Users of Popular Android Applications Risk Getting Compromised Via Highly Privileged Device Migration Tools

CloudSEK researchers discovered that default device-migration/clone utilities on ColorOS-based phones (Realme/Oppo/OnePlus) can copy app data and session credentials to a new device without invalidating session cookies, enabling account takeover—including bypassing WhatsApp 2FA—if an attacker gains temporary physical access to an unlocked phone; the report provides a PoC, a list of affected apps, impact analysis, and mitigations (lock device, 2FA, review permissions).