Fitbit Spyware Steals Personal Data via Watch Face

A wide-open app-building API would allow an attacker to build a malicious application that could access Fitbit user data, and send it to any server. Kev Breen, director of cyber threat research for Immersive Labs, created a proof-of-concept for just that scenario, after realizing that Fitbit...

Neo Watch Face - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Neo Watch Face published at the 'play' market has multiple vulnerabilities...

WatchMaker Watch Face - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application WatchMaker Watch Face published at the 'play' market has multiple vulnerabilities...

Timr Face Watch Face - Dangerous filesystem permissions, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Timr Face Watch Face published at the 'play' market has multiple vulnerabilities...

Watch Face PlkaUp Android Wear - Dynamic Code Loading, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Watch Face PlkaUp Android Wear published at the 'play' market has multiple vulnerabilities...

Watch Face market - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Watch Face market published at the 'play' market has multiple vulnerabilities...

Casual Printed Watch Face Free - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Casual Printed Watch Face Free published at the 'play' market has multiple vulnerabilities...

Stars Watch Face - Suspicious files, Unsafe deleting, WebView JavaScript enabled vulnerabilities

HackApp vulnerability scanner discovered that application Stars Watch Face published at the 'play' market has multiple vulnerabilities...

SPACEY Free Watch Face - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SPACEY Free Watch Face published at the 'play' market has multiple vulnerabilities...

Earth Live Watch Face - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Earth Live Watch Face published at the 'play' market has multiple vulnerabilities...

Radii Watch Face - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Radii Watch Face published at the 'play' market has multiple vulnerabilities...

Everyday Watch Face - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Everyday Watch Face published at the 'play' market has multiple vulnerabilities...

Mister Schmidt Watch Face Lite - Exported components, External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Mister Schmidt Watch Face Lite published at the 'play' market has multiple vulnerabilities...

BWF - Binary Watch Face - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application BWF - Binary Watch Face published at the 'play' market has multiple vulnerabilities...

Angry Birds Aviator Watch Face - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Angry Birds Aviator Watch Face published at the 'play' market has multiple vulnerabilities...

RUGGED2 Watch Face - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application RUGGED2 Watch Face published at the 'play' market has multiple vulnerabilities...

Watch Face: Scooter - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Watch Face: Scooter published at the 'play' market has multiple vulnerabilities...

Nicole Miller Watch Face - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Nicole Miller Watch Face published at the 'play' market has multiple vulnerabilities...

Rubik's Watch Face - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Rubik's Watch Face published at the 'play' market has multiple vulnerabilities...

Lulu Frost Watch Face - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Lulu Frost Watch Face published at the 'play' market has multiple vulnerabilities...