Cyber security firm Wandera has found that over 20 file conversion applications on iOS are not encrypted, putting users’ shared documents at risk.
The 23 applications reported from Wandera are used by over 3 million users all over the world and have been developed by a single software house, Cometdocs. These apps are for convert documents into different formats, such as Word to PDF or PDF to PowerPoint
The problem is that the conversion process is managed by a Cometdocs server, with the original documents that they are sent without any form of encryption.
The apps also allow you to access the most popular file hosting services, including Gmail, iCloud, DropBox, Google Drive, OneDrive or Box, to recover all the files stored by the user. Alternatively, the user can choose to directly upload a file from his device.
Since all the files are transferred to the company’s servers without any protection, however, there are potential risks for users. An attacker could easily access these files while sniffing traffic on the same Wi-Fi network.
Wandera has contacted the developer three times in the past three months but has not received a response.
Here is the complete list of apps:
- Audio Converter by Cometdocs – Convert Audio Files
- Video Converter – Convert Video Files
- Compress PDF – Make PDF Smaller
- PDF Merge – Combine PDF Documents
- JPG to PDF Converter
- XPS to PDF Converter – Convert XPS files to PDF
- Save as PDF – from Anywhere – Convert Text, Word, Excel, OpenOffice, LibreOffice and other files to PDF – All in one PDF Converter
- Image to Text Converter – OCR
- Image to Excel Converter – OCR
- Image to Word Converter – OCR – Convert photos to Word documents
- PDF Creator – PowerPoint edition
- PDF Creator – Word edition
- DOC to DOCX
- DOCX to DOC
- PDF to AutoCAD Converter – Convert PDF to DWG
- PDF to Text Converter with OCR
- PDF to PowerPoint Converter
- PDF to Excel Converter – OCR
- PDF to JPG Converter (JPEG)
- Publisher to PDF Converter
- PDF Converter Ultimate – All In One Converter
- PDF to Word Converter with OCR
- MP3 Converter – Convert Videos and Music to MP3
If you use one of these applications, you find an alternative (like the excellent one Document Converter) or avoid sharing documents with sensitive information.