CyberCertPrepMobile Security FundamentalsMobile Threats & MalwareEASYFree question

What is 'app impersonation' and how do threat actors use it to steal credentials from legitimate app users?

A.App impersonation involves publishing a fake app with an identical or highly similar name, icon, and description to a popular legitimate app (banking app, email client); users who find the fake via search results or phishing download it and enter credentials, which are exfiltrated to the attacker's C2 server
B.App impersonation is a legal branding dispute and not a security threat
C.App impersonation only works for apps that have not yet launched publicly
D.App impersonation is automatically blocked by both Google Play and the App Store through trademark verification

Why A is correct

Impersonation tactics: (1) same name with Unicode lookalike characters (e.g., PayPӓl vs PayPal - using diacritical marks), (2) identical icon with different developer name, (3) SEO spam in store search results around bank name keywords. The fake app captures logins, may display a fake 'maintenance' error after credential capture. Protections: developer verification in stores, trademark enforcement, and user education to check developer name before installing.

Know someone studying for Mobile Security Fundamentals? Send them this one.

Where this fits in the Mobile Security Fundamentals exam

Mobile Threats & Malware

Repackaged apps, spyware, stalkerware, SMS phishing (smishing), rooting/jailbreaking, and real-world mobile malware families.

This question belongs to the "Mobile Threats & Malware" domain, which makes up about 13% of the Mobile Security Fundamentals exam.

Practice this topic Mobile Security Fundamentals exam guide

What is 'app impersonation' and how do threat actors use it to steal credentials from legitimate app users?

Where this fits in the Mobile Security Fundamentals exam

More free Mobile Threats & Malware questions

One question down. Thousands to go.