Are there any security risks in the applet in WeChat?

Small and medium-sized programs on WeChat mainly have the following security problems: 1, authorization hides risks; 2. Hidden dangers of fishing and stealing secrets; 3. The cottage applet is flooding.

Authorization to hide risks

As a bridge between application developers and users, WeChat applet's information interaction is forwarded through WeChat platform, so all data requested and stored by the network can be obtained through WeChat. Some small program merchants obtain user information by setting "login authorization", thus "fooling" user authorization and infringing on user rights and interests. Users report that after logging in some small programs, they are often prompted to bind their mobile phone numbers, otherwise they can't continue browsing the web. However, once occupied, users will continue to receive advertising calls, which seriously disrupts their lives.

Hidden dangers of stealing secrets from fishing

With the continuous promotion of applets, everyone can participate in the process of making applets in the future. Once an illegal enterprise develops a phishing WeChat applet, adds a Trojan horse to the visited page and tries to bypass the WeChat review, it may lead to user information leakage and property loss.

Overflow of shanzhai programs

The essence of applets is web page interaction, and their communication is easier to be cracked. In addition, the source code of applets is difficult to be confused and encrypted, which leads to a large number of fake applets. It used to take a week to develop this fake application, but now this fake application can be launched in a day or two. In addition, applets can spread through "fission" and "social enjoyment", which usually leads to "fake" spreading faster than "real" and more users. ?

How to prevent the security risks of WeChat applet

1. Beware of binding information traps? ?

Beware of various authorization behaviors such as "obtaining location information", "reading short messages", "accessing address book", "connecting to network" and "using camera". If the relevant authorization has been passed, the applet can be closed after use. For small programs that need to input personal sensitive information and bind mobile phone numbers, special attention should be paid to their authenticity and reliability to avoid online fraud, harassment and promotion.

2. Do a good job of screening?

In order to prevent the information security risks of WeChat applets, we should first pay attention to using "genuine" and stay away from "counterfeiting". For example, users can enter applets, check their operating companies and related WeChat official account, and identify applets. In the face of small programs with the same function, try to use big brands or brands that you are familiar with and use. Don't scan the code into applets at will, and don't use the function of "nearby applets" at will.