Conan Troutman · Mar 28, 2012 at 04:00 pm

Samsung Users Bewildered By Random Russian E-Mail Application

A few days ago some users of certain Samsung Galaxy devices began to notice that within the pending updates in the Play Store (that name still feels wrong), was a strange app that they had not installed and the description of which was entirely in Russian. The application was entitled МТС Мобильная Почта, and has since been removed. What’s more, users were unable to actually find this app on their device to uninstall it. Understandably those affected were somewhat concerned about this, fearing that they had fallen victim to some kind of malware. Thankfully it wasn’t, and the MTC application itself is nothing more than an E Mail client for Russia’s Mobile Telecom Systems published by the developers OJSC.

Shortly after the issue was reported, it was discovered that uninstalling certain Samsung specific apps would prevent this MTC application from being listed under “My Apps” or the pending updates.

As identified by the nice folks at The Verge, it turns out that the E Mail application included in stock Samsung firmwares was given the “unique” application name com.seven.Z7—the same unique name as the MTC app. Apparently Seven, who used to develop E Mail services for WinMo but now offer their applications as white labels to third parties, made the mistake of giving the two applications the same name and certificate, thereby confusing the Play Store. Obviously the Samsung Mail client was not listed on Google Play, whereas the MTC app was. This caused many users to see this fictitious update for an app they did not have installed.

Anyone who was affected by this issue should already have seen it resolve itself thanks to action taken by Google, however if for any reason you are still seeing this app then the simplest solution seems to be simply clearing the Google Play’s cache and/or data. There is no longer any need to remove your Samsung specific applications, as the root of the issue is now resolved.

This does of course bring to light a possible hole in the security of the Play Store. Although this has happened before, it was not on such a large or widely reported scale. I would certainly imagine that Google will be looking to make some adjustments and make sure that this kind of error is no longer possible. Although reproducing it with malicious intent would not be easy, as the same unique app identifier and matching certificate would be required. And to be fair to Google, considering that the Samsung Mail client was not actually listed on the Play Store, technically there was no duplication of the unique ID that they could have been aware of. It still seems that there’s room for improvement here though, as Google’s rather lax policy of app screening has repeatedly come under close scrutiny. While they are not at fault here, that wouldn’t really matter if this were a malicious app rather than a simple mix up.


_________
Want something on the XDA Portal? Send us a tip!

Conan Troutman

Conan Troutman is an editor on XDA-Developers, the largest community for Android users. Senior Moderator, Newswriter, Recovering Meme Addict. View Conan Troutman's posts and articles here.
Pulser_G2 · May 28, 2015 at 05:52 pm · 2 comments

Devs Beware – Automatic Backup Privacy Risks

One new feature of "Android M" (speculation on potential names welcomed on the back of a postcard) which gained little attention at Google I/O so far was the introduction of a new, automatic backup feature for application data. Obviously, it's still early days yet, though you can download the developer preview (if you're brave!), so we can't be sure of the final implementation, but there are a few gotchas here that developers should be aware of. Automation The first is...

XDA NEWS
Mathew Brack · May 28, 2015 at 05:19 pm · 2 comments

Android M to Bring New App Drawer

It has now been seen that Android M will receive a new app drawer as part of the stock launcher. The first four icons you will see in your drawer now will be automatically updated to represent your recently used applications. Whether or not this will be directly based on those apps seen in your recent apps menu or uses a combination of that and your most frequently used apps remains to be seen. Below this is the start of a standard...

XDA NEWS
Emil Kako · May 28, 2015 at 04:07 pm · 4 comments

Which IO Announcement Are You Most Excited About?

The keynote we had all been waiting for has just ended and it's time to enjoy all the new Android goodies! Google announced tons of awesome new stuff today so there is definitely a lot to check out. Let us know which Google IO announcement you're most excited about and why in the comments below.

DISCUSS
Share This