Trading apps expose investors to cybercriminals, report finds

Some apps store subscribers' passwords or data on trading without encryption

Aug 10, 2018 @ 10:40 am

By Bloomberg News

Dozens of applications used for online trading by retail investors have cybersecurity vulnerabilities, some of which could lead to hackers siphoning funds from account holders, according to security consultant IOActive Inc.

Ten of the 80 applications tested over a one-year period store passwords of their subscribers without encryption, a flaw that could lead to funds being stolen, IOActive reported at the Black Hat cybersecurity conference Thursday in Las Vegas. Those included software by AvaTrade Ltd. and IQ Option, according to the report.

Software at ETrade Financial Corp. and TD Ameritrade Holding Corp. stores trading data without encryption, the report found.

The largest brokers offer the best security, yet still have weaknesses, said Alejandro Hernandez, a senior security consultant and author of the report. The biggest firms have been responsive to IOActive's findings and are fixing the issues, Mr. Hernandez said.

Rebecca Niiya, a TD Ameritrade spokeswoman, said the company investigates any reported vulnerabilities and has "already made progress in addressing the potential issues noted in the IOActive report."

Representatives for ETrade, AvaTrade and IQ Option didn't have any comment or didn't respond to emails seeking a response.

The analysis looked at desktop, mobile and website-based trading software and found the web platforms to be the most secure. Desktop applications were the least secure.

Using the same criteria, banking applications on all platforms are many times more secure than trading apps, Mr. Hernandez said. Retail investors could have a false sense of security because they probably equate their trading applications with their banking software, he said.

(More: Market pullback presents robo-advisers with biggest test yet)


What do you think?

View comments

Recommended for you

Featured video


InvestmentNews celebrates diversity & inclusion in the financial advice business

Highlights of the Excellence in D&I Awards, showcasing the achievements of 26 individuals and firms that are moving the needle when it comes to diversity and inclusion.

Latest news & opinion

Don't be fooled by the numbers — the industry is in a dangerously vulnerable state

Last year's stock market gains helped advisers turn in solid growth in assets and revenue, but that growth could disappear in the next market downturn.

Divided we stand: How financial advisers view President Trump

InvestmentNews poll finds 49.2% approve of his performance, while 46.7% disapprove. How has that changed over the course of his presidency?

10 states with the most college student debt

Residents of these states have the most student debt when you consider their job opportunities.

Ex-Wells Fargo brokers sue for damages, claiming they lost business in wake of scandals

In a Finra arbitration complaint, two brokers allege that Wells Fargo's problems damaged their business.

Invesco to buy OppenheimerFunds

Deal brings Invesco another $246 billion in assets, as well as high-fee actively managed funds.


Hi! Glad you're here and we hope you like all the great work we do here at InvestmentNews. But what we do is expensive and is funded in part by our sponsors. So won't you show our sponsors a little love by whitelisting It'll help us continue to serve you.

Yes, show me how to whitelist

Ad blocker detected. Please whitelist us or give premium a try.


Subscribe and Save 60%

Premium Access
Print + Digital

Learn more
Subscribe to Print