Insecure Internal Storage in Android
Summary: Palo Alto Networks researcher Claud Xiao presented at HITCON on using Android Debug Bridge backup and restore functions to reach data in Android's internal storage, a technique affecting 85.8% of active Android devices as of July 7. Of 12,351 Google Play apps with more than 500,000 installations, only 556 disable the backup system and 156 use a BackupAgent, leaving 94.2% with no restrictions on backing up internal storage data.
Key Takeaway: Most developers store credentials in internal storage without extra encryption and rely on the sandbox alone, so an attacker who clears the ADB hurdles - USB access, debugging enabled, screen lock bypass, and a simulated button press - walks away with usernames and passwords from the large majority of installed apps.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026