Android Trojan makes PayPal payment on behalf of user | bypass Android PayPal app 2fa|Code analysis

New PayPal Malware is android trojan which can bypass Android PayPal App 2fa. Here is an apk code analysis. We live security.
Android malware analysis of new mobile banking threat misusing accessibility services to make PayPal payment by sending $1,000 from victim account every time user opens PayPal application.
It can bypass PayPal’s two-factor authentication (2FA).
Video includes Trojan demonstration, code analysis and mitigation.
FOLLOW: / lukasstefanko
BLOG: www.welivesecurity.com/2018/1...
Subscribe for more videos!

[@androidsecurity9256]

Hey lukas, I am a great fan of your work and it is certainly very helpful. What kind of tools do you use to perform dynamic analysis?

[@mobilehacker]

Hey there, for dynamic analysis I use Burp or PacketCapturer for analyzing network traffic and Logcat for debug logs - sometimes it can disclose interesting things. In the case of dropped files is rooted device always helpful ;)

[@knicksfan3647]

Recently got a 300.00 charge on my PayPal, via Samsung pay. To some companies in Mexico. Samsung denied it, paypal denied it, and my bank cant help because i have auto top off. So they literally robbed me. And im fighting for reimbursement still. Have any info on that?

[@yaseralyaser1291]

Good work thanks**********

[@wolfhaxa6655]

Hey Lukas why don’t you make complete Andorid malware analysis course there is no such course in market right now.complete roadmap for android malware analysis

[@KaranPatel-jw5ti]

Yes pls

[@titusuche9602]

Where do i download the optimization android plss

[@donivarshop6078]

thanks my i have source code ??

[@PaulBurke]

To say that this "bypasses" 2FA is fairly misleading. The exploit does not allow logging in without use of 2FA, it just waits for the user to complete it, themselves.

[@mobilehacker]

It is actually bypassing 2FA however, in a new/smart way. The main idea is that it doesn't matter if you have PIN protected app and device, strong PayPal password and enabled 2FA it still makes unwanted payment.

[@__-qy1ci]

Lukas Stefanko bypass it by read msg and submit it for example ,without user acting,

[@muhammadzawawi1388]

8:12 message from hacker.lol

[@tabkamohamed3116]

paypol