Authenticator Rebinding Attack of the UAF Protocol on Mobile Devices

Table 3

In-App Authenticator Mode libraries and applications.

Library package name	Attack effectiveness	Application package name	Code protection measure	Downloads (million)
cn.com.union.fido	√	com.jd.jrapp	Code obfuscation	23.83
		com.csii.sns.ui	App reinforcement	0.80
		com.cebbank.mobile.cemb	App reinforcement	0.36
		cn.com.bhbc.mobilebank.per	App reinforcement	0.30
		com.chinamworld.klb	App reinforcement	0.06
		cn.com.gdbank.direct	App reinforcement	0.01
		com.csii.ly.ui	App reinforcement	0.01
		com.csii.wjnsbank	App reinforcement	Less than 0.01
		com.urthinker.langfangbank.lfbank	App reinforcement	Less than 0.01
		com.csii.yk.ui	App reinforcement	Less than 0.01
		com.csii.zbdirect	App reinforcement	Less than 0.01
com.daon.fido.client.sdk	Unconfirmed	com.bochk.com	Code obfuscation	0.05
com.fido.android.framework	Unconfirmed	com.chinatelecom.bestpayclient	App reinforcement	34.45
com.iss.sdpersonalbank.fidofinger	Unconfirmed	com.iss.weifangbank	App reinforcement	0.17
		com.iss.rizhaobank	App reinforcement	0.13
		com.uccb.mobile	App reinforcement	0.13
		com.iss.changanbank	App reinforcement	0.12
		com.iss.weihaibank	App reinforcement	0.10
		com.iss.qilubank	App reinforcement	0.09
		com.iss.qishangbank	App reinforcement	0.09
		com.iss.jiningbank	App reinforcement	0.08
		com.iss.taianbank	App reinforcement	0.08
		com.iss.dongyingbank	App reinforcement	0.07
		com.iss.laishangbank	App reinforcement	0.07
		com.iss.ysantaibank	App reinforcement	0.07
		com.iss.dezhoubank	App reinforcement	0.06
		com.iss.zaozhuangbank	App reinforcement	0.02
com.lenovo.fido.framework	Unconfirmed	com.baidu.wallet	App reinforcement	1.69
		com.bill99.kuaiqian	App reinforcement	1.58
Unknown	Unconfirmed	com.icbc	App reinforcement	69.67
		com.chinamworld.bocmbci	App reinforcement	38.06
		com.icbc.im	App reinforcement	22.57
		com.baixin.mobilebank	App reinforcement	0.52
		com.icbc.collegestudents	App reinforcement	0.11