Most tests on iOS and Android show that the most common security problem faced by mobile is insecure data storage.
According to Positive Technologies' annual report, Vulnerabilities and Threats in Mobile Applications 2019, Android apps have more critical vulnerabilities than iOS apps. The difference, according to experts, is minimal (43% vs. 38%). The level of security of mobile apps is about the same.
As mentioned above, insecure data storage is the most common vulnerability. Specifically, it was found in 76% of mobile apps. This vulnerability can be used by hackers to steal passwords, financial information, personal data, and private messages.
89% of the vulnerabilities found could be used to spread malware. The malware could request permission to access user data, and if permission is granted, the malware could send data to the attackers.
According to Leigh-Anne Galloway of Positive Technologies, in 2018, mobile apps were downloaded over 205 billion times. Most of the time, developers pay special attention to software design in order to offer users a pleasant and comfortable experience. Users are impressed by the features of the apps and download them by providing personal information. However, according to the report, too many apps are not secure. What is worrying is that developers do not pay the required attention to resolving vulnerabilities.
Galloway also added that users should be especially careful when their apps request access to phone features and data. If there is any doubt about the data an app is requesting access to, users should reject it. Users should also not open links in SMS and chat apps when they do not know what those links contain. Finally, it is a good idea not to download apps from third-party app stores.
According to the research, security issues related to the server (storage, processing and synchronization of information) are just as numerous as security issues related to the client. 43% of server have low or extremely low protection. One-third (33%) contain critical vulnerabilities.
