Breaking News
Promon reveals 77% of payment apps are susceptible to screen reader malware
Promon, the Norwegian app security firm that provides cybersecurity solutions for some of the world’s largest banks, companies, and applications has analysed 73 of the world’s most-used payment apps. To assess their security level and understand how they tackle a common malware-style screen reader attack.
Using a basic screen reader tool – which exfiltrates data in the same way that common, real-world malware would – Promon found that:
- The screen reader could read and exfiltrate the username and password from 56 of the 73 apps (76.7%)
- They were able to log the username, but not the password of Six apps (8.2%)
- Only three apps (4.1%) showed clear defense against the screen reader’s attempts to read the data and allowed neither the username nor password to be logged
- 8 apps (10.9%) featured no login page from which to exfiltrate data
“This is beyond concerning to say the least,” says Benjamin Adolphi, Head of Security Research at Promon. “This is an extremely basic tool that is used regularly alongside common social engineering attacks. Malware that can successfully gain access to a device’s screen and its contents in this way can steal sensitive information, such as passwords and credit card numbers, but also intercept 2FA codes and give the hackers access to other accounts. In more serious cases, bad actors could even take control of the device and bypass other integral security measures. You would like to think that the developers of these apps would be taking the security of their products seriously, but apparently protecting users’ highly sensitive information is but a mere afterthought for the vast majority.”
The full report can be accessed here.
People In This Post
Companies In This Post
- Oxford Risk: Placing the Human at the Center of Wealth and Asset Management Transformation Read more
- CLS Appoints Six New Board Directors Read more
- Mobey Forum Calls for a Collaborative Approach to Fraud Prevention in Rethinking Fraud in a Connected World Read more
- SumUp Launches in Canada Read more
- European Fintech Association Elects New Board of Directors Read more
CLS Appoints Six New Board Directors
CLS, a financial market infrastructure group delivering settlement, processing and data solutions, today announces the appointment of six new members to its Board of Directors at the CLS Annual General Meeting held on 9 June 2026.
Mobey Forum Calls for a Collaborative Approach to Fraud Prevention in Rethinking Fraud in a Connected World
Mobey Forum’s Fraud Expert Group has published a new report, Rethinking Fraud in a Connected World: Trust, Collaboration, and Resilience in the Digital Ecosystem, exploring how fraud is evolving beyond traditional banking threats and why stronger collaboration across industries is becoming essential.
SumUp Launches in Canada
SumUp, the global financial technology company, today announced its official launch in Canada. The milestone makes Canada SumUp's 38th market and its latest step in building out its presence across the Americas, as the company continues its mission to make commerce simpler and more accessible for all businesses worldwide.
European Fintech Association Elects New Board of Directors
The European FinTech Association (EFA) today announced the election of its new Board of Directors, bringing together senior leaders from across Europe's fintech ecosystem to guide the Association's work over the coming term.
Connect IFA Strengthens Leadership Team to Drive Growth and Enhance Adviser Support
Connect IFA Ltd is pleased to announce key leadership appointments designed to strengthen its commitment to growth and enhance the support it provides to advisers and network members.
FreeAgent Launches New AI Tool for Landlords to Capture Rental Statements
FreeAgent, the innovative accounting technology company, has launched a new feature into its landlord software, enabling landlords and accountants to harness artificial intelligence to input and reconcile data from letting agent rental statements.
A New Way to Get Paid: Modulr Adds cVRP to Its Collections Hub
Modulr announced the launch of commercial Variable Recurring Payments (cVRP), designed to offer a flexible, faster alternative to traditional payments for businesses
Oxford Risk: Placing the Human at the Center of Wealth and Asset Management Transformation
Share this post: Share on LinkedIn Share on X (Twitter) Share on Facebook Share on […]
CLS Appoints Six New Board Directors
CLS, a financial market infrastructure group delivering settlement, processing and data solutions, today announces the appointment of six new members to its Board of Directors at the CLS Annual General Meeting held on 9 June 2026.
Mobey Forum Calls for a Collaborative Approach to Fraud Prevention in Rethinking Fraud in a Connected World
Mobey Forum’s Fraud Expert Group has published a new report, Rethinking Fraud in a Connected World: Trust, Collaboration, and Resilience in the Digital Ecosystem, exploring how fraud is evolving beyond traditional banking threats and why stronger collaboration across industries is becoming essential.
SumUp Launches in Canada
SumUp, the global financial technology company, today announced its official launch in Canada. The milestone makes Canada SumUp's 38th market and its latest step in building out its presence across the Americas, as the company continues its mission to make commerce simpler and more accessible for all businesses worldwide.
European Fintech Association Elects New Board of Directors
The European FinTech Association (EFA) today announced the election of its new Board of Directors, bringing together senior leaders from across Europe's fintech ecosystem to guide the Association's work over the coming term.
G+D: Navigating the Future of Fintech Agility and Innovation
Share this post: Share on LinkedIn Share on X (Twitter) Share on Facebook Share on […]
Connect IFA Strengthens Leadership Team to Drive Growth and Enhance Adviser Support
Connect IFA Ltd is pleased to announce key leadership appointments designed to strengthen its commitment to growth and enhance the support it provides to advisers and network members.