Exploration of Malicious Applications on Digital Invitations with Static Analysis Method Using ImmuniWeb
Irman Yunal Wirdani, Ilham Dwi Harjanto, Charles Ci-Wen Lim, Mareta Wahyu Ardyani · 2023
In this study, we employed ImmuniWeb for a comprehensive static analysis of an apparently malicious digital wedding invitation application named “undangan_pernikahan.apk.” Our investigation was motivated by the objectives of detecting potential indicators of malware presence, evaluating the potential repercussions of malware assaults, and furnishing practical suggestions for mitigating the associated threats for end users. The focal point of our scrutiny encompassed outlining security and privacy vulnerabilities inherent in digital invitation applications. The outcomes of our analysis underscore the presence of notable vulnerabilities within the privacy framework, the existence of potentially harmful permissions, and security risks ranging from moderate to substantial levels. Our assessment categorizes the application’s threat level as lying within the spectrum from moderate to elevated, thereby accentuating the plausibility of both personal data exfiltration and the proliferation of malware. The research accentuates the criticality of adopting stringent security countermeasures and vehemently urges both users and developers to adopt a proactive stance in the face of potential malware and security compromises. The findings of this study illuminate the pressing need for heightened security measures within the domain of digital invitation applications and advocate for a collective, resolute response against these evolving security challenges.