3 ms·
> common smartphone malware attacks now steal banking info, personal info, and even look for sexting pics that are used as blackmail. > All it takes is a servi
by coldpie 3y ago
> common smartphone malware attacks now steal banking info, personal info, and even look for sexting pics that are used as blackmail.
> All it takes is a service you use that embeds a webview (tons of them), to get SCA'd or injection attacked, and you've got a huge problem.
Can you provide some evidence of these attacks actually being used in the wild?
- parl_match 3y agoThey're not so common anymore, largely in part due to focused attention on that attack surface and continual software updates (!) via the playstore - google decoupled the webview rendering libraries from the os. Malware such as SpyNote/CypherRat is commonly a sideload attack, but occasionally webview rces have been used to deliver it and others. But as mentioned above, webview malware is rare today, largely in part due to fast patching and updates!