Fake ID Detector

Android App Analysis and Review: Fake ID Detector, Developed by McAfee LLC. Listed in Tools Category. Current Version Is 1.0.0.3190, Updated On 21/08/2014 . According to users reviews on Google Play: Fake ID Detector. Achieved Over 50 thousand Installs. Fake ID Detector Currently Has 725 Reviews, Average Rating 4.1 Stars

Fake ID is an Android vulnerability that allows applications to impersonate other applications by copying their identity that can then be used for malicious purposes.

Allows for malicious apps to impersonate other applications by copying their identity – their digital certificate(s) used to cryptographically sign the application package (APK file) – and combining it with their own signature making a chain whereby the parent signature (also known as the “issuer”) can be used to verify the child signatures.

The Fake ID vulnerability, is present in most Android versions 2.1 and above. Depending on the hardware manufacturer and the version of Android running on your device you may be vulnerable to one or more of more privileged attack vectors as described by BlueBox who discovered the vulnerability and of course, given this problem relates to chains of certificates, a hacker could chose to include many certificates to cover all of these options, and more, in their specifically crafted malware.

McAfee Fake ID Detector enables you to quickly discover if your applications contain the exploit.

Privacy Protection
Malicious

http://blogs.mcafee.com/mcafee-labs/beware-impostor-android-apps

Read more