Mobile security is an important feature that consumers are looking for when they purchase a new device or choose a wireless service carrier. This is why there are lots of security firms that are always on the lookout for potential threats. Recently, however, a mobile security firm discovered a significant vulnerability that could be put millions of Pixel devices at risk. Thankfully, Google has quickly responded to the report and released a statement to assure its customers of its action.
As revealed by AndroidAuthority, iVerify found the threat that would potentially leave Pixel users susceptible to spyware installations and other attacks. They discovered the Showcase.apk package runs at the system level and has the ability to change the operating system functions of a device. Since the app is installed at the system level, users cannot remove or uninstall it on their own. Left to the wrong hands, cybercriminals can exploit this to hack devices.
iVerify quickly notified Google about the vulnerability. The security firm also discovered that the package was present on Pixel devices sold from Verizon, most of which were shipped since September 2017. The company guessed that the package was developed for store devices under a demo mode.
Responding to iVerify’s notification, Google has confirmed that the Showcase package was “not an Android platform nor Pixel vulnerability.” The tech giant confirmed that this was “an apk developed by Smith Micro for Verizon in-store demo devices and is no longer being used.”
The carrier also shared that “physical access to the device and the user’s password” were needed to exploit the app. Still, the company promised to remove the apk from “in-market Pixel devices with an upcoming Pixel software update.” Google shared that this app is not included in the new Pixel 9 series.
Source: AndroidAuthority
