Broadcast Storm Attack

[thygessen353]

Plan

Premium

Country

Brazil

Device

Gome U7

Operating System

Android 7

My Question or Issue

Hi, good night

I come to indicate a possible vulnerability in the spotify app for android. I did not touch my phone between 5:30 pm and 6:30 pm, but when analyzing the firewall I found that I had suffered an attack attempt called a broadcast storm, in which my device made several broadcast requests to my firewall. I saw that it was the spotify app, because when doing a search the port used (57621) was the same used by the service for sending data (except that my cell phone got very hot in the last week). When deleting the application, I did not suffer this attack anymore and even my cell phone did not overheat, and it was used as a backdoor for hacking into my computer. Below is my firewall log:

[EthanS1 · Accepted solution]

Hey @thygessen353!

Thanks for posting in the Community, I've passed this across to some of the teams behind the scenes at Spotify for this to be logged and investigated. As you suspect someone has accessed your account I'd recommend following the steps on securing your account here.

I'd also recommend checking out this Support Article on the safeguards Spotify recommends to secure your account and check regularly.

Keep safe,