Android Phones Leaking Secrets Faster Than Your Ex’s Gossip

by

In a move that probably horrified anyone who’s ever trusted a tiny rectangle of plastic and metal with their life savings, security researchers at Ledger discovered that some Android smartphone chips have a charming little flaw: they’ll hand over your passwords and crypto keys faster than you can say “oops” – all via a friendly USB connection.

PIN retrieved, storage decrypted, secrets extracted. Your data basically waves hello on the way out.

“This could affect millions of Android smartphones,” Guillemet added, because apparently chaos loves company.

Roughly 36 million people juggle digital assets on smartphones, which is about 36 million people who may soon discover that their wallets are less Fort Knox and more cardboard box under a staircase.

Guillemet wisely recommends devices with dedicated secure elements that might actually care about your keys and secrets.

The Ledger team also tested a slightly more sci-fi approach on MediaTek Dimensity 7300 (MT6878) processors in December. Using electromagnetic fault injection – which is basically magic with physics – they disrupted the chip’s boot process and gained full control over the device. It’s like giving a raccoon a master key and hoping for the best.

Risks Extend Beyond Android (Because Why Stop at One Ecosystem?)

Crypto users aren’t safe just because they bought a shiny Apple device. iOS, macOS, and Windows have also developed their own clever ways to say “surprise, we can see everything!”

Android tends to be the easier target thanks to Google’s “anything goes” approach, but iOS has its own sneaky vectors through malicious frameworks hidden inside innocent-looking apps. Because who doesn’t love a good plot twist?

Last year, a particularly greedy app infiltrated both iOS and Android, scanned device storage, and swiped over $1.8 million in cryptocurrency. Apparently, your wallet’s not the only thing that can be emptied quickly.

Kaspersky also pointed out malware campaigns hiding inside harmless apps, proving that evil sometimes comes wrapped in a gift box labeled “fun app for cats.”

Read More

2026-03-12 09:37