Multiple unpatched vulnerabilities have been discovered in SHAREit, a popular app with over one billion downloads, that could be abused to leak a user's sensitive data, execute arbitrary code, and possibly lead to remote code execution.
"When the user clicks this download URL, Chrome will call SHAREit to download the SAPK from ," Duan explained. "Since it supports the HTTP protocol, this SAPK can be replaced by simulating a man-in-the-middle (MitM) attack."
SHAREit has courted a fair of security shortcomings in the past. In February 2019, two vulnerabilities were detected in the app that could allow attackers to bypass authentication, download arbitrary files, and pilfer files from Android devices.
SHAREit has been downloaded by more than 500 million users, and has changed the way we transfer files. Initially launched in the year of 2013, SHAREit app has now become immensely popular across all platforms.
Shareit is a popular file-sharing app that allows users to transfer files between devices quickly and easily. However, like any other app, it is not without its share of issues. In this article, we will explore some common problems encountered during the Shareit app download process and provide expert solutions to help you overcome them.
One of the most frustrating issues when downloading the Shareit app is slow download speeds. This can be caused by a variety of factors, including a poor internet connection or server overload. To address this problem, there are several steps you can take.
If slow download speeds persist, try switching servers within the Shareit app. Sometimes certain servers may be overloaded due to high demand, resulting in slower download speeds. By selecting an alternative server location, you may experience improved performance.
Another common issue users encounter during the Shareit app download process is installation errors. These errors can prevent the successful installation of the app on your device and can be quite frustrating to deal with.
Compatibility issues can also arise during the Shareit app download process, especially when attempting to install it on older devices or outdated operating systems. If you encounter compatibility issues, there are a few steps you can take to overcome them.
Lastly, one common mistake users make when encountering difficulties with Shareit app download is downloading from untrusted sources. It is crucial to only download apps from official sources such as Google Play Store or Apple App Store to ensure safety and reliability.
Trend Micro says it has found "several" security flaws in the popular Android app ShareIt. ShareIt has been downloaded over a billion times from the Play Store, and, according to App Annie, was one of the 10 most globally downloaded apps in 2019. The app was originally developed by Lenovo (it has since spun off into its own company) and for a time was pre-installed on Lenovo phones.
ShareIt's incredible success of a billion Android downloads and 1.8 billion users worldwide (there are also iOS, Windows, and Mac apps) has led to what looks like an incredible amount of app bloat. The app was considered one of the best for local file sharing, but today the Play Store listing shows an app that offers "Infinite Online Videos," "Tens of millions of high-quality songs," "GIFs, Wallpapers & Stickers," a "popular" media section that looks like a social network, a game store, a retail movie download section, COVID-19 check-in activity and case statistics, and what looks like its own form of currency. ShareIt's website (which, just like the app, does not default to HTTPS) says the service is "now a leading content platform" and popular in Southeast Asia, South Asia, the Middle East, Africa, and Russia.
ShareIt also comes with its own Android app installer. With its private storage no longer being "private," it repeats the same mistakes we saw in Epic's Fornite installer. It downloads app install files to world-readable storage, where they are vulnerable to a "Man-in-the-disk" attack. App install files need to be protected in private storage before they are installed, but in public storage, the install package could be swapped out as soon as it is downloaded but before install time. Then the user thinks they're installing the good app they just downloaded, but it's actually an imposter malicious app.
A whole extra problem is that ShareIt's game store can apparently download app data over unsecured HTTP, where it can be subject to a man-in-the-middle attack. ShareIt registers itself as the handler for any link that ends its domains, like "wshareit.com" or "gshare.cdn.shareitgames.com," and it will automatically pop up when users click on a download link. Most apps force all traffic to HTTPS, but ShareIt does not. Chrome will shut down HTTP download traffic, so this would have to be done through a Web interface other than the main browser.
With SHAREit you can also download videos and photos directly from the Internet onto your device with downloader, manage files on your phone with file manager. Transferring files from Mobile to PC and vice versa is now faster and easier.
Freeware programs can be downloaded used free of charge and without any time limitations. Freeware products can be used free of charge for both personal and professional (commercial use).
This license is commonly used for video games and it allows users to download and play the game for free. Basically, a product is offered Free to Play (Freemium) and the user can decide if he wants to pay the money (Premium) for additional features, services, virtual or physical goods that expand the functionality of the game. In some cases, ads may be show to the users.
This software is no longer available for the download. This could be due to the program being discontinued, having a security issue or for other reasons.
760c119bf3