Android security: Vulnerabilities found in data transfer apps and new AI fraud protections

Researchers from TU Graz and the Center for Secure Information Technologies A-SIT in Vienna have identified critical security vulnerabilities in widely used Android data transfer applications. These tools, used by major manufacturers including Samsung (Smart Switch), Google (Switch), Huawei (Phone Clone), Oppo (Clone Phone), Xiaomi (Mi Mover), Vivo (EasyShare), and Honor (Device Clone), can allow attackers within Wi-Fi range to intercept private data such as photos, contacts, SMS, and login credentials during a smartphone migration.

In response to evolving mobile threats, Google has announced new security features for Android to combat fraud. The company reported that its AI-powered detection in Phone by Google and Google Messages already flags over 5 million suspicious calls and texts monthly. New initiatives include an enhanced protection mode in Google Messages that utilizes Cloud Gemini to scan conversations with unknown senders for fraudulent patterns, as well as on-device Gemini Nano models to analyze suspicious web links.

These security updates and protections are being rolled out to various devices, including Pixel and Galaxy series smartphones, with plans to expand support to other manufacturers like Motorola and OnePlus.