Secure Messaging Applications Prone to Session Hijacking

guest · Dec 11, 2018

Secure Messaging Applications Prone to Session Hijacking
December 11, 2018
https://www.securityweek.com/secure-messaging-applications-prone-session-hijacking

Secure messaging applications such as Telegram, Signal and WhatsApp [...]
claim to be able to keep users’ messages secure by encrypting them and preventing third parties from accessing them. According to Talos, however, this is not exactly true, as conversations could be exposed in certain scenarios.

One of the main issues, the researchers say, is the fact that these applications assume that their users are security-educated and that they understand the risks of enabling certain settings on their devices.

The applications, Talos points out, encrypt the content of all communication between users [...] However, there’s no assurance about security while the data is processing or when the message is on the user device.

The instant messaging apps also support the major mobile device platforms and a desktop version, and Talos discovered that an attacker could use malware to hijack a session from a desktop version and access the data without the user knowing or before they would realize a hijack has been performed.
Click to expand...

Log in or Sign up

Secure Messaging Applications Prone to Session Hijacking

guest Guest

Log in or Sign up

Secure Messaging Applications Prone to Session Hijacking

guest Guest

Useful Searches