News for hackers. Stuff that matters.

A comment on 2FA app with 10k Google Play downloads loaded well-known banking trojan. Parent comment

Re:2FA app with 10k Google Play downloads loaded well-known ... by alamortsubite on Friday January 28, 2022 @11:11AM (#30116503)
An honest yet pointed question: what permissions does your bank's 2FA app request? My guess is, as a bank, they're doing the right thing. However, permissions overreach is a real issue that even "legitimate" apps are exploiting to vacuum as much user data as possible.
[ Parent | on HN ]
Re:2FA app with 10k Google Play downloads loaded well-known ... by austincheney on Friday January 28, 2022 @12:42PM (#30117891)
What solution would you recommend? Strangely, those are all banks I have never heard of. My employer had no search results on that site. I guess they aren't doing everything wrong.
[ Parent | on HN ]
Re:2FA app with 10k Google Play downloads loaded well-known ... by Saris on Saturday January 29, 2022 @09:25AM (#30126509)
Aegis installed via F-Droid is probably the safest option, as it's open source and verified by F-Droid before being listed.
[ Parent | on HN ]
Re:2FA app with 10k Google Play downloads loaded well-known ... by dollop43 on Friday January 28, 2022 @01:36PM (#30118587)
Just use an open source app. Download all app from Fdroid for android.
[ Parent | on HN ]
Re:2FA app with 10k Google Play downloads loaded well-known ... by matheusmoreira on Friday January 28, 2022 @12:34PM (#30117772)
> My guess is, as a bank, they're doing the right thing.

In my country, banks used to mandate use of a "security module". I decided to see what this thing was doing and caught it intercepting every single network connection.

[ Parent | on HN ]