Flashlight apps could be your phone's biggest security risk

Flashlight apps could be putting your Android phone at risk of coming under cyberattack, new research has claimed.

A report from Avast found that Android flashlight apps request an average of 25 permissions, such as audio recording and contact information, to apparently function properly.

This included one app installed over a million times asking for 76 seperate permissions upon being installed.


Avast's research examined 937 flashlight apps that were once available or are currently available on the Google Play Store.

Out of this collection, the company found that 408 request 10 permissions or less, 267 request between 11 and 49 permissions, and 262 apps request between 50 and 77 permissions.

“Some of the permissions requested by the flashlight applications we looked into are really hard to explain," says Luis Corrons, Security Evangelist at Avast. He noted that 77 apps requested the right to record audio, 180 asked to read contact lists, and 21 requested to write contacts.

Avast says that its research highlights something of a grey area when it comes to app permissions. Not all of the apps will have been trying to carry out malicious activity, but some developers do include ad software development kits (SDKs) into their code to earn money from advertisers.

“The flashlight apps we looked into are just an example of how even the simplest apps can access personal data, and it’s often not just the app developers that gain access to data when users download an app, but the ad partners they work with to monetise. Developer privacy policies are unfortunately not inclusive, as in many cases, further privacy policies from third-parties are linked within them.”

How It works

Search Crack for

Latest IT News

Sep 22
Chrome is the most widely-used browser in the world, but many people seem to use it begrudgingly. Should Google be worried?
Sep 22
Sets was going to usher in a massive change to the fundamental way Windows works, and it could still be happening…
Sep 21
Several nifty touches have arrived, although not everyone can get them yet, at least according to chatter online.
Sep 20
Independent security researcher Andy Michael has discovered three VPN apps and one antivirus app that are serving users full-screen popup ads.
Sep 20
Surfshark has released a new secure DNS resovler to help Android users protect their privacy online.
Sep 20
Google unveiled a number of new Google Pay initiatives at its annual event in New Dehli.
Sep 19
If you've got creative work to show off on the web, you need to be aware of the best site builders to help.

Latest cracks