Harvesting developer credentials in Android apps
Yajin Zhou, Lei Wu, Zhi Wang, Xuxian Jiang · 2015
Developers often integrate third-party services into their apps. To access a service, an app must authenticate itself to the service with a credential. However, credentials in apps are often not properly or adequately protected, and might be easily extracted by attackers. A leaked credential could pose serious privacy and security threats to both the app developer and app users.