Sunbird App Temporarily Shut Down Due to Security Concerns

https://icaro.icaromediagroup.com/system/images/photos/15893226/original/open-uri20231122-17-adcrmo?1700690164
ICARO Media Group
News
22/11/2023 21h54

Article:
Sunbird, a messaging app designed to deliver iMessages to Android devices, has been temporarily shut down due to security concerns. The app recently sent out a notification to users, informing them about the shutdown. The decision to pause Sunbird's usage comes in light of security issues raised by the Nothing Chats iMessage app.

Sunbird, which was introduced in late 2022, aimed to unify various messaging apps into a single platform, including iMessage, SMS/MMS, Facebook Messenger, and WhatsApp. The app allowed Android users to send messages to iPhone users as iMessage "blue bubbles" instead of green text messages.

However, questions arose regarding the claims made by Sunbird regarding end-to-end encryption and confidential messaging for Android to iPhone conversations. The security concerns led to the suspension of Sunbird's service. The investigation into these issues arose after Sunbird partnered with smartphone manufacturer Nothing to launch the "Nothing Chats" messaging app, which promised iMessage compatibility.

An investigation by Text.com revealed that Sunbird was sending users' Apple ID credentials to a Sunbird server for authentication using a virtual machine running macOS. This process raised concerns as the credentials were being sent over unencrypted HTTP. As a result, vulnerabilities that could allow an attacker to intercept Sunbird messages and media attachments were discovered.

Furthermore, it was discovered that Sunbird employees had direct access to a platform that stored message contents, contact information, and attachment URLs. More than 630,000 media files, including images, videos, and PDFs, were found stored by Sunbird.

In response to the security concerns, Nothing Chats was pulled from the Google Play Store, and Sunbird claimed that its service was secure and that Apple ID credentials and messages were always encrypted. However, it was later determined that these claims were inaccurate.

Sunbird has not provided any further updates or statements regarding the situation, aside from the initial notification sent to users. The handling of the security concerns has raised questions about Sunbird's ability to address and resolve these issues in a competent manner.

Users of both Sunbird and Nothing Chats are advised to change their Apple ID passwords, remove the apps from their devices, and take additional steps to ensure the removal of their data. If the apps are reinstated in the future, caution is advised when considering whether to download them.

As of now, the future of Sunbird remains uncertain, and users will have to wait for more updates regarding the app's security measures and potential relaunch.

The views expressed in this article do not reflect the opinion of ICARO, or any of its affiliates.

Related