Found a Mobile App Privacy Violation by Accident (And How You Can Find Them Deliberately)
While testing a popular fitness app, a concerning privacy violation was discovered—unauthorized clipboard monitoring. The app silently read clipboard data upon launch, leading to targeted ads based on copied…
While testing a popular fitness app, a concerning privacy violation was discovered—unauthorized clipboard monitoring. The app silently read clipboard data upon launch, leading to targeted ads based on copied…
Found a Mobile App Privacy Violation by Accident (And How You Can Find Them Deliberately)
While testing a popular fitness app, a concerning privacy violation was discovered—unauthorized clipboard monitoring. The app silently read clipboard data upon launch, leading to targeted ads based on copied content. Further investigation using Corellium Viper's CoreTrace revealed additional undisclosed activities: UIPasteboard.generalPasteboard calls during app initialization CLLocationManager startUpdatingLocation despite "While Using" permissions PHAsset methods accessing photo metadata without consent Background network transmissions of device identifiers post opt-out…
undercodetesting.com
April 13, 2025 at 1:59 AM
Found a Mobile App Privacy Violation by Accident (And How You Can Find Them Deliberately)
While testing a popular fitness app, a concerning privacy violation was discovered—unauthorized clipboard monitoring. The app silently read clipboard data upon launch, leading to targeted ads based on copied…
While testing a popular fitness app, a concerning privacy violation was discovered—unauthorized clipboard monitoring. The app silently read clipboard data upon launch, leading to targeted ads based on copied…
4/
I moved to a more systematic approach using @corellium.bsky.social Viper’s CoreTrace. Tracked all system calls, not just network traffic.
Here’s what showed up…
I moved to a more systematic approach using @corellium.bsky.social Viper’s CoreTrace. Tracked all system calls, not just network traffic.
Here’s what showed up…
April 11, 2025 at 4:50 AM
4/
I moved to a more systematic approach using @corellium.bsky.social Viper’s CoreTrace. Tracked all system calls, not just network traffic.
Here’s what showed up…
I moved to a more systematic approach using @corellium.bsky.social Viper’s CoreTrace. Tracked all system calls, not just network traffic.
Here’s what showed up…
6/ Bottom line: If you’re serious about security testing, combine API interception with system call tracing to catch what’s happening behind the scenes. 🔍
#CyberSecurity #AppSec #Corellium #mobilepentesting #Mobilesecurity #Coretrace
#CyberSecurity #AppSec #Corellium #mobilepentesting #Mobilesecurity #Coretrace
March 14, 2025 at 3:38 AM
6/ Bottom line: If you’re serious about security testing, combine API interception with system call tracing to catch what’s happening behind the scenes. 🔍
#CyberSecurity #AppSec #Corellium #mobilepentesting #Mobilesecurity #Coretrace
#CyberSecurity #AppSec #Corellium #mobilepentesting #Mobilesecurity #Coretrace
5/ A better way?
@corellium.bsky.social CoreTrace makes it easy. No rooting, no comple
@corellium.bsky.social CoreTrace makes it easy. No rooting, no comple
March 14, 2025 at 3:38 AM
5/ A better way?
@corellium.bsky.social CoreTrace makes it easy. No rooting, no comple
@corellium.bsky.social CoreTrace makes it easy. No rooting, no comple
