Securing the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
summary
Analysis of 1 million apps shows roughly 80% unprotected against reverse engineering or tampering, with Magisk forks (300+ contributors) and Frida scripts used to bypass root checks and SSL pinning. Common attacks include APK modding with automatic patchers, runtime instrumentation on rooted devices, and accessibility-based malware that performs account takeover even while a device is locked. Defenses that prove effective are encrypted resources and keys, selective control‑flow obfuscation, integrity checks, on‑device observability, and integrating protections into CI/CD and testing.
AI-written summary · about
chapters (9)
- 0:00Mobile app security threats
- 3:57Static attacks and reverse engineering
- 7:48Protecting against static tampering
- 11:02Runtime threats and rooted devices
- 14:15Magisk and Frida tools
- 16:47Malware and accessibility abuse
- 18:37Data protection and encryption keys
- 19:19Layered security and MASVS
- 20:01Developer challenges and best practices
related talks
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
33mHacking and protection of Mobile Apps and backend APIs
21mWhen Attackers Go Mobile-First: What Developers Need to Know
24mModern Android App Security: Protecting Code, Keys, and Data
40mBest practices for shielding mobile apps from emerging threats
25mMobile App Security: Threat Landscape
21mUnlocking Mobile App Security- Key Insights for Navigating a Rapidly Evolving Threat Landscape
47mSecuring Android Applications