← Back to context

Comment by czk

2 months ago

Not sure about the manifest but recently I've seen talk about some banking apps using SBSLaunchApplicationWithIdentifierAndURLAndLaunchOptions (undocumented function in SpringBoardServices) [0] to try to launch another app on the phone by the bundle id, and they can determine if it's installed or not.

They were using this trick to detect unauthorized apps on the phone.

https://blog.verichains.io/p/technical-analysis-improper-use...

[0] - https://gist.github.com/wh1te4ever/c7909dcb5b66c13a217b49ea3...