cross-posted from: https://infosec.pub/post/53326082
A malware campaign dubbed ‘Midnight Mimosa’ has been discovered on low-cost Android smartphones that ship with malicious software embedded in their firmware, allowing attackers to silently install apps, perform ad fraud, and turn devices into residential proxies. […]
my bank…
graphene os: eww no, sooo insecure, couldn’t possibly trust that, fails checkbox compliance!
rando crapware infested phone that hasn’t seen a security update in 3 years: right this way sir…
“We checked the checkbox that said ‘security’.”
But Google told them it was/wasn’t secure! Google has to know, right?
/s
I hear this complaint and perhaps I used the banking apps very minimally. I’m running GraoheneOS and just use the browser instead for my banking needs and I haven’t had any issues.
It was a slight setback but its not a huge deal for myself at least.
I had this mindset until signing up with a bank that only uses its app for 2FA of any kind. No SMS option. No TOTP code option. So anytime you log in using a a mobile or desktop browser it would require opening the mobile app (running google play services OR having an iPhone).
The only option I found to keep using this bank was to disable 2FA entirely.
Which is dumb.
But it was related to using a bank in a new country on GrapheneOS and Aurora Store version not fully working without Play Services and it turns out all banks suck here and not worth changing banks and there’s not much money in this account anyway so just…sigh.
I actually don’t do any banking on my phone at all, as phones can easily be stolen and if that person saw you typing your passcode, then they can unlock it and get past any screen that asks for your fingerprint.
Yes, I do use my fingerprint, but I can’t always use it (e.g. If I have rebooted or if my phone just won’t let me for some reason), so I don’t keep much on my phone and instead do things like banking on a desktop computer with disk-encryption.
How long left until my bank requires me to use their app? I don’t know and I have no idea if it’ll work on custom ROMs.