Each of these apps has been downloaded between 50,000 and 5,000,000 times. The researchers said that the apps in question are things like e-banking apps, apps for city transportation, radio tuners, and other similar apps. CloudSEK says that in theory, a threat actor could build up a “army” of Twitter endpoints that would spread a scam or malware campaign by tweeting, retweeting, sending direct messages, etc. By letting this kind of information get out, the apps could let threat actors send and read tweets, send and read direct messages, and do other things. The integration is done with the help of Consumer Keys and Secrets and the Twitter API.

Several mobile apps can connect to Twitter, which lets those apps take care of certain tasks on the user’s behalf. It is possible for attackers to get entire control of Twitter accounts and exploit them for a variety of fraudulent purposes, as the API keys of thousands of Twitter apps have been discovered to be leaked.ĬloudSEK, a cybersecurity company, found that a total of 3,207 mobile apps were leaking valid Consumer Keys and Consumer Secrets for the Twitter API.

Twitter app download for samsung