.
Restoring a phone to its factory settings doesn’t necessarily solve the problem, he cautioned.
“You go re-download all your apps, it’s just right there — right back there,” Hickman said. “You just re-downloaded the app right away.”
Hickman said smartphone users can take steps to protect themselves and minimize their risk, but it’s hard to keep the world’s best hackers and governments with extremely deep pockets out if they want to get inside.
“If there’s motivation to find out what you have on your device, there’s somebody out there that can get into it without you knowing,” Hickman said.
Hickman urged users of smartphones and smartphone apps to download antivirus software, turn off location services or GPS when it is not necessary to use it, cover a phone’s camera when in need of privacy, and always carefully read through permissions for apps before downloading them.
