When you sign up for some online services, like banking or finance, there’s usually a Know Your Customer (KYC) process. This is supposed to be a more robust method of verifying users so that these accounts aren’t being used for fraud. However, researchers have discovered an Android toolkit that lets users hack the KYC verification process.
Android toolkit can hack KYC verification process
According to the researchers at Cybernews, there’s a new Android toolkit out in the wild that seems to allow users to hack the KYC verification process. Now, if you’ve undergone the process, it usually involves things like scanning identity cards or passports. Sometimes it also involves doing a live selfie that ensures that a human is signing up, not a bot.
It feels like it’s almost like an airtight process that would be hard to fake or get around. Well, as it turns out, when there’s a will, there’s a way. Through this Android toolkit, the attacker can feed fake photos from a phone to the verification system. This means that attackers can use these images to sign up for fake online accounts or even steal identities.
It isn’t as simple as uploading a photo. The toolkit allows attackers to make it seem like these images and videos were captured live by a phone’s camera. It goes even further by manipulating information about the phone, its location, security state, and so on. Kind of scary, isn’t it? But thankfully, there is some good news.
No proof of exploitation…yet
For those worried that this hack could have been used to create fake accounts in their name and imagery, you can rest assured. This is because according to the researchers, there’s no proof of identity verification being exploited yet. They also note that because the KYC process might differ from company to company, this toolkit might not be able to fool all of them.
Plus, they also say that this attack requires an Android device with extensive system modifications. This means that this isn’t just some point-and-click tool that anyone can use right out of the box. However, it doesn’t mean that companies should take it easy. Cybernews has provided companies with a series of steps that will hopefully allow them to beef up their security systems and verification process.
The post Researchers Find an Android Toolkit That Can Hack KYC Verification Checks appeared first on Android Headlines.
​Â
