FireEye: The free Android apps available from Google Play Store and have over a million downloads found to be using vulnerable cryptographic systems to protect the sensitive information they store.
An analysis of the most popular free apps (9.339 apps) available on the official Google Store reveals that about 62% of them, or 5.147, failed to properly secure confidential information, which could allow an attacker to steal the "protected" data by exploiting various weak points.
Her researchers FireEye (you can read more on the official websiteσελίδα) performed the tests on samples that met the popularity criteria mentioned above on November 22, 2014.
The experts looked for the vulnerable points on high entropy, encryption algorithms and encryption codes.
Most of the products found cryptographically unsafe were with cryptographic algorithms. An attacker could use a reverse dictionary to discover the original string without knowing the keys used for encryption.
The cases of low entropy weaknesses discovered by the security company concerned 1.762 applications that used a static key to encrypt the information that could be extracted to reverse the process.
So beware of what you download, or to be even more confident, of what you store on your devices.
