Over a billion Android devices are vulnerable and currently at risk of being hacked because they no longer receive security updates, watchdog Which? suggests.
The effect of this vulnerability is that users around the world are exposed to a greater danger of data theft, ransom demands and other attacks from malicious software.
Any individual who is using an Android phone released in 2012 or earlier stands a greater risk of being hacked.
Google’s data suggests that 42.1% of Android users worldwide are running on version 6.0 of its operating system or lower.
According to the Android security bulletin, there were no security patches issued for the Android system in 2019 for versions below 7.0
From this data, Which? suggests that two in five Android users worldwide were no longer receiving security updates.
It then tested five phones:
- a Motorola X
- a Samsung Galaxy A5
- a Sony Xperia Z2
- an LG/Google Nexus 5
- a Samsung Galaxy S6
Which? Asked anti-virus lab AV Comparatives to infect them with malware – which succeeded on every phone, with multiple infections on some.
It said it shared its findings with Google but the tech giant “failed to provide reassurance that it has plans in place to help users whose devices were no longer supported.”
The watchdog wants Google and others to provide far more transparency around how long updates for smart devices will be provided.
It also mentioned that the mobile industry needs to do a better job of giving support to customers about their options once security updates for their devices are no longer available.
Kate Bevan, Which? Computing editor, said: “It’s very concerning that expensive Android devices have such a short shelf life before they lose security support, leaving millions of users at risk of serious consequences if they fall victim to hackers.
“Google and phone manufacturers need to be upfront about security updates – with clear information about how long they will last and what customers should do when they run out.
“The government must also push ahead with planned legislation to ensure manufacturers are far more transparent about security updates for smart devices – and their impact on consumers.”
*Source: BBC