{"id":49294,"date":"2022-11-15T01:30:11","date_gmt":"2022-11-15T01:30:11","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/russia-based-pushwoosh-tricks-us-army-and-others-into-running-its-code-for-a-while\/"},"modified":"2022-11-15T01:30:11","modified_gmt":"2022-11-15T01:30:11","slug":"russia-based-pushwoosh-tricks-us-army-and-others-into-running-its-code-for-a-while","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/russia-based-pushwoosh-tricks-us-army-and-others-into-running-its-code-for-a-while\/","title":{"rendered":"Russia-based Pushwoosh tricks US Army and others into running its code \u2013 for a while"},"content":{"rendered":"

US government agencies including the Army and Centers for Disease Control and Prevention pulled apps running Pushwoosh code after learning the software company \u2013 which presents itself as American \u2013 is actually Russian, according to Reuters.<\/p>\n

Pushwoosh is a software company that provides code and data analysis for developers so they can automate custom push notifications based on smartphone users’ online activity. This is the same kind of tracking data \u2013 aka commercial surveillance<\/a> \u2013 that major US tech companies like Google<\/a> and Meta<\/a> have come under fire for collecting by privacy advocates and watchdog agencies alike. <\/p>\n

However, in this case, it’s a Russian company collecting and processing this data. That means in addition to regular old privacy concerns, there’s also national security<\/a> worries on the line \u2013 especially when the US military uses the code.<\/p>\n