~/talk

Recent Mobile App Security Incidents from Real-World Cases

Talkat droidCon USA 2026 · on Thursday, 2026-07-16· at 14:05· W222 B· [security]
slides:none on file

Camera and biometric checks are routinely bypassed by a repackaged APK sold on Telegram that spoofs the camera feed for $11, while the same group offers GPS cheats that teleport drivers to high-demand restaurants; Accessibility Service malware records passcodes and automates transfers, activity injection replaces checkout screens to harvest payment data, NFC relay demos show one-time card relay payments, and sensor tampering inflates telematics scores. Detection over 80 million devices over 180 days shows ~0.2% modified apps and ~0.3% accessibility/activity injection occurrences.

AI-written summary · about

  1. 0:00Introduction
  2. 0:35Mobile security overview
  3. 2:35Camera and biometrics
  4. 5:52GPS spoofing
  5. 8:18Accessibility services
  6. 10:57Activity injection
  7. 13:13NFC relay attacks
  8. 15:34Sensor manipulation
  9. 16:17Statistics and mitigation
  10. 18:40Q&A session
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.