What are the hidden dangers of mobile banking?

At present, the security problems existing in mobile banking mainly lie in these two aspects:

1, password leaked

2. Transaction hijacking

Let's talk about the factors that may lead to password leakage in mobile banking:

1. The mobile banking APP comes from an irregular source. An informal APP may be a phishing program that imitates the bank interface and induces customers to enter their account passwords. It may also be that mobile banking decompiles and falsifies the version, changing the display of key pages and inducing customers to input information.

Under normal circumstances, the bank lobby manager will help customers install it. If users want to download it themselves, they should download it in a regular third-party store.

2. Trojans steal passwords and develop Android permissions. Yes, some apps can steal passwords by taking screenshots, recording screens, and getting touch events.

Let's start with transaction hijacking. Taking transfer as an example, each transfer request has the following elements: payee, payee account number, amount, time and payer.

These data are encrypted into data packets and transmitted from the mobile banking APP to the bank background. According to these data, the bank background will add the corresponding amount to the payee's account and cross out the equivalent amount from the payer's account. If the data is hijacked and cracked by hackers, these transaction elements will be modified, and after being transmitted to the bank background, the bank background will perform an incorrect transfer.

So during the transfer process, you need to ensure that:

1. The encryption of transfer information cannot be cracked.

2. The data will not be modified after being cracked.

How can the transfer information not be cracked? We bury a key (not an account password, but only used to encrypt data) in the background of mobile banking and banks, and the transmitted data needs to be encrypted with this key.