Massive Android Vulnerability Left Millions Of Crypto Wallets Exposed to Hackers

utoday04-09

A severe vulnerability in a popular third-party Android software development kit (SDK) left tens of millions of cryptocurrency wallets vulnerable to data theft, according to a newly published report ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2626110087?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-04-09 20:34","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2626110087","market":"sg","top_or_hot":-1,"title":"Massive Android Vulnerability Left Millions Of Crypto Wallets Exposed to Hackers","media":"utoday","content":"<div>\n<p>A severe vulnerability in a popular third-party Android software development kit (SDK) left tens of millions of cryptocurrency wallets vulnerable to data theft, according to a newly published report ...</p>\n\n<a href=\"https://u.today/massive-android-vulnerability-left-millions-of-crypto-wallets-exposed-to-hackers\">Source Link</a>\n\n</div>\n","source":"utodaynews_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Massive Android Vulnerability Left Millions Of Crypto Wallets Exposed to Hackers</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nMassive Android Vulnerability Left Millions Of Crypto Wallets Exposed to Hackers\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-04-09 20:34 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://u.today/massive-android-vulnerability-left-millions-of-crypto-wallets-exposed-to-hackers><strong>utoday</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>A severe vulnerability in a popular third-party Android software development kit (SDK) left tens of millions of cryptocurrency wallets vulnerable to data theft, according to a newly published report ...</p>\n\n<a href=\"https://u.today/massive-android-vulnerability-left-millions-of-crypto-wallets-exposed-to-hackers\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"PII","symbol_name":"北极星","start_time":0,"source_url":"https://u.today/massive-android-vulnerability-left-millions-of-crypto-wallets-exposed-to-hackers","article_id":"2626110087","we_media_id":null,"thumbnails":[],"rights":{"source":"utodaynews_highlight","url":"https://u.today/massive-android-vulnerability-left-millions-of-crypto-wallets-exposed-to-hackers","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2626110087","pubTimestamp":1775738040,"columns":[],"sourceInfo":{"source_id":"utodaynews_highlight","name":"u.today"},"weMediaInfo":null,"summary":"A severe vulnerability in a popular third-party Android software development kit (SDK) left tens of millions of cryptocurrency wallets vulnerable to data theft, according to a newly published report b","collect":0,"end_time":0,"defaultTopTitle":"u.today","property":[],"viewcount":null,"language":"en","relate_stocks":{"PII":"北极星","BK4190":"消闲用品"},"translate_title":"巨大的Android漏洞使数百万个加密钱包暴露在黑客面前","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"PII":1},"content_text":"A severe vulnerability in a popular third-party Android software development kit (SDK) left tens of millions of cryptocurrency wallets vulnerable to data theft, according to a newly published report by the Microsoft Defender Security Research Team.The flaw has allowed malicious applications to bypass Android's core security sandbox. The scope of the threatThe vulnerability has affected a wide range of applications. The cryptocurrency and digital wallet ecosystem bore the brunt of the exposure due to the high-value nature of the stored data.Microsoft identified over 30 million installations of affected third-party crypto wallet applications. The total exposure exceeded 50 million installations.If exploited, the vulnerability could have exposed Personally Identifiable Information (PII), private user credentials, and sensitive financial data stored deep within the affected app's private directories.Fortunately, Microsoft noted that there is currently no evidence to suggest this vulnerability was ever actively exploited by threat actors in the wild.The \"intent redirection\" flaw The EngageLab SDK is a tool utilized by developers to manage push notifications and real-time in-app messaging. The security flaw was traced to a specific component (MTCommonActivity) that was automatically added to an application's background code after the build process.Because this component was broadly exported, it became accessible to other applications installed on the same Android device.A malicious app installed on the same device could craft a manipulated message (an \"intent\") and send it to the vulnerable crypto wallet app.The wallet app would process this intent using its own trusted identity and permissions.This tricked the wallet into granting the malicious app persistent read and write access to its private data directories.Swift action was taken across the Android ecosystem to mitigate the threat.","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.42.0","shortVersion":"4.42.0","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2626110087","isCrawlerRequest":true}