Hundreds of iOS apps exposed to FREAK vulnerability risk

Citing a report from foreign media Ars Technica, security experts from FireEye recently discovered that thousands of iOS and Android applications are at potential risk of being attacked by the "FREAK" (Factoring RSA Export Keys) vulnerability. After further investigation of software on various platforms, security experts found that 771 of the 14,079 popular applications on the iOS platform are vulnerable to attacks, while on the Android platform, 1,288 applications with more than 1 million downloads are vulnerable to attacks.

According to researchers, these vulnerable applications all use the vulnerable keys generated by the affected encryption library to connect to the server, and many applications are still at risk of being attacked by FREAK today. FireEye security experts Yulong Zhang, Zhaofeng Chen, Hui Xue and Tao Wei said: "For example, using the FREAK attack to launch an attack on an online shopping application can steal customer login credentials and credit card information. Other vulnerable applications include multimedia applications, productivity applications and financial applications."

access:

Apple Online Store (China)