{"id":196679,"date":"2021-03-08T11:35:38","date_gmt":"2021-03-08T08:35:38","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/truecallers-guardians-app-fixes-bug-that-let-hackers-secretly-track-your-family\/"},"modified":"2021-03-08T11:35:38","modified_gmt":"2021-03-08T08:35:38","slug":"truecallers-guardians-app-fixes-bug-that-let-hackers-secretly-track-your-family","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/truecallers-guardians-app-fixes-bug-that-let-hackers-secretly-track-your-family\/","title":{"rendered":"#Truecaller\u2019s Guardians app fixes bug that let hackers secretly track your family"},"content":{"rendered":"

“#Truecaller\u2019s Guardians app<\/a> fixes bug that let hackers secretly track your family<\/strong>”<\/p>\n

\n Last week, caller identification company Truecaller launched an application called Guardians<\/a> that\u2019s designed to share your location and other vital information with your family for safety.<\/p>\n

However, at the launch, the app had a major bug that let hackers take full control over users\u2019 accounts. Security researcher Anand Prakash, who found the vulnerability<\/a>, informed Truecaller on Thursday, and it was fixed the same day.<\/p>\n

Truecaller launched the Guardians app with the intent to share your information with family members and friends for staying safe while traveling.<\/a>\u00a0Through the app, you could share your live location,and your phone\u2019s battery life and network status\u00a0with your trusted contacts. You could also let your family know you need\u00a0assistance by pressing an \u2019emergency\u2019 button.<\/p>\n

\"\"
<\/a>Guardian app from Truecaller<\/figcaption><\/figure>\n

Prakash noted that the bug was in the app\u2019s \u201cLog in with Truecaller API.\u201d That means an attacker could use your phone number to log in to your account. They could intercept the API\u2019s request, and change the phone number to gain access to anyone\u2019s account.<\/p>\n

The account takeover allowed the hacker to add themselves or anyone as a trusted contact to a target\u2019s profile. Plus, the bug allowed the hacker to view your family members\u2019 details including names, birth dates, phone numbers, and live locations.<\/p>\n

Thankfully, no account data was leaked. But for an application that\u2019s focused on privacy, this was a dangerous bug that put\u00a0user data at high risk. The company should\u2019ve done a more thorough security audit before launching the app.<\/p>\n<\/p><\/div>\n