Research Article

Authenticator Rebinding Attack of the UAF Protocol on Mobile Devices

Table 2

Out-App Authenticator Mode applications.

Package nameCategoryInteraction methodDownloads (million)Attack effectiveness

com.ecitic.bank.mobileBankImplicit intents14.59
com.bankcomm.maidanbaBankImplicit intents5.38
cn.com.cmbc.newmbankBankImplicit intents2.32
com.cmbc.cc.mbankBankImplicit intents2.32
com.formsBankImplicit intents0.86
com.cmcc.hebaoThird-party paymentImplicit intents0.75
com.unicom.wopayThird-party paymentImplicit intents0.49
com.hsbank.mobilebankBankImplicit intents0.39