A Proof of Concept Malware for Interacting with the Smart-ID Android Application

Abstract

The aim of this thesis is to study how a malicious application can interact with the Smart- ID Android application. The result of this paper is a proof of concept application that is able to use root privileges to capture the PINs entered by the user in the Smart-ID transaction screen and is later able to automatically enter the captured PINs in the transaction screen.