Beware of Pokemon Go app security risks Published July 18, 2016 By 628th Air Base Wing Cybersecurity Office JOINT BASE CHARLESTON, S.C. -- There is a popular new game called "Pokemon Go" that people are loading on their cell phones. There are several significant security issues to keep in mind regarding this game: 1. It accesses your GPS and takes pictures of your surroundings **** BE AWARE of classified information, PII and information spillages**** 2. "PokeStops" are places where lots of Pokemon congregate and players can capture more Pokemon or treasures. Once players reach a certain level, they can make a location a "PokeStop." Apparently, someone has made the fountain in front of Naval Weapons Station Bldg. 3147 in Charleston a "PokeStop." 3. If other players have the Pokemon Go app installed on their phone, they can see their Pokemon. Apparently, these have been seen behind the doors of secure labs, which implies personnel have either brought phones with the app into the lab, or even worse, downloaded Pokemon Go onto their workstations! They have also been seen in the hallways walking through Bldg. 3147. ****If you are online, you are leaving a trail that we will follow**** 4. Installing the application requires giving the vendor full access to the phone's camera, GPS, contacts, messages and more. ****The cellphone camera can be turned off in your device's settings. You will also need to turn off the Augmented Reality feature. However, this does not mean you can take a cellphone into a restricted area!***** But it's wait, there's more! The App allows you to mark spots and set lures when people show up they are getting robbed at gun point. The Access required allows the app full access to send and receive emails on your behalf, access to your google docs, google photos, and any account you have linked your Gmail account to. This thing is a security and OPSEC nightmare. The Gyms, and Attractions/locations are ported in from another VR Game. They never talked to the owners of the buildings so people are ending up with kids knocking on random peoples doors/business's asking for access. Reports I have read are some of the spots are behind High level security locations on several bases. The only current protection is to uninstall the APP until it can be secured and maybe then it will be safe to play. Please be vigilant and protect yourself and family. ********************************REMINDER************************************** - Cellphones, cameras, and other recording devices are strictly forbidden inside restricted/controlled areas. Violation of security policy can have serious consequences affecting a security clearance. - We care about your safety! Don't be oblivious to your surroundings while you walk around trying to capture wild Pokemon. Remain vigilant! The security of our networks, information, facilities, and personnel is everyone’s responsibility. Please do your part in assisting our Cybersecurity Program and security teams in protecting the very important work we do for our nation and warfighters. Do not make it easy for our enemies to gain insight into our classified or sensitive information. It is a proven fact that unclassified information can be a gold mine for enemies or even our friends.