Get the latest tech news

Technical Analysis – Improper Use of Private iOS APIs in Vietnamese Banking Apps


Bài viết tiếng Việt

We do NOT use risky or dangerous methods, ensuring full compliance with store policies, prioritizing user and business security amid rising threats targeting banking apps. Attempting to bypass iOS sandbox restrictions or gather unauthorized data (e.g., installed app lists) is a major violation, raising serious red flags for Apple and security-conscious users. In this analysis, we confirm that SBSLaunchApplicationWithIdentifier private API could be used as a side channel to verify app existence through returned error codes, works on latest iOS versions on non-jailbroken devices.

Get the Android app

Or read this on Hacker News

Read more on:

Photo of vietnamese

vietnamese

Photo of APIs

APIs

Photo of improper use

improper use

Related news:

News photo

Zstd 1.5.7 Lands In Linux 6.15 For Better Performance & APIs For Intel QAT Acceleration

News photo

Create, Edit and Convert PPT, PPTX and ODP Presentation via Open Source PHP APIs

News photo

Show HN: API Parrot – Automatically Reverse Engineer HTTP APIs