Skip to content
Tech News
← Back to articles

Apps targeted at US troops contain Chinese and Russian code

read original more articles
Why This Matters

The discovery that over 12% of apps used by US military personnel contain foreign-developed code highlights significant cybersecurity vulnerabilities that could be exploited by adversaries to gather sensitive location and operational data. This raises concerns about the security of military personnel and the potential for foreign governments to target US forces using seemingly innocuous mobile applications. Addressing these risks is crucial for safeguarding national security and protecting service members from espionage and targeted threats.

Key Takeaways

A recent examination of hundreds of mobile apps marketed toward US military personnel found more than one in eight contained software built by companies in China, Russia, or other foreign nations, raising fresh concerns that adversary governments could harvest data revealing where service members live, work, and deploy.

According to researchers at Purdue University, the US Military Academy at West Point, and Florida International University, one popular app used by service members to rate living conditions on their own bases include code from Huawei, the Chinese telecom that US regulators flagged as a national security threat in 2020. Two others were built by Russian companies and incorporate the Russian ad service Yandex.

The largely unregulated advertising industry that tracks Americans online treats civilians and service members mostly the same—unless there is profit in telling them apart—despite evidence that exposure can reveal troop deployments, unit movements, and the routines of personnel within intelligence facilities and hardened shelters where nuclear weapons are believed to be stored.

WIRED investigations have previously shown location data harvested from ordinary apps tracing US service members to their homes, their children’s schools, and off-base establishments where troops are prohibited from being seen. Experts have warned the same data could aid foreign spies in identifying personnel with access to sensitive sites, map when a facility is least guarded, or surface other compromising details.

The stakes are no longer hypothetical. In April, US Central Command acknowledged in a letter to Senator Ron Wyden that it had received multiple threat reports of adversaries exploiting commercial location data to target or surveil American personnel in the Middle East, where US forces remain locked in a standoff with the Iranian military over the Strait of Hormuz. Lawmakers called it the first official confirmation that troops in an active war zone were being hunted through the data-broker economy—a threat the Pentagon’s own contractors and researchers had warned about for nearly a decade.