Wise scores 28.5
blog.malcore.io
Insights
This blog has been taken from Malcore’s analysis results. The points below are not an exhaustive list. For a full view of Malcore’s static analysis of the Wise App APK view it on Malcore.
Try Malcore for Free!
First 5 scans are free on registration
Discovered Trackers
Facebook Share
MixPanel
Bolts
AppsFlyer
Google Firebase Analytics
Facebook Analytics
Braze (formerly Appboy)
Tealium
Facebook Login
Google CrashLyticsHigh severity warnings from code analysis
The App uses an insecure Random Number Generator.Files may contain hardcoded sensitive information like usernames, passwords, keys etc.App can read/write to External Storage. Any App can read data written to External Storage.App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.This App has capabilities to prevent against Screenshots from Recent Task History/ Now On Tap etc.Suspicious severity warnings from code analysis
N/ADangerous Labelled permissions from Android
Android Dangerous labelled permissions as Dangerous from this library https://developer.android.com/reference/android/Manifest.permission.
Name: MANAGE_ACCOUNTS
Description: Allows an application to perform operations like adding and removing accounts and deleting their password.Name: AUTHENTICATE_ACCOUNTS
Description: Allows an application to use the account authenticator capabilities of the Account Manager, including creating accounts as well as obtaining and setting their passwords.Name: ACCESS_NETWORK_STATE
Description: Allows an application to view the status of all networks.Name: RECORD_AUDIO
Description: Allows application to access the audio record path.Name: WAKE_LOCK
Description: Allows an application to prevent the phone from going to sleep.Name: CAMERA
Description: Allows application to take pictures and videos with the camera. This allows the application to collect images that the camera is seeing at any time.Name: READ_CONTACTS
Description: Allows an application to read all of the contact (address) data stored on your phone. Malicious applications can use this to send your data to other people.Name: NFC
Description: Allows an application to communicate with Near-Field Communication (NFC) tags, cards and readers.To view how these results compare within industry see our analysis:
To view how these scores are created visit our transparency post where we published a description of our phone application threat scoring algorithm.