(In)Security of Mobile Banking
summary
OpenDafY produces an Android malware detector (static + ML), PanopTest MITM with injected CA and a mass downloader; those tools reveal that most banking apps leak sensitive data, two banking apps show exploitable vulnerabilities (Bank of China, State Bank of Mongolia), and GP Morgan embeds a remote shell‑like command executor. Dynamic interception works unless apps use custom trust stores — 50% of Asian apps block MITM. Demo hardware can extract cleartext from a phone in under a minute. Few banks respond to detailed reports.
AI-written summary · about
chapters (5)
related talks
32mResults of Scanning the Top 45 Android Mobile Banking Apps
21mWhen Attackers Go Mobile-First: What Developers Need to Know
25mMobile App Security: Threat Landscape
29mScorthter, Hacking Banks and Cryptocurrency Exchanges through their APIs
54mAnalyzing the Security of Mobile Apps for Automobiles
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
44mBeyond Desktops: The Rise and Transformation of Mobile Malware