This popular ‘puzzle game’ on Google Play Store with over a million downloads exposed player data
A well-liked puzzle sport on Google Play Store has reportedly leaked gamers’ progress knowledge. The sport in query is Fruits Mania: Belle’s Adventure game, the place gamers clear up puzzles in an try to avoid wasting the “poor fairies from the grasping raccoons.”
Fruit Mania: Belle’s Journey is among the hundreds of apps on the Play Retailer that onerous codes knowledge into the shopper aspect of the app. So, the probabilities of unhealthy actors gaining API keys, Google storage buckets, and database is kind of excessive, and it might result in exploit of knowledge by analysing publicly accessible info.
The sport Fruits Mania: Belle’s Journey has over 1,000,000 downloads on the Google Play retailer and is rated at 4.7-stars by over 17,000 customers.
How does it have an effect on gamers
Cybernews means that if the flaw is exploited might hamper gamers’ sport progress. Fruit Mania: Belle’s Aventure left an open database that might expose person knowledge. A 240 MB database of the puzzle sport having person IDs and sport progress is claimed to be publicly accessible. It is because Firebase was left open with none authorization.
The unhealthy actor gaining access to knowledge can wipe out any participant’s sport progress. And the motion is claimed to be irreversible, that means gamers would lose all their progress till now if no backup is there.
The developer of Fruit Mania: Belle’s Journey, Baubonis, who occurs to produce other video games, advises customers to
Fruits Mania: Belle’s Journey just isn’t the one sport from the developer, BitMango, so the developer urges gamers to stay cautious. Nevertheless, there are different video games from the developer that had a publicly accessible database or not, however it might be higher to avoid wasting your sport progress.
Extra Android apps in danger
The Cybernews analysis group analyzed over 33,000 Android apps accessible on Play Retailer, discovering greater than 1,24,000 strings leaking delicate knowledge, together with numerous API keys, Firebase dataset URLs, and hyperlinks to Google storage buckets. The susceptible apps belonged to the well being and health, training, instruments, way of life, and enterprise class.
FbTwitterLinkedin
