Tapjacking about qark HOT 2 CLOSED

I don't see "static tapjacking" anywhere, if so it is a typo. Please let us know where you found that term.

The demo uses a long-running "Toast", set on a timer, so it eventually goes away. You can tweak this in the template, if you need it to be longer.

As for the specifics of the tapjacking attack, I would suggest searching the Internet for details. There are plenty of sites explaining it, videos, etc.

We chose to use a transparent overlay to make it easier to demonstrate that you are in fact tapping items in the victim app.

from qark.

Hey, thanks for your response.

The term is in the README.md "static tapjacking mitigation detection" - could you explain what this means?

There's different kinds of tapjacking attacks (ones that propagate touches to the underlying application and ones that can capture touches in the overlay), which also differ per Android version. Thanks for specifying it's a Toast message you're displaying (which means touches are captured by the victim app). With newer Android versions there have been new attacks (leveraging SYSTEM_ALERT_WINDOW) that allow to capture touches in the overlay, and I was wondering whether QARK implemented this.

from qark.