Inishing: A UI Phishing Attack to Exploit the Vulnerability of Inotify in Android Smartphones
Woo Hyun Ahn, Sang-Hyeon Park, Jaewon OH, Seung‐Ho Lim · IEICE Transactions on Information and Systems · 2016
In Android OS, we discover that a notification service called inotify is a new side-channel allowing malware to identify file accesses associated with the display of a security-relevant UI screen. This paper proposes a phishing attack that detects victim UI screens by their file accesses in applications and steals private information.