Mobile App Security: Threat Landscape
summary
Mobile malware escalates from named families like Gold Digger and Golden Pickaxe to supply‑chain clones such as WhatsApp gold, using overlays, dynamic instrumentation and MFA bypass to steal credentials and drain accounts. Attackers decompile APKs, harvest keys (16,000 apps analyzed, ~2,500 exposed), inject payloads and distribute via repackaging attacks. There are ~21 billion connected devices and 7 million apps; ~45% of North American orgs report mobile‑based backend attacks. Defenses include DEX encryption, anti‑tamper checks and runtime detection.
AI-written summary · about
chapters (10)
- 0:00Mobile threat landscape
- 1:47Sophisticated mobile malware
- 5:00Repackaging attacks and supply chain
- 8:06Reverse engineering attacks
- 9:11OWASP Mobile Top 10
- 10:35Code obfuscation techniques
- 12:22Anti-tampering and checks
- 15:08Preventive detective and corrective controls
- 16:54AI threat detection
- 17:40Q&A
related talks
21mSecuring the Unseen: Advanced Threats, Best Practices & Challenges in Mobile App Security
42mIf 6,000 Mobile Malware Applications Could Talk! Ow, They Do, And A Lot!
24mRecent Mobile App Security Incidents from Real-World Cases
21mUnlocking Mobile App Security- Key Insights for Navigating a Rapidly Evolving Threat Landscape
42mThe Ways Hackers Are Taking To Win The Mobile Malware Battle
33mWhen Attackers Go Mobile-First with AI
44mBeyond Desktops: The Rise and Transformation of Mobile Malware
33mHacking and protection of Mobile Apps and backend APIs