cyber.hendryadrian.com
Security News · bleepingcomputer.com

FBI Warns of Privacy and Data-Security Risks in Foreign Mobile Apps

· Original article ↗

Summary

The FBI warned that some foreign-developed mobile apps may collect extensive personal data, including through default permissions, and urged users to limit data sharing, update devices, use verified apps, and report suspected compromises to IC3.

Key points

  • The FBI warned that foreign-developed apps, particularly those maintained by Chinese companies, may pose privacy and data-security risks.
  • Some apps may continuously collect data or expose contacts and other personal identifiers through default permissions.
  • The FBI said some apps’ policies state that data is stored on servers in China, potentially for as long as developers deem necessary.
  • The FBI recommends disabling unnecessary data sharing, updating device software, downloading apps from official stores, and reporting suspected compromises to IC3.
  • The article also recommends password managers for generating strong passwords, noting that frequent password changes can encourage easier-to-guess choices.

Article Details

Event Type
FBI public service announcement warning about privacy and data-security risks from foreign-developed mobile apps, particularly apps maintained by Chinese companies.
Impact
The FBI warned that some apps may collect extensive personal information, including contacts and identifiers, even when not actively in use, and may store data on servers in China. The advisory said Chinese national security laws could potentially allow government access to data; it did not report confirmed access or a specific compromise. It recommended limiting data sharing, updating devices, downloading verified apps from official stores, and reporting suspected incidents to IC3.

Products

TikTok#TikTok #ByteDance

Countries

ChinaThe FBI issued a public service announcement warning about risks from foreign-developed mobile apps, especially those based in China.United StatesTikTok’s U.S. business was transferred to a majority American-owned joint venture led by Oracle, Silver Lake, and MGX following a 2024 divestiture requirement.

Related Articles