Mobile App Wall Of Shame: Quikr

Quikr's Android (consumer version ~7.42) and iOS (version 2.8) mobile apps were found to send sensitive user data — including user IDs, passwords and mobile numbers — in cleartext over HTTP during registration and login. Traffic captures and Zscaler Application Profiler (ZAP) screenshots confirm the exposure; the issue affects millions of Android users and risks credential interception. The report recommends mitigation measures such as using one-time passwords and unique credentials to reduce impact.