Inishing: A UI Phishing Attack to Exploit the Vulnerability of Inotify in Android Smartphones

Abstract

In Android OS, we discover that a notification service called inotify is a new side-channel allowing malware to identify file accesses associated with the display of a security-relevant UI screen. This paper proposes a phishing attack that detects victim UI screens by their file accesses in applications and steals private information.