When Attackers Go Mobile-First: What Developers Need to Know
summary
Claim: common defenses fail — 60% of Android devices run outdated OS, one in 400 devices is rooted, one in 2500 iOS devices jailbroken, three per thousand compromised. Demonstrates Magisk and fast root tooling, SSL pinning bypasses, keys extractable from keychains, and blind spots in precompiled SDKs. Live demo uses an accessibility-powered mobile bot to drain a banking app and a runtime SDK pushes an over-the-air policy change that blocks the bot and disables features without code release.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 1:08Mobile app security
- 2:53Common app security myths
- 7:47Demo setup
- 8:08Live attack on banking app
- 12:54Instant protection with over-the-air updates
- 15:45Q&A
related talks
33mWhen Attackers Go Mobile-First with AI
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
29mSecuring Android: Tackling Advanced Threats and Enhancing App Security
07m"The significance of mobile exploit applications"
48mMobile Security Attacks: A Glimpse from the Trenches
24mModern Android App Security: Protecting Code, Keys, and Data
42mThe Ways Hackers Are Taking To Win The Mobile Malware Battle
45mTen Secrets to Secure Mobile Applications