UC Browser app abuses and exposed 500 million users
ID: 467d8e42-93be-5299-908d-de67a7cb2b9b
STIX ID: report--467d8e42-93be-5299-908d-de67a7cb2b9b
Feed Name: Zscaler Security Research Blog
Threat Score
**Executive Summary:** The report by Zscaler's ThreatLabZ documents that UC Browser and UC Mini (installed hundreds of millions of times) downloaded a third-party APK (the 9Apps store) over unsecured HTTP and wrote it to world-readable external storage, creating opportunities for man-in-the-middle interception, tampering, and arbitrary payload installation; Zscaler reported the behavior to Google, which confirmed the policy violation and prompted remediation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.