SHAREit is an Android app available on the Google Play store that allows Android users to quickly and easily share different types of files between mobile devices. While the app allows the transfer and download of various file types, such as Android Package (APK), the vulnerabilities related to these features are most likely unintended flaws.”Īnyone interested in the technical details of the flaws and the resulting exposure can read all about it here. In the past, vulnerabilities that can be used to download and steal files from users’ devices have also been associated with the app. They can also potentially lead to Remote Code Execution (RCE). The vulnerabilities can be abused to leak a user’s sensitive data and execute arbitrary code with SHAREit permissions by using a malicious code or app. In their report, Trend Micro said, “We discovered several vulnerabilities in the application named SHAREit. Trend Micro posted about this on their blog on Monday. What is Going On?Īccording to Threatpost, the flaws allow attackers to “hijack app features or overwrite existing files to execute malicious code, or launch man-in-the-disk (MiTD) attacks on people’s devices, researchers discovered.”Įven though researchers at Trend Micro alerted the app developer months ago about the dangerous vulnerabilities, they have yet to patch them. However, it is full of bugs that expose users to malware and spyware. In fact, it is one of the most popular apps on the Google Play store. The popular SHAREit Android app has been downloaded more than one billion times.

Ushareit app