Discover more from Malcore’s Blog
Wise scores 28.5
Malcore scores Wise 28.5
This blog has been taken from Malcore’s analysis results. The points below are not an exhaustive list. For a full view of Malcore’s static analysis of the Wise App APK view it on Malcore.
Try Malcore for Free!
First 5 scans are free on registration
Facebook Share MixPanel Bolts AppsFlyer Google Firebase Analytics Facebook Analytics Braze (formerly Appboy) Tealium Facebook Login Google CrashLytics
High severity warnings from code analysis
The App uses an insecure Random Number Generator.
Files may contain hardcoded sensitive information like usernames, passwords, keys etc.
App can read/write to External Storage. Any App can read data written to External Storage.
App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.
This App has capabilities to prevent against Screenshots from Recent Task History/ Now On Tap etc.
Suspicious severity warnings from code analysis
Dangerous Labelled permissions from Android
Android Dangerous labelled permissions as Dangerous from this library https://developer.android.com/reference/android/Manifest.permission.
Name: MANAGE_ACCOUNTS Description: Allows an application to perform operations like adding and removing accounts and deleting their password.
Name: AUTHENTICATE_ACCOUNTS Description: Allows an application to use the account authenticator capabilities of the Account Manager, including creating accounts as well as obtaining and setting their passwords.
Name: ACCESS_NETWORK_STATE Description: Allows an application to view the status of all networks.
Name: RECORD_AUDIO Description: Allows application to access the audio record path.
Name: WAKE_LOCK Description: Allows an application to prevent the phone from going to sleep.
Name: CAMERA Description: Allows application to take pictures and videos with the camera. This allows the application to collect images that the camera is seeing at any time.
Name: READ_CONTACTS Description: Allows an application to read all of the contact (address) data stored on your phone. Malicious applications can use this to send your data to other people.
Name: NFC Description: Allows an application to communicate with Near-Field Communication (NFC) tags, cards and readers.
To view how these results compare within industry see our analysis:
To view how these scores are created visit our transparency post where we published a description of our phone application threat scoring algorithm.