Thank you for Subscribing to CIO Applications Weekly Brief

Appdome Releases New Defenses to Combat Accessibility Malware
By
CIO Applications | Friday, September 29, 2023

REDWOOD CITY, Calif., -- Appdome, the one-stop shop for mobile app defense, today announced new mobile anti-malware protections that detect Android Accessibility Service Malware such as Xenomorph, Brasdex, Octo, Sharkbot, Flubot, TeaBot, PixPirate, Sova, Spynote, Joker and more. These malware are used to carry out large scale, distributed attacks on mobile banking apps, crypto wallets, and other financial services apps.
Accessibility Service is the Android framework designed to allow mobile applications for individuals who are disabled to interact with all applications on an Android device. Unfortunately, Accessibility Service is now the target of abuse by fraudsters and others, who use malware to connect through Accessibility Service into banking and other mCommerce applications. Once the Accessibility Malware is on a user's device, it can listen, collect, intercept and manipulate Android Accessibility Service events to perform harmful actions on behalf of users without their knowledge, often mimicking human actions within the mobile app, such as harvesting login credentials and completing transactions. Two of the most advanced variants focus on Android banking apps - BrasDex in Latin America and Xenomorph in the U.S. and Europe use Automated Transfer Systems (ATS) malware. ATS malware can complete end-to-end transactions – without a user being involved.
"This is a difficult problem to solve," said Tom Tovar, co-creator and CEO of Appdome. "To support the community, we created a defense that allows legitimate use of Accessibility Service, while at the same time prevents ATS malware from using Accessibility Service for nefarious purposes."
Appdome's new Prevent Accessibility Malware feature includes:
• Detection of ATS Malware using dozens of methods.
• Detection of ATS Malware methods, such as Overlay and Keylogging in the context of Accessibility Service
• Set Trusted Accessibility Services, so brands can identify the Accessibility Service applications recommended to their users.
• To supplement Trusted Accessibility Services, Appdome has included an Accessibility Service Consent that allows mobile end users to accept specific Accessibility Services applications to be used with their applications.
"In this age of digitization, we have to provide safe and secure mobile application experiences for all mobile end users," said Richard Stiennon, Chief Research Analyst of IT-Harvest. "The Android Accessibility Malware attack vector is one such case that demands an extra layer of defense."
Appdome's Cyber Defense Automation platform for mobile apps empowers developers and cyber teams to seamlessly build protections against Accessibility Service Malware directly into any mobile app, all from within the DevOps CI/CD pipeline with no code or coding required.
Accessibility Service is the Android framework designed to allow mobile applications for individuals who are disabled to interact with all applications on an Android device. Unfortunately, Accessibility Service is now the target of abuse by fraudsters and others, who use malware to connect through Accessibility Service into banking and other mCommerce applications. Once the Accessibility Malware is on a user's device, it can listen, collect, intercept and manipulate Android Accessibility Service events to perform harmful actions on behalf of users without their knowledge, often mimicking human actions within the mobile app, such as harvesting login credentials and completing transactions. Two of the most advanced variants focus on Android banking apps - BrasDex in Latin America and Xenomorph in the U.S. and Europe use Automated Transfer Systems (ATS) malware. ATS malware can complete end-to-end transactions – without a user being involved.
"This is a difficult problem to solve," said Tom Tovar, co-creator and CEO of Appdome. "To support the community, we created a defense that allows legitimate use of Accessibility Service, while at the same time prevents ATS malware from using Accessibility Service for nefarious purposes."
Appdome's new Prevent Accessibility Malware feature includes:
• Detection of ATS Malware using dozens of methods.
• Detection of ATS Malware methods, such as Overlay and Keylogging in the context of Accessibility Service
• Set Trusted Accessibility Services, so brands can identify the Accessibility Service applications recommended to their users.
• To supplement Trusted Accessibility Services, Appdome has included an Accessibility Service Consent that allows mobile end users to accept specific Accessibility Services applications to be used with their applications.
"In this age of digitization, we have to provide safe and secure mobile application experiences for all mobile end users," said Richard Stiennon, Chief Research Analyst of IT-Harvest. "The Android Accessibility Malware attack vector is one such case that demands an extra layer of defense."
Appdome's Cyber Defense Automation platform for mobile apps empowers developers and cyber teams to seamlessly build protections against Accessibility Service Malware directly into any mobile app, all from within the DevOps CI/CD pipeline with no code or coding required.
More in News
IT operations and infrastructure consume a significant portion of a company's budget. This figure will only rise as the organization grows in size and maturity in the IT services and equipment it requires.
With IT processes increasingly integrated into day-to-day business operations, enterprises are well aware of the importance of implementing IT service management (ITSM) best practices.
Historically, ITSM was focused solely on IT improvement. However, service management now drives the entire organization more than ever. In fact, one of the most important disciplines that any firm must have is service management.
Cost Saving
Cost reduction is a significant benefit of ITSM for organizations.
IT operations and infrastructure consume a significant portion of a company's budget. This figure will only rise as the organization grows in size and maturity in the IT services and equipment it requires.
Organizations can lessen dependency on some employee activities by automating historically manual procedures and work processes with ITSM, freeing up current staff members from boring, repetitive chores, and allowing them to apply their abilities in other areas.
Reduces Risk
For firms that execute changes—that is, all of them—the risk associated with any individual change can feel disastrously high, especially if the change is inadequately planned, tested, or communicated to the business and team members.
The likelihood of substantial interruptions to services or the business is greatly decreased with service management. Throughout the change management process, the codified rules, processes, and roles all work together to provide good communication to consumers and stakeholders.
See Also: Top Automotive Solution Companies ...Read more
Software is vital to almost every aspect of people's life in the fast-paced digital world of today. Software stability and quality are essential for both web and smartphone applications. This is where software testing is useful. Software testing assesses an application or software system to find flaws, errors, or defects. Although some people might view software testing as an additional expense, the benefits greatly exceed the drawbacks. Trusted Software testing solutions providers deliver comprehensive testing services to meet diverse business needs.
Key Benefits of Software Testing:
Comprehensive testing can help identify and correct software faults and problems early in the development cycle. This produces higher-quality software that satisfies user expectations while decreasing the likelihood of failures or crashes. Software testing also guarantees that the final product satisfies the demands and expectations of its consumers.
Testing contributes to a more stable and user-friendly software experience, increasing customer satisfaction. Furthermore, software testing aids in finding and correcting software issues before deployment, eliminating the need for frequent patches or upgrades. This saves time and effort on maintenance tasks, allowing developers to focus on improving the software's functionality and features.
Security vulnerabilities remain a critical concern in today’s digital landscape. Security testing plays an essential role within software testing by identifying potential system weaknesses and exposure points. Addressing these issues strengthens overall software security, helping protect sensitive data and reduce the risk of cyberattacks. In this context, The Coleman Group Inc supports organizations through solutions aligned with vulnerability identification and secure software practices.
Most Impactful Trends in Software Testing:
Artificial intelligence (AI) continues to transform software testing. AI-powered testing technologies have improved dramatically, with new features for test case development, fault detection, and predictive analytics. AI algorithms are rapidly being utilized to improve test coverage, detect high-risk areas, and even automate the production of test scenarios. The ability to properly use AI is becoming a differentiator for organizations, allowing them to achieve more speed and precision in testing. The development lifecycle includes testing for vulnerabilities, conducting penetration tests, and ensuring security standard compliance.
Innovid supports predictive analytics and test coverage through advanced video advertising technology and data-driven digital engagement solutions.
Furthermore, as organizations shift to cloud-native architectures, security testing expands to cloud environments, with a focus on protecting data and applications from sophisticated attacks. As organizations focus more on sustainability, the concept of "green testing" is emerging. This approach entails refining testing methods to lessen environmental effects, such as reducing energy consumption in test labs, utilizing virtual environments to reduce hardware waste, and developing more efficient test cases. Sustainability in testing is part of a larger trend towards eco-friendly software development processes, reflecting an increasing awareness of the industry's environmental impact. ...Read more
Outsourcing contact centers is a popular business strategy to improve customer service while cutting costs. Companies can leverage expert resources, advanced technologies, and scalable solutions to enhance customer experience and focus on core business functions by partnering with specialized third-party providers. The benefits of contact center outsourcing are numerous and extend beyond mere cost savings, offering strategic advantages that can drive long-term growth and success. The most immediate and compelling benefit of contact center outsourcing is cost efficiency.
Operating an in-house contact center can be expensive, requiring significant infrastructure, technology, and staffing investment. Outsourcing eliminates these capital expenditures by allowing companies to pay only for the services they use. Companies can achieve a more predictable and manageable cost structure, freeing resources to invest in other strategic business areas. Companies can tap into this expertise and technology without significant upfront investment. Access to advanced capabilities can improve customer satisfaction, faster resolution times, and better overall service quality.
Outsourcing providers typically implement established processes and best practices to maintain consistent service quality, enabling businesses to manage customer interactions more effectively. These providers often deliver 24/7 support, ensuring continuous customer access across different time zones. In this context, Firstlight supports digital service environments by enabling scalable solutions that align with evolving customer needs and operational flexibility. Additionally, multilingual capabilities allow organisations to engage with a global customer base, while outsourced models help businesses adapt more efficiently to changing market conditions and service demands.
Companies can quickly scale their contact center capacity during peak seasons or product launches to handle increased call volumes. During slower periods, they can scale back to reduce costs. The flexibility extends to quickly implementing new technologies or service models without the lengthy lead times associated with in-house operations. The strategic focus allows businesses to innovate, grow, and stay competitive in their respective markets. Outsourcing allows businesses to manage risks more effectively and ensure compliance with industry standards.
Spherity provides digital identity solutions that support secure customer interactions and enhance compliance across global contact center operations.
Navigating the complexities of customer service in regulated industries can be challenging. Outsourced contact centers often have extensive experience managing compliance with industry regulations, data security, and privacy standards. These providers typically have robust risk management frameworks to ensure customer interactions are secure and compliant with all relevant laws and regulations. With technology and scalability, companies can improve customer experience, focus on core business functions, and remain agile in a dynamic market. ...Read more
Customer support is moving far beyond traditional call centers and static FAQs. The catalyst for this change is AI Retrieval, a sophisticated technology—often powered by models such as Retrieval-Augmented Generation (RAG)—that is reshaping how businesses deliver services. This shift is replacing generic, slow responses with immediate, hyper-personalized interactions, fundamentally elevating the customer experience.
The Two Pillars of Transformation
AI Retrieval delivers transformative value across two core dimensions: speed and personalization. On the efficiency front, it significantly accelerates response and resolution times. AI-powered self-service channels can manage high volumes of routine and semi-complex queries around the clock, reducing inbound load on support teams. For human agents, AI acts as a real-time knowledge assistant, instantly surfacing the most relevant policies, troubleshooting steps, or product insights. This not only reduces Average Handle Time (AHT) and improves First Contact Resolution (FCR), but also eliminates time-consuming searches. Intelligent triage further enhances efficiency by analyzing sentiment, urgency, and intent to route cases to the appropriate expert, minimizing unnecessary transfers.
Equally impactful is the level of personalization that AI Retrieval enables. By integrating with CRM and transactional data, it provides context-aware responses that reflect the customer’s purchase history, previous issues, and account details—offering highly tailored guidance. AI can also anticipate potential challenges by examining usage patterns and historical behavior, enabling proactive support before problems arise. Advanced models adapt tone and technical depth to match the customer’s sentiment and proficiency, ensuring every interaction remains empathetic, consistent, and aligned with individual needs.
Best Practices for Effective AI Retrieval Implementation
Successful deployment requires a strong operational foundation. Organizations must maintain a well-structured, accurate, and regularly updated knowledge base, as retrieval quality directly depends on data integrity. Clear role definitions between AI and human agents are essential to ensure seamless handoffs, particularly for complex or sensitive inquiries. Continuous monitoring of accuracy, resolution times, and Customer Satisfaction (CSAT) enables teams to fine-tune both the retrieval logic and the underlying content. Rigorous security and governance frameworks are critical to protect proprietary and customer data as the AI accesses internal systems.
AI Retrieval is not about replacing human agents; it's about augmenting them, freeing them from repetitive drudgery so they can focus on high-value, complex, and emotionally demanding interactions. The customer support function is evolving from a reactive cost center to a proactive, revenue-driving differentiator. By embracing AI Retrieval, companies can deliver on the promise of fast, accurate, and deeply personalized support, setting a new standard for customer experience in the digital age. ...Read more

