Tap Jacking Attack on Button Tags

Disclosed: 2014-07-07 03:50:48 By kaleemgiet To faceless
Unknown
Vulnerability Details
UI Redressing (Tap jacking) attack may trick users into tapping a specifically crafted malicious App popup window (e.g. toast view), making it a gateway for varied threats such as framing attack. Using this technique, a malicious App could potentially trick a user into making purchases, clicking on ads, installing Apps, or even wiping all of the data from the phone. Button Tags in the layout folder they need to be protect with an attribute "filterTouchesWhenObscured='true".
Actions
View on HackerOne
Report Stats
  • Report ID: 17766
  • State: Closed
  • Substate: resolved
  • Upvotes: 2
Share this report