Our AI writing assistant, WriteUp, can assist you in easily writing any text. Click here to experience its capabilities.

EXCLUSIVE Russian software disguised as American finds its way into U.S. Army, CDC apps

View Original View Raw

Summary

This article discusses the findings of Reuters that thousands of apps in the Apple and Google stores contain computer code from Pushwoosh, a Russian software company which presents itself as U.S.-based. The Centers for Disease Control and Prevention (CDC) and the U.S. Army have removed apps containing Pushwoosh code due to security concerns. Pushwoosh has 2.3 billion devices listed in its database and has been used by U.S. government agencies, private companies and political organizations. Cybersecurity experts have warned that sensitive data collected by Pushwoosh could be obtained by the Russian government. Pushwoosh has denied any connection with the Russian government and asserted that it is a U.S. company.

Q&As

What company is behind code used in thousands of smartphone apps in Apple and Google's online stores?
Pushwoosh is behind the code used in thousands of smartphone apps in Apple and Google's online stores.

What security concerns led the US Army and Centers for Disease Control and Prevention (CDC) to remove apps containing the code?
The US Army and Centers for Disease Control and Prevention (CDC) removed apps containing the code due to potential security concerns.

What has been the reaction of companies such as Unilever, UEFA, and the National Rifle Association (NRA) to learning about the code?
Companies such as Unilever, UEFA, and the National Rifle Association (NRA) have said they were unaware of the code and have taken steps to remove it.

What legal issues could the code violate in the US?
The code could violate contracting and U.S. Federal Trade Commission (FTC) laws or trigger sanctions.

What is the extent of the data collected by Pushwoosh and how is it stored?
Pushwoosh collects user data including precise geolocation and has almost 8,000 apps in the Google and Apple app stores. The data is stored in the United States and Germany.

AI Comments

👍 The article highlights how Pushwoosh is a company that provides code and data processing support for software developers. It is also great that the U.S. Army and CDC removed Pushwoosh's code due to security concerns.

👎 It is concerning that Pushwoosh was presenting itself as a U.S. company but was actually Russian. Furthermore, the article raises privacy issues as Pushwoosh collects user data including precise geolocation, which could allow for invasive tracking at scale.

AI Discussion

Me: It's about how thousands of smartphone apps in Apple and Google's online stores contain code from a Russian technology company called Pushwoosh. The company was pretending to be based in the U.S., but the Centers for Disease Control and Prevention and the U.S. Army found out about its Russian roots from Reuters and removed the Pushwoosh software from their apps due to security concerns.

Friend: Wow, that's shocking! It sounds like Pushwoosh was trying to gain access to data from U.S. government agencies and private companies. It could be a violation of U.S. Federal Trade Commission laws or trigger sanctions.

Me: Yeah, and the implications could be more serious than just a violation of laws. Cybersecurity experts said that storing data overseas wouldn't prevent Russian intelligence agencies from compelling a Russian company to cede access to that data. This could potentially put sensitive information at risk of being accessed by Russian authorities.

Action items

Research the laws and regulations related to contracting and U.S. Federal Trade Commission (FTC) laws to ensure compliance.
Review the security protocols of any third-party vendors used to ensure data is not being mishandled.
Develop a policy for vetting any software code used in applications to ensure it is not from a foreign source.

Technical terms

Pushwoosh: Pushwoosh is a technology company that provides code and data processing support for software developers, enabling them to profile the online activity of smartphone app users and send tailor-made push notifications from Pushwoosh servers.
Centers for Disease Control and Prevention (CDC): The Centers for Disease Control and Prevention (CDC) is the United States' main agency for fighting major health threats.
National Training Centre (NTC): The National Training Centre (NTC) is a major battle training center in the Mojave Desert for pre-deployment soldiers.
Federal Trade Commission (FTC): The Federal Trade Commission (FTC) is a U.S. government agency that cracks down on unfair or deceptive practices affecting U.S. consumers.
Roskomnadzor: Roskomnadzor is Russia's state communications regulator.
Appfigures: Appfigures is an app intelligence website.
Confiant: Confiant is a firm that tracks misuse of data collected in online advertising supply chains.
Chatham House: Chatham House is a London think tank.