Домой United States USA — IT How Russian Code Infiltrated Android And iOS Apps Used By The CDC...

How Russian Code Infiltrated Android And iOS Apps Used By The CDC And US Army

91
0
ПОДЕЛИТЬСЯ

A company that collects user behavior information seems to have obscured its Russian origins.
Mobile app developers often rely on third-party pre-packaged code that provides specific functionality. This code comes in the form of a software development kit, or SDK for short, and many apps include

Pushwoosh also handles storing and processing all the data collected from the apps containing its SDK. Given the potentially sensitive user information gathered by Pushwoosh, the company’s identity and location are important pieces of information for those considering whether to integrate the Pushwoosh SDK into their apps. However, Pushwoosh seems to have obscured this information with conflicting claims. Around 8,000 Android and iOS apps rely on code provided by Pushwoosh to monitor user activity and send custom push notifications. According to a report by Reuters, Pushwoosh has made efforts to portray itself as a US-based company, obscuring the fact that the company operates out of Russia. Among the clients that included Pushwoosh’s code in their apps are the Centers for Disease Control and Prevention (CDC) and US Army. Both organizations have since removed this code from their apps, citing deception on the part of Pushwoosh and national security concerns Mobile app developers often rely on third-party pre-packaged code that provides specific functionality. This code comes in the form of a software development kit, or SDK for short, and many apps include multiple SDKs . Pushwoosh is a company that develops and distributes one such SDK. The Pushwoosh SDK registers users and tracks their behavior, including precise geolocation data, for the purposes of collecting usage statistics and sending custom push notifications tailored to users’ activity.Pushwoosh also handles storing and processing all the data collected from the apps containing its SDK. Given the potentially sensitive user information gathered by Pushwoosh, the company’s identity and location are important pieces of information for those considering whether to integrate the Pushwoosh SDK into their apps.

Continue reading...