A Penetration Testing on Malaysia Popular e-Wallets and m-Banking Apps

e-Wallets and m-banking apps became more and more popular in the developed world, approaching a point of tipping. This can be due to the global use of big and small merchants of paying equipment and the ubiquity of e-wallet and m-banking apps adoption. Many consumers are using e-wallets and m-banking apps that can be an effective cybercrime option. e-Wallets and m-banking apps allow financial transactions via smartphones that give cybercriminals a lucrative opportunity. Mobile technology has become increasingly mainstream and continually strengthening, with the focus on mobile apps protection and forensic analysis developing. In this paper, the security aspect of five popular e-wallets in Malaysia were analyzed. This paper also provides a security analysis of another five leading m-banking apps. The security analysis is based on a security principle that is recommended by Open Web Application Security (OWASP) under Mobile Security Testing Guide (MSTG) and Mobile Security Threats (MST). The static analysis has been done by using three mobile application-testing tools. This study included a variation of vulnerability scanning, code review and, most significantly, penetration testing. Each app complied with the security requirement, but their security features and characteristics, such as encryption, security protocols, and app services, are different to each other. This study was carried out using a DELL computer with Intel Core i7 CPU, 3.40 GHz CPU, 6 GB RAM. Finally, the results revealed the secure e-wallet and m-banking apps among the selected apps.

@article{Hassan2022,
  title     = {A Penetration Testing on Malaysia Popular e-Wallets and m-Banking Apps},
  journal   = {International Journal of Advanced Computer Science and Applications},
  volume    = {13},
  number    = {5},
  year      = {2022},
  publisher = {The Science and Information Organization},
  author    = {Md Arif Hassan and Zarina Shukur and Masnizah Mohd},
  doi       = {10.14569/IJACSA.2022.0130580},
  url       = {https://doi.org/10.14569/IJACSA.2022.0130580}
}