Over 1 billion Android devices at risk of hacking, watchdog says

Android devices at risk of hacking
Image Source

Consumer watchdog Which? has suggested that over a billion Android devices are at risk of hacking due to the absence of security updates.

Which? said that Google is no longer providing security updates for Android devices released in 2012 or earlier, making then vulnerable to hacking.

ADVERTISEMENT

The watchdog explained that over a billion Android users globally could be left exposed to data theft, ransom demands and other malware attacks. Which? also mentioned that it was not reassured by Google's response to the issue.

Based on Google's own data, 42.1% of Android devices worldwide are using version 6.0 of its operating system or below. However, an Android security bulletin indicated that there were no security patches issued for the Android system in 2019 for versions below 7.0.

Using these data, Which? concluded that two in five Android users globally were no longer receiving security updates.

ADVERTISEMENT

To test this, the watchdog asked antivirus lab AV Comparatives to infect five phones, a Motorola X, a Samsung Galaxy A5, a Sony Xperia Z2, an LG/Google Nexus 5, and a Samsung Galaxy S6, with malware and it successfully infected all phones.

Which? claimed that it has shared its findings with Google but the company "failed to provide reassurance that it has plans in place to help users whose devices were no longer supported".

The watchdog is calling on Google and other companies to be more transparent about how long updates for smart devices will be provided.

ADVERTISEMENT

Kate Bevan, Which? Computing editor, said: "It's very concerning that expensive Android devices have such a short shelf life before they lose security support, leaving millions of users at risk of serious consequences if they fall victim to hackers."

"Google and phone manufacturers need to be upfront about security updates - with clear information about how long they will last and what customers should do when they run out. The government must also push ahead with planned legislation to ensure manufacturers are far more transparent about security updates for smart devices - and their impact on consumers," Bevan explained.