Viber vulnerability allows to bypass Android-smartphone lock

A curious vulnerability in Viber was discovered by researchers from Bkav Internet Security. Using it, an attacker can very easily bypass the blocking of an Android phone, and it does not need any special skills or equipment — you need to know the person’s number and just a couple of messages.

In fact, Viber initially, when installing, asks permission to disable the lock screen, without this it simply will not be installed. This, and, frankly, ill-conceived security system of the application itself, leads to the situation shown in the video:


')
Viber already has more than 50 million downloads on Android, it is one of the most popular VoIP clients and instant messengers on the platform.

The developers have been notified of the problem and have already released a fix . In addition, if the update is not yet available, Viber users can simply turn off notifications.