Table of contents:
Do you have a Xiaomi mobile? Your device may be at risk from a security flaw found in the terminals. This flaw is found in the Antivirus app of the company's terminals and can be a very important risk for your data. The company is likely to release a patch in the next few days, so keep an eye out for updates to your device.
The vulnerability has been found by Check Point, a company that is responsible for investigating security problems and viruses. In this case, the failure focuses on one of the apps that arrives pre-installed on Xiaomi phones . T he Antivirus application, also called Guard Provider or 'Security', makes use of different antivirus that supposedly protect the device against malware.
UPDATE: Xiaomi has contacted us to explain that it has released a patch to fix this problem on computers affected by the vulnerability.
The app uses an HTTP connection, not
What is this security flaw doing? It can infect your device with malware that penetrates the personal and private data of your terminal, and may even steal passwords. The problem is that the application uses an HTTP connection, which is not secure. Therefore, if a hacker is connected to your same Wi-Fi network, they can access your device without any problem. In this case they would use the 'man in the middle' method, a way to enter the computer and access the data that is sent to the source without the user noticing.
One of the most serious problems of this security flaw is that it is in an application that is already installed on Xiaomi terminals. Therefore, it could affect millions of users. The Chinese company will release a global update soon. This will come with a security patch that will correct the vulnerability. This has been acknowledged by Xiaomi when announcing that they are aware of the discovered fault and that they are already working with their Avast provider to solve the problem.
It is recommended that you be very attentive to new versions and update as soon as possible. As an interim security measure, try not to connect to a public Wi-Fi network and change your passwords frequently.