In the Android operating system, manufacturers of corresponding devices often deliver integrated and pre-installed apps, as well as connections to third-party services (Twitter, Facebook, etc). Users often cannot remove these apps on their own. This increases the range of possible attacks on the Android operating system. In many cases, direct connections to third-party services are also undesirable in organisations.
Overall, the deep integration of third-party apps and interfaces increases the risk that a device will be infected with malware or that an attacker may gain unauthorised access to confidential information.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)