X

Sign in

Sign in to confirm

Have you forgotten your password?

... or login with Facebook:

Don't have an AndroidPIT account yet? Sign up

Android Powered HTC Phones Can Leak Wi-Fi Passwords

Eric McBride
6

 

(picture from GadgetSteria)

Whoops! Now this isn't very cool, especially considering that I personally own an HTC Sensation! According to reports, and now a direct confirmation from HTC, specific HTC phones are susceptible to an exploit that can steal Wi-Fi credentails and passwords, and send them to hackers.

Well poo. Apparently, this exploit depends on attackers creating rogue applications that take advantage of holes in the Android build that HTC uses on many of its devices. Security researcher Breta Jordan stated that the flaw doesn't allow access to the 802.1X settings themselves, but does allow viewing Wi-Fi credentials, which basically means that an app could get access to SSIDs of Wifi networks, along with user names and passwords.

So far, the affected phones are as follows:

• Desire HD (both "ace" and "spade" board revisions) - Versions FRG83D, GRI40
• Glacier - Version FRG83
• Droid Incredible - Version FRF91
• Thunderbolt 4G - Version FRG83D
• Sensation Z710e - Version GRI40
• Sensation 4G - Version GRI40
• Desire S - Version GRI40
• EVO 3D - Version GRI40
• EVO 4G - Version GRI40

Jordan goes on to say that Google and HTC were told about the flaw in September, and are working on a fix together. He also went on to say that both companies are taking the issue seriously and are very responsive.

HTC's official statement regarding the issue was:

"HTC has developed a fix for a small WiFi issue affecting some HTC phones. Most phones have received this fix already through regular updates and upgrades. However, some phones will need to have the fix manually loaded. Please check back next week for more information about this fix and a manual download if you need to update your phone“.

It's good to see that the issue is being addressed. But just to be on the safe side, if your using any of the affected phones, it might be a good idea to change your Wi-Fi password. If your running one of the affected phones, you should head over to HTC's support site for software updates.

Related Topics

Related Articles

News / Hardware
0 1 week ago

Top 5 News: Nexus 5 battery fixes, OTA on rooted S3, M8 camera test

News / Hardware
3 1 day ago

Top 5 Nexus 5 Accessories

News / Hardware
1 1 day ago

Top 5 News: Nexus 5 vs Moto X, LG G2 KitKat update, Nexus 8 rumors

News / Hardware
12 2 days ago

Sony Xperia Z2 vs HTC One (M8): the 'premium' device comparison

News / Hardware
1 3 days ago

HTC One (M8) Motion Launch gestures review

News / Apps
0 3 days ago

Chrome Remote Desktop finally arrives for Android

News / Updates
5 3 days ago

Android 4.4.3 coming to Galaxy S4, HTC One M8, and Moto G (rumor)

Comments

Write new comment:
  • CJ Brown Feb 28, 2012 Link

    knock on wood. I've been lucky so far (& the Trend Micro Virus Protection alerts me whenever someone is attempting to do a no no to my HTC Droid Incredible) ...

    0
    0
  • Eric McBride Feb 28, 2012 Link

    NICE. It seems that in the very near future, that virus protection will be a MUST for mobile devices.

    0
    0
  • CJ Brown Feb 29, 2012 Link

    Best Buy was offering the 2012 Trend Micro Bundle on sale in February (it came with an Android Phone app to download), so far I'm protected & want to stay that way until HTC (& Verizon Wireless) can prove to me why I shouldn't have Virus Protection ...

    0
    0
  • Eric McBride Feb 29, 2012 Link

    Well, in all honesty, I dont have protection on my devices yet, as so far, actual viruses for android arent in wide circulation...YET. A firewall will be just as important as an antivirus, and when a good bundle gets realeased at a decent price that ISNT a memory hog, I may consider getting one.

    But for now, most of these security companies are simply trying to make a buck, as its not to the point to where a security suite on Android makes much sense to have.

    That day will come though.

    0
    0
  • CJ Brown Feb 29, 2012 Link

    You do make a valid point that there are apps which are not worth purchasing (I ended up accepting the free app from trend micron for now, but I am dreading the day we have to use a firewall where you need to acknowledge everything like an I,T,) ...

    0
    0
  • Eric McBride Feb 29, 2012 Link

    I know what you mean. But unfortunately, I think that day will come sooner than later.

    0
    0

Author
7

What will Android 5.0 be named?