Malware & Viruses

Malware is software designed to steal information, interfere with a device, or carry out unauthorized actions. Viruses are one form of malware. On mobile devices, threats can arrive through harmful apps or exploits against vulnerable software.^[1][2]

For financial applications, the resulting risk includes stolen credentials, exposed private data, or interference with the app’s running process. Information theft outside your app and manipulation inside it require different controls.^[3]

Examples

• A harmful app collects sensitive information that an attacker later uses in an account-recovery attempt.
• Malicious web content exploits an outdated operating system and exposes data stored on the device.^[2]
• Malicious tooling injects code into a financial app or hooks a function during a sensitive action.

How Cipherstep helps

Cipherstep addresses the observable integrity effects of a compromise. RASP can interrupt supported manipulation inside the integrated app, and the Attestation SDK supplies device and runtime evidence for the Decision API to evaluate. Requiring that evaluation before a sensitive action gives your backend an opportunity to restrict an unsafe session.

Analysts can review the affected evaluations and available user history, then compare them with your account and transaction records. Alerts can route relevant findings to the team responsible for investigation and response.

Cipherstep is not device-wide antivirus and does not disinfect a phone or claim detection of every malware family. Stolen credentials used on a clean device may produce healthy integrity evidence. Platform malware protection, operating-system updates, strong authentication, and secure account recovery remain necessary.^[1][2][3]