Image copyright
Getty Images
Many older Android devices no longer receive security updates, which puts them at risk
More than a billion Android devices are at risk of being hacked because they are no longer protected by security updates, watchdog Which one? suggested.
The vulnerability could expose users around the world to the danger of data theft, ransom demands, and other malware attacks.
Anyone using an Android phone released in 2012 or before should be particularly concerned, he said.
Which? says he was not reassured by Google’s response.
And the tech giant did not respond to requests for comment from the BBC.
Google’s own data suggests that 42.1% of Android users worldwide are using version 6.0 of its operating system or an earlier version.
According to the Android security bulletin, no security patch was issued for the Android system in 2019 for versions lower than 7.0.
Extrapolate this data, which ones? concluded that two out of five Android users worldwide are no longer receiving security updates.
He then tested five phones:
- a Motorola X
- a Samsung Galaxy A5
- a Sony Xperia Z2
- LG / Google Nexus 5
- a Samsung Galaxy S6
Which? asked AV Comparatives antivirus lab to infect them with malware – and it worked on all phones, creating several infections on some.
He said he shared his findings with Google, but the tech giant “has not assured that he has plans in place to help users whose devices are no longer supported”.
The watchdog wants Google and others to provide much more transparency over the duration of updates for smart devices.
And he said the mobile industry needs to do a better job of providing assistance to customers on their options once security updates are no longer available.
Kate Bevan, which one? The editor-in-chief of IT said: “It is very concerning that expensive Android devices have such a short lifespan before losing security, leaving millions of users at risk of serious consequences if they are victims of hackers.
“Google and the phone manufacturers need to be frank about security updates – with clear information about how long they will take and what customers should do when they miss.
“The government must also move forward with planned legislation to ensure that manufacturers are much more transparent about security updates for smart devices – and their impact on consumers.”
How to check if your phone is vulnerable and what to do
Image copyright
Samsung
The Samsung Galaxy S6 was released in November 2015
- If your Android device is more than two years old, check if it can be updated to a newer version of the operating system. If you are using a version earlier than Android 7.0 Nougat, try to update via Settings> System> Advanced system update
- If you can’t update, your phone may be hacked, especially if you’re using a version of Android 4 or lower, if so, be careful when downloading apps outside of Google Play store
- Also beware of suspicious SMS or MMS
- Back up data to at least two locations (a hard drive and a cloud service)
- Install mobile antivirus through an app, but keep in mind that the choice is limited for older phones
