Researchers at TU Graz have found security flaws in all seven popular tools Android phones use to move data from an old device to a new one.

In tools including Google's Switch, Samsung's Smart Switch and Xiaomi's Mi Mover, an attacker within Wi-Fi range could use equipment costing under €100 to eavesdrop on the transfer. That gave access to texts, photos, health data and passwords, and in some cases let the attacker install malware on the new phone. All seven manufacturers have released fixes, and the researchers advise updating both devices before transferring data.