Digital Forensics Dispatch

Olympic Games App MY2022, Hacked by Researchers

January 20, 2022

Sarah Coble, of Infosecurity Magazine, recently published an article about cybersecurity researchers in Canada that found a huge flaw in the MY2022 Olympic Games app. My2022 is designed for attendees to use during this year’s Winter Olympic Games. With the winter games rapidly approaching on February 4^th, it is crucial that this serious flaw is fixed as soon as possible.

The Canadian researchers said that the flaw allowed encryption that protects the users’ voice audio and file transfers to be “trivially sidestepped.” In addition, the researchers have warned that health customs forms that transport passport details, demographic information, and medical and travel history are vulnerable as well. The server responses can also be altered as hackers can display fake instructions to users.

The Citizen Lab researchers reported their findings and said, “While the vendor did not respond to our security disclosure, we find that the app’s security deficits may not only violate Google’s Unwanted Software Policy and Apple’s App Store guidelines but also China’s own laws and national standards pertaining to privacy protection, providing potential avenues for future redress.”

Furthermore, The German Olympic Sports Confederation stated that it is mandated for travelers to download MY2022 if they are looking to enter the People’s Republic of China to attend the 2022 Winter Olympics. They also added that without having the app, immigration into China will not be allowed.

Email:    Phone: 703.359.0700
Digital Forensics/Cybersecurity/Information Technology
https://senseient.com/services/digital-forensics