-
Notifications
You must be signed in to change notification settings - Fork 0
Home
neo2770 edited this page Aug 31, 2018
·
1 revision
We have developed three tools to help different stakeholders(app store, developer, user) mitigate the accessibility service vulnerability. In the following, we are going to present our results:
We selected top 50 apps of Finance and Social categories having a log-in page. . We applied AcDetect on those apps. Plus we did a manual check on their log-in page. The results are as follows:
| # | App | AcDetect | Manual |
|---|---|---|---|
| 1 | at.paysafecard.android | Y | Y |
| 2 | com.paypal.android.p2pmobile | Y | Y |
| 3 | com.starfinanz.smob.android.sfinanzstatus | Y | N |
| 4 | com.starfinanz.mobile.android.pushtan | N | N |
| 5 | de.check24.check24 | Y | N |
| 6 | com.db.pbc.phototan.db | N | N |
| 7 | de.ingdiba.bankingapp | N | Y |
| 8 | com.westernunion.moneytransferr3app.eu | Y | Y |
| 9 | com.google.android.apps.walletnfcrel | Y | Y |
| 10 | de.commerzbanking.mobil | Y | Y |
| 11 | de.fiducia.smartphone.android.securego.vr | N | N |
| 12 | com.db.pwcc.dbmobile | Y | Y |
| 13 | de.postbank.finanzassistent | Y | Y |
| 14 | de.dkb.portalapp | N | Y |
| 15 | com.libertex.mobile | N | N |
| 16 | de.wirecard.boonpayment | Y | Y |
| 17 | de.sdvrz.ihb.mobile.secureapp.sparda.produktion | Y | Y |
| 18 | de.sdvrz.ihb.mobile.app | Y | Y |
| 19 | de.number26.android | Y | Y |
| 20 | de.debeka.leistungsapp | Y | Y |
| 21 | com.targo_prod.bad | Y | Y |
| 22 | de.comdirect.app | Y | Y |
| 23 | de.consorsfinanz.onlinebanking | Y | Y |
| 24 | de.dwins.financeguru | N | Y |
| 25 | com.fidor.o2banking | Y | Y |
| 26 | de.bbbank.banking.privat | Y | N |
| 27 | com.americanexpress.android.acctsvcs.de | Y | Y |
| 28 | de.consorsbank | Y | Y |
| 29 | com.coinbase.android | Y | Y |
| 30 | de.adesso_mobile.secureapp.aab | N | Y |
| 31 | com.fidor.fsw | Y | Y |
| 32 | com.barclaycard.germany | Y | Y |
| 33 | de.buhl.finanzblick | Y | Y |
| 34 | com.db.mm.norisbank | Y | Y |
| 35 | de.direkt1822.banking | Y | Y |
| 36 | com.azimo.sendmoney | Y | Y |
| 37 | de.psd.banking.privat | Y | N |
| 38 | com.bonifynative | N | Y |
| 39 | com.cashcape.android | Y | Y |
| 40 | de.easycredit.bkapp | Y | Y |
| 41 | com.haspajoker | Y | Y |
| 42 | de.bs.ibanking | Y | Y |
| 43 | com.ppro.viabuy | N | N |
| 44 | com.starfinanz.smob.android.bwmobilbanking | N | N |
| 45 | com.moneybookers.skrillpayments | Y | Y |
| 46 | com.worldremit.android | N | N |
| 47 | piuk.blockchain.android | Y | Y |
| 48 | com.commerzbank.msb | N | N |
| 49 | com.electroneum.mobile | N | N |
| 50 | com.syngenio.customer.hanseatic.financelife | N | N |
| # | App | AcDetect | Manual |
|---|---|---|---|
| 1 | com.instagram.android | Y | Y |
| 2 | com.snapchat.android | Y | Y |
| 3 | com.facebook.katana | Y | Y |
| 4 | com.pinterest | Y | Y |
| 5 | net.lovoo.android | Y | Y |
| 6 | com.badoo.mobile | Y | Y |
| 7 | com.facebook.lite | N | Y |
| 8 | com.linkedin.android | Y | Y |
| 9 | com.tumblr | Y | Y |
| 10 | com.jaumo | Y | Y |
| 11 | com.facebook.Socal | N | N |
| 12 | com.herzick.houseparty | Y | Y |
| 13 | de.nebenan.app | Y | Y |
| 14 | com.narvii.amino.master | Y | Y |
| 15 | de.startupfreunde.bibflirt | Y | Y |
| 16 | com.GermanyChatMessenger | Y | Y |
| 17 | com.enterkomug.linduu | Y | Y |
| 18 | ru.ok.android | Y | Y |
| 19 | com.waplog.social | Y | Y |
| 20 | chat.teen | Y | Y |
| 21 | com.cmcm.live | N | Y |
| 22 | sg.bigo.live | N | Y |
| 23 | com.vkontakte.android | Y | Y |
| 24 | com.askfm | Y | Y |
| 25 | com.hoott | Y | Y |
| 26 | com.fission.sevennujoom | Y | Y |
| 27 | mozat.rings.loops | Y | Y |
| 28 | com.unearby.sayhi | Y | Y |
| 29 | ru.mamba.client | Y | Y |
| 30 | com.mobile.android.eris | Y | Y |
| 31 | com.paltalk.chat.android | Y | Y |
| 32 | com.bluelionmobile.qeep.client.android | Y | Y |
| 33 | com.pof.android | Y | Y |
| 34 | com.loudtalks | Y | Y |
| 35 | com.mazomedia.snixx | Y | Y |
| 36 | com.chatous.chatous | Y | Y |
| 37 | com.kickstarter.kickstarter | Y | Y |
| 38 | com.quoord.tapatalkpro.activity | Y | Y |
| 39 | it.rabb.rabbitandroid | N | N |
| 40 | com.chatgum.chat.rooms | N | Y |
| 41 | com.skout.android | Y | Y |
| 42 | net.gutefrage.android | Y | Y |
| 43 | de.stayfriends.development | Y | Y |
| 44 | de.fischkopf.app | N | N |
| 45 | com.taggedapp | Y | Y |
| 46 | com.quora.android | N | N |
| 47 | com.toluna.webservice | Y | Y |
| 48 | com.gamrbet | N | N |
| 49 | de.brace.gameiq | N | N |
| 50 | com.hi5.app | Y | Y |