{"id":75684,"date":"2025-04-04T08:38:32","date_gmt":"2025-04-04T06:38:32","guid":{"rendered":"https:\/\/magazin.tu-braunschweig.de\/?post_type=kb_presseinformation&p=75684"},"modified":"2025-04-04T08:38:32","modified_gmt":"2025-04-04T06:38:32","slug":"hytrack-could-spy-on-android-users","status":"publish","type":"kb_presseinformation","link":"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/","title":{"rendered":"\u2018HyTrack\u2019 could spy on Android users"},"content":{"rendered":"

Researchers at Technische Universit\u00e4t Braunschweig have discovered a new method of tracking users on the internet. This involves transferring tracking, as we already know it from website tracking, to Android apps. The method, which the scientists call \u2018HyTrack\u2019, could enable advertisers to track users across different apps and the web browser. They have published their research in a paper that they will present at the \u2018USENIX Security 2025\u2019 conference in Seattle, USA, in August 2025.<\/p>\n

\"\"<\/a>

\u2018HyTrack\u2019 could enable advertisers to track users across different apps and the web browser. Credits: Kristina Rottig\/TU Braunschweig<\/p><\/div>\n

When we visit websites, read articles online and interact with advertisements, our activities are constantly being tracked. Companies and website operators collect data on users’ online behaviour through web tracking. Tracking through cookies or pixel tags helps website operators to better understand their visitors, for example, to make websites more user-friendly, but also to personalise advertising through movement profiles.<\/p>\n

While proponents of tracking point to customised content and an improved user experience, privacy advocates warn of the risks to privacy. Professor Martin Johns, head of the Institute for Application Security at TU Braunschweig, also warns of this and a new type of tracking: \u2018\u2019HyTrack’ is a major threat to data protection and user privacy. But the good news is that we seem to have discovered the technology before the tracking and advertising industry. In three large-scale studies and one qualitative study, we have not yet been able to find \u2018HyTrack\u2019 in the wild.”<\/p>\n

How does HyTrack work?<\/h3>\n

The tracking method is based on a new browser feature \u2013 custom tabs. These allow special browser windows to be opened directly in an app that uses the same storage and session state as the regular smartphone browser. This allows users to remain logged in to websites, for example, even when accessing them via different apps. What was intended as a convenience feature can, however, be misused for questionable tracking purposes.<\/p>\n

The method discovered by the researchers takes advantage of the fact that custom tabs share the browser’s cookie storage. This allows a tracking company to assign an identifier (ID) to the user \u2013 independently of the Google advertising ID (Google AD-ID), which enables app developers to measure user behaviour across different media sources. The advertising ID can be reset and deleted by users.<\/p>\n

Tracking method difficult to shake off<\/h3>\n

Particularly worrying: \u2018\u2019HyTrack\u2018 can even recover after a browser memory wipe or a reinstallation of affected apps,” says Malte Wessels, research associate at the Institute for Application Security and first author of the study. “If an app uses a special variant of custom tabs known as ‘Trusted Web Activities’, these open in full-screen mode \u2013 keeping the tracking hidden.” The researchers tested the method in ten different browsers and on six Android versions. The result: all browsers that support custom tabs are affected by \u2018HyTrack\u2019.<\/p>\n

There is at least one piece of good news: so far, there is no evidence that this technique is already being used by tracking services. Nevertheless, the scientists warn that it would be easy for advertising networks and other data companies to implement it. They therefore recommend that browser developers quickly fix this vulnerability and advise users to install an ad blocker in their browser in the meantime to at least partially protect themselves from unwanted tracking.<\/p>\n","protected":false},"excerpt":{"rendered":"

Researchers at Technische Universit\u00e4t Braunschweig have discovered a new method … <\/p>\n","protected":false},"author":38,"featured_media":75611,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","class_list":["post-75684","kb_presseinformation","type-kb_presseinformation","status-publish","format-standard","has-post-thumbnail","hentry","kb_cat_presse-research","kb_tags-computer-science","kb_tags-security"],"acf":[],"yoast_head":"\n\u2018HyTrack\u2019 could spy on Android users - TU Braunschweig | Blogs<\/title>\n<meta name=\"description\" content=\"Researchers at Technische Universit\u00e4t Braunschweig have discovered a new method of tracking users on the internet. This involves transferring tracking, as\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u2018HyTrack\u2019 could spy on Android users - TU Braunschweig | Blogs\" \/>\n<meta property=\"og:description\" content=\"Researchers at Technische Universit\u00e4t Braunschweig have discovered a new method of tracking users on the internet. This involves transferring tracking, as\" \/>\n<meta property=\"og:url\" content=\"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/\" \/>\n<meta property=\"og:site_name\" content=\"TU Braunschweig | Blogs\" \/>\n<meta property=\"og:image\" content=\"https:\/\/magazin.tu-braunschweig.de\/wp-content\/uploads\/2025\/04\/TUBS_2503_ROT_IAS_02.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1500\" \/>\n\t<meta property=\"og:image:height\" content=\"1000\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/en\\\/pi-post\\\/hytrack-could-spy-on-android-users\\\/\",\"url\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/en\\\/pi-post\\\/hytrack-could-spy-on-android-users\\\/\",\"name\":\"\u2018HyTrack\u2019 could spy on Android users - TU Braunschweig | Blogs\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/en\\\/pi-post\\\/hytrack-could-spy-on-android-users\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/en\\\/pi-post\\\/hytrack-could-spy-on-android-users\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/TUBS_2503_ROT_IAS_02.jpg\",\"datePublished\":\"2025-04-04T06:38:32+00:00\",\"description\":\"Researchers at Technische Universit\u00e4t Braunschweig have discovered a new method of tracking users on the internet. This involves transferring tracking, as\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/en\\\/pi-post\\\/hytrack-could-spy-on-android-users\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/en\\\/pi-post\\\/hytrack-could-spy-on-android-users\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/en\\\/pi-post\\\/hytrack-could-spy-on-android-users\\\/#primaryimage\",\"url\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/TUBS_2503_ROT_IAS_02.jpg\",\"contentUrl\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/TUBS_2503_ROT_IAS_02.jpg\",\"width\":1500,\"height\":1000,\"caption\":\"Bildnachweis: Kristina Rottig\\\/TU Braunschweig\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/en\\\/pi-post\\\/hytrack-could-spy-on-android-users\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Presseinformationen\",\"item\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/pi-post\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"\u2018HyTrack\u2019 could spy on Android users\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/#website\",\"url\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/\",\"name\":\"TU Braunschweig | Blogs\",\"description\":\"Die Blogs der Technischen Universit\u00e4t Braunschweig\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/magazin.tu-braunschweig.de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u2018HyTrack\u2019 could spy on Android users - TU Braunschweig | Blogs","description":"Researchers at Technische Universit\u00e4t Braunschweig have discovered a new method of tracking users on the internet. This involves transferring tracking, as","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/","og_locale":"en_US","og_type":"article","og_title":"\u2018HyTrack\u2019 could spy on Android users - TU Braunschweig | Blogs","og_description":"Researchers at Technische Universit\u00e4t Braunschweig have discovered a new method of tracking users on the internet. This involves transferring tracking, as","og_url":"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/","og_site_name":"TU Braunschweig | Blogs","og_image":[{"width":1500,"height":1000,"url":"https:\/\/magazin.tu-braunschweig.de\/wp-content\/uploads\/2025\/04\/TUBS_2503_ROT_IAS_02.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/","url":"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/","name":"\u2018HyTrack\u2019 could spy on Android users - TU Braunschweig | Blogs","isPartOf":{"@id":"https:\/\/magazin.tu-braunschweig.de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/#primaryimage"},"image":{"@id":"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/#primaryimage"},"thumbnailUrl":"https:\/\/magazin.tu-braunschweig.de\/wp-content\/uploads\/2025\/04\/TUBS_2503_ROT_IAS_02.jpg","datePublished":"2025-04-04T06:38:32+00:00","description":"Researchers at Technische Universit\u00e4t Braunschweig have discovered a new method of tracking users on the internet. This involves transferring tracking, as","breadcrumb":{"@id":"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/#primaryimage","url":"https:\/\/magazin.tu-braunschweig.de\/wp-content\/uploads\/2025\/04\/TUBS_2503_ROT_IAS_02.jpg","contentUrl":"https:\/\/magazin.tu-braunschweig.de\/wp-content\/uploads\/2025\/04\/TUBS_2503_ROT_IAS_02.jpg","width":1500,"height":1000,"caption":"Bildnachweis: Kristina Rottig\/TU Braunschweig"},{"@type":"BreadcrumbList","@id":"https:\/\/magazin.tu-braunschweig.de\/en\/pi-post\/hytrack-could-spy-on-android-users\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/magazin.tu-braunschweig.de\/en\/"},{"@type":"ListItem","position":2,"name":"Presseinformationen","item":"https:\/\/magazin.tu-braunschweig.de\/pi-post\/"},{"@type":"ListItem","position":3,"name":"\u2018HyTrack\u2019 could spy on Android users"}]},{"@type":"WebSite","@id":"https:\/\/magazin.tu-braunschweig.de\/#website","url":"https:\/\/magazin.tu-braunschweig.de\/","name":"TU Braunschweig | Blogs","description":"Die Blogs der Technischen Universit\u00e4t Braunschweig","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/magazin.tu-braunschweig.de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/magazin.tu-braunschweig.de\/en\/wp-json\/wp\/v2\/kb_presseinformation\/75684","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/magazin.tu-braunschweig.de\/en\/wp-json\/wp\/v2\/kb_presseinformation"}],"about":[{"href":"https:\/\/magazin.tu-braunschweig.de\/en\/wp-json\/wp\/v2\/types\/kb_presseinformation"}],"author":[{"embeddable":true,"href":"https:\/\/magazin.tu-braunschweig.de\/en\/wp-json\/wp\/v2\/users\/38"}],"replies":[{"embeddable":true,"href":"https:\/\/magazin.tu-braunschweig.de\/en\/wp-json\/wp\/v2\/comments?post=75684"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/magazin.tu-braunschweig.de\/en\/wp-json\/wp\/v2\/media\/75611"}],"wp:attachment":[{"href":"https:\/\/magazin.tu-braunschweig.de\/en\/wp-json\/wp\/v2\/media?parent=75684"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}