EngageLab SDK Flaw Exposed 50M Android Users Including 30M Crypto Wallet Installs
Information has surfaced regarding a security flaw that has been fixed in the EngageLab SDK, a popular third-party Android software development kit (SDK) that may have endangered millions of users of cryptocurrency wallets.
According to a research released today by the Microsoft Defender Security Research Team, this vulnerability enables apps running on the same device to go beyond the Android security sandbox and obtain unauthorized access to personal information.
According to its website, the push notification service provided by the EngageLab SDK is intended to provide "timely notifications" depending on user behavior that developers have already monitored. The SDK provides a means of delivering customized alerts and promoting real-time interaction once it is incorporated into an...