Blog category
Fraud and identity
How fraud reaches mobile apps through malware, overlays, bots and social engineering, and how Otukan gives your risk engine device-level evidence.
OWASP Mobile Top 10 and mobile fraud: where each risk bites
The OWASP Mobile Top 10 (2024) read through a fraud lens: which risks fraudsters exploit, what an app can see, and how Otukan maps each risk to a control.
- Fraud and identityAndroid accessibility malware
How malware abuses Android accessibility services to read screens and inject input, and how to protect sensitive flows without harming assistive users.
- Fraud and identityCamera injection vs deepfake detection
Why camera injection, liveness and deepfake detection solve different problems in mobile onboarding, who owns each layer and how to test them apart.
- Fraud and identityHow attackers use overlay attacks to commit mobile fraud
How overlay attacks steal credentials and approvals on Android, which screens they target, and how to tell abuse apart from assistive technology.
- Fraud and identityProtect mobile apps against credential stuffing attacks
Where to stop credential stuffing against a mobile app: telling bots from real clients, splitting decisions across app, gateway and backend.