CHINA TOPIX

12/23/2024 07:30:27 pm

Make CT Your Homepage

Engineers Develop Method to Hack Gmail with 92 Percent Accuracy

Gmail

(Photo : Reuters)

A group of U.S. researchers has found a way to successfully hack into apps with 92 percent accuracy.

Included in the apps they were able to successfully infiltrate were Gmail and JPMorgan Chase Bank, N.A.

The team's study will be presented at the 23rd USENIX Security Symposium in San Diego this Friday.

Like Us on Facebook

The engineers were able to pinpoint a weakness in the Windows, Android and iOS mobile operating systems that make users susceptible to hackers after their personal information.

The method they used proved to be successful from 82 percent to 92 percent of the time on six of the seven highly-used apps the team tested.

Amazon proved to be the lone app that was difficult to infiltrate, with only a 48 percent success rate.

Researchers said users should be aware the apps that run on their mobile phones share the same operating system.

Zhiyun Qian, an assistant professor at University of California's Riverside Bourns College of Engineering and one of the researchers, said the assumption that apps cannot interfere with each other is wrong.

"We show that assumption is not correct and one app can in fact significantly impact another and result in harmful consequences for the user," he noted.

Hacking can occur when a user downloads a malicious app that presents itself as harmless. The app can be as misleading as a simple background wallpaper.

Once the user installs the app, researchers discovered hackers could easily manipulate the phone's shared memory statistics. This doesn't require any approval from the user.

Shared memory is a feature in operating systems that allow different processes to share data.

Simply augmented with a few other side channels, researchers found they were able to track whichever app the user was using in real-time.

"This method will work on other operating systems because they share a key feature researchers exploited in the Android system," Qian added.

Real Time Analytics