Google Play Store app leaks conversations, data via unprotected database

tech.hindustantimes.com:

The Google Play Store provides access to countless apps for various purposes. However, with the convenience of having so many options comes the potential danger of some apps being identified as malicious as they contain harmful code, violating users' privacy, stealing their data, and other risks. Even though Google's Play Protect system monitors apps diligently, some of them may still be malicious and go undetected, which can leave users vulnerable.

Research conducted by Cybernews has revealed an app on the Google Play Store through which hackers could steal user's data. The app in discussion is OyeTalk. With over 5 million downloads on the Google Play Store, OyeTalk is a popular voice-chat app which lets users host podcasts, interact with each other in discussion rooms and more. According to the report, the app had left its database unprotected, leaving users' private conversations and data exposed.

Cybernews reported that researchers discovered OyeTalk leaking data through open and unprotected access to Google's mobile application development platform called Firebase. More than 500MB of data such as user conversations, usernames, and IMEI numbers were exposed due to an open Firebase instance which did not have encryption. The report further states that the app developers were informed of the data leak but failed to close public access to the database.

If harmful apps are downloaded onto your smartphone, they can not only steal your data but also make your phone vulnerable to cyber-attacks, and even render it unusable, turning it into an expensive and useless paperweight. Therefore, if you have the app installed on your Android phone, you should be careful about your data.

While downloading apps from the Google Play Store,