Mobile phishing attack for Android platform

In this paper, we address the problem of mobile phishing via the implementation of a Trojan that commits phishing through the mobile´s pre-installed applications, which are naturally trusted. It utilizes task interception along with lack of identity indicators, and it overrides the default behavior of some functions to succeed with the attack. We also study the impact of this Trojan on the device´s performance. Finally, we propose some security enhancements that do not rely on the human factor, which are categorized as Operating System (OS) Level solutions, and Secure Socket Layer (SSL) solutions.