Exposed source code and leakage of sensitive data have been found in 30 Android financial apps, including banking, credit card and mobile payment apps by cybersecurity company Arxan. A researcher said it took just eight and a half minutes for the code in the downloaded apps to become accessible. The vulnerabilities reported by Arxan also included a lack of binary protection, insecure storage for data and data leakage. "If I have access to the source code of the app, I can then modify the URLs and change how that app behaves and where it sends data to," Knight said. In one case, researchers discovered that a bank app had access to personal information from its users.
Exposed source code and leakage of sensitive data have been found in 30 Android financial apps, including banking, credit card and mobile payment apps by cybersecurity company Arxan. A researcher said it took just eight and a half minutes for the code in the downloaded apps to become accessible. The vulnerabilities reported by Arxan also included a lack of binary protection, insecure storage for data and data leakage. In one case, researchers discovered that a bank app had access to personal information from its users.