MILLIONS of Android and iPhone users have been warned that Russian search engine Yandax could steal their data.
Many people are concerned about this data being shared with the Russian government as tensions rise between Russia and the US.
Russia’s invasion of Ukraine prompted the US and other Western countries to impose invisible sanctions on the country.
Companies have also suspended or closed operations in Russia to protest the invasion.
Against this background, one of the Russian Internet search companies, Yandax, has the opportunity to collect user data worldwide BGR.com
Many fear the company could either use this data to track people or share it with the Russian government and its spy agencies, it adds.
Users who do not directly use Yandax’s services are also at risk.
Just by downloading one of the thousands of apps using Yandax’s SDK, data can reportedly be collected without your knowledge.
The acronym SDK stands for Software Developer Kit IBM.com
Researcher Zach Edwards first discovered the data collection practices. Edwards analyzed Yandax’s code while participating in an app audit campaign.
His discoveries were then verified by four independent experts who ran tests for him The Financial Times.
The company confirmed that it collects device, network and IP addresses from smartphone users and stores the data on servers in Russia and Finland, according to the article.
They also admitted that it was possible to track someone using this data, but also said the company couldn’t do such a thing.
Of the millions of apps available to users, about 52,000 include Yandax’s SDK.
This SDK can also be free for those who decide to build their own apps, but in return the developers want the user data, according to the site.
Gaming, messaging, location tools, and VPN apps may include this SDK.
Even apps specially decided for the people of Ukraine have it.
Many are particularly concerned about the increased security risk for these people.
The company has explained that its SDK works similarly to Google’s Firebase, where user data is only collected after a user’s consent, according to the site.
However, your SDK doesn’t need to get user permission to track location, that’s up to a developer who doesn’t need to integrate this feature unless required by law.
To determine if the apps on your phone have these capabilities, check with the developer if their app uses the AppMetrica SDK.
It is also recommended not to install any suspicious apps on your phone, even if they come from a trusted source.
We pay for your stories!
Do you have a story for The US Sun team?
https://www.thesun.ie/tech/news-tech/8599085/smartphone-users-yandax-russia-ukraine-tech/ Millions of Android and iPhone users warned that the Russian search engine Yandax could steal their data