[Trend]Vulnerability in In-App Payment SDKs May Lead to Phishing

[igor51]

Vulnerability in In-App Payment SDKs May Lead to Phishing

Vulnerabilities in apps are always a cause for concern, especially when said apps handle sensitive information, particularly financial. We examined two popular in-app payment (IAP) SDKs?Google Wallet and the Chinese payment platform Alipay?and discovered that these contain a vulnerability that can be exploited for phishing attacks. The versions we analyzed were Google IAP versions 2 […]

Post from: Trendlabs Security Intelligence Blog - by Trend Micro

Vulnerability in In-App Payment SDKs May Lead to Phishing

Source: Vulnerability in In-App Payment SDKs May Lead to Phishing