Published inThe Startup·PinnedNative vs Non-Native Mobile Apps — What’s the Difference?Working in mobile security over the last 5 years, I often get asked some variant the following questions: What’s the difference between native apps and non-native apps? What’s the difference between “cross-platform” mobile apps and “hybrid apps”? How do cross-platform apps and hybrid apps relate to the ‘native vs non-native’…Native Mobile Apps6 min readNative Mobile Apps6 min read
Published inThe Startup·PinnedHow to Prevent MFA Bypass in Mobile AppsIn this blog post, I’ll discuss how to prevent MFA Bypass attacks which are becoming an increasingly more common tool for cybercriminals to compromise iOS and Android apps and steal user data. Multi-factor authentication (MFA) is one of the most widely recommended best-practices that security experts recommend — to defend…MFA5 min readMFA5 min read
May 31Preventing Living Off the Land Attacks on iOS and Android AppsFor brands that rely on Android and iOS apps as a key part of their business (which is most brands today), protecting the information stored in or used by mobile apps is critical to protecting your intellectual property and ensuring a secure mobile experience for your users. For many organizations…Mobile App Development6 min readMobile App Development6 min read
Oct 22, 2022How to Prevent Malicious Use of Parallel Space and Virtual Space apps?Parallel Space is a popular virtualization app that allows mobile users to make clones of Android apps and create multiple accounts for the same app that can run on the same physical “device”. It works by creating a separate container (an isolated environment where you can run other apps inside…Hacking Tools6 min readHacking Tools6 min read
Apr 8, 2022What “Shift Left” security really means for SDK VendorsWhat “Shift Left” security really means for SDK Vendors Shift left your application security. Just press the pause button on your continuous delivery pipeline and ask your developers to download our poorly documented SDK…err…actually email our devrel team for the sdk cuz we don’t publish our sdk to the public…2 min read2 min read
Jan 20, 2022How to Secure Crypto Wallets and other eWallet AppsIn this blog post, I’ll discuss the security implications of crypto wallets and offer some tips to mobile developers on how to secure crypto wallets and protect their users’ crypto. There’s no denying that the crypto market is on fire. Whether you consider it to be ‘all-hype’ or ‘the future…Cryptocurrency6 min readCryptocurrency6 min read
Aug 14, 2021What is a Mobile SDK Anyway?This is a multi-part blog series on mobile SDKs. I’ll describe mobile SDKs from a comprehensive standpoint and answer all the burning questions you might have about mobile SDKs, including: What are mobile SDKs, how are they used, why do people create them, and why are they important to the…Mobile Sdks7 min readMobile Sdks7 min read
Jul 27, 2021Reversing Mobile Apps: The Silent Threat of Static Analysis BlogThis is a multi-part blog series about Reverse Engineering, a fundamental building block in every hacker’s tool-chain for compromising mobile applications. Throughout different blogs in this series, I’ll explain the major types of reverse engineering (including static analysis and dynamic analysis), including why hackers do it, what information they learn…Code Obfuscation10 min readCode Obfuscation10 min read
Jun 23, 2021This blog post is a continuation of my previous blog on how malware adapts itself and evolves based…DevSec Blog | How to Block StrandHogg Malware on Android Apps Overlay Attacks — a New Spin on an Old Trick —How StrandHogg innovates To Stay Relevent This blog post is a continuation of my previous blog on how malware adapts itself and evolves based on conditions it encounters in…5 min read5 min read
May 28, 2021Most Mobile Apps Can Be Hacked In 15 Minutes or LessThe state of mobile app security is weak AF; a large majority of Android and iOS apps lack even the most basic security protections and can be compromised with very little time and effort. At my company, our white-hat security team routinely tests a wide variety of Android and iOS…2 min read2 min read
