Digital Surveillance in Your Pocket: An Audit of 11 Popular Russian Android Apps

An author on Habr conducted an audit of 11 popular Russian Android applications, including banking services, marketplaces, and government apps. The research methodology included static analysis (SAST) and log monitoring (logcat). The audit uncovered 237 vulnerabilities of varying severity. Key findings include the use of outdated signature keys in several apps, the presence of numerous trackers in popular social networks, and potential privacy risks. Notably, the 'Gosklyuch' app demonstrated the best security results among all tested samples. The author emphasizes the importance of regular security audits to protect user data, noting that even major market players make critical errors in implementing security measures. The article urges developers to pay more attention to security during the design and testing phases of mobile products to minimize the risks of data leaks and unauthorized data collection.