logo

Mobile App Wall Of Shame: Tinychat For IPhone

ID: 7bb0cf3a-b781-5675-849f-6576ec213d08

STIX ID: report--7bb0cf3a-b781-5675-849f-6576ec213d08

Feed Name: Zscaler Security Research Blog

Threat Score
50/100

Date Published: 2025-04-02

Date Updated: 2026-05-01

...
...

**Tinychat (iOS)** transmits user credentials (username, password, email) in clear text during login and registration, enabling attackers on the network to sniff and take over accounts; this was demonstrated with HTTP captures and analysis using Zscaler Application Profiler (ZAP).

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.