{"id":"https://openalex.org/W4399477701","doi":"https://doi.org/10.1145/3626232.3658638","title":"A-COPILOT: Android Covert Operation for Private Information Lifting and OTP Theft: A study on how Malware Masquerading as Legitimate Applications compromise Security and Privacy","display_name":"A-COPILOT: Android Covert Operation for Private Information Lifting and OTP Theft: A study on how Malware Masquerading as Legitimate Applications compromise Security and Privacy","publication_year":2024,"publication_date":"2024-06-10","ids":{"openalex":"https://openalex.org/W4399477701","doi":"https://doi.org/10.1145/3626232.3658638"},"language":"en","primary_location":{"id":"doi:10.1145/3626232.3658638","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3626232.3658638","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Fourteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://figshare.com/articles/conference_contribution/A-COPILOT_Android_Covert_Operation_for_Private_Information_Lifting_and_OTP_Theft/27018664","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5023367455","display_name":"Joseph Guan Quan Lim","orcid":"https://orcid.org/0009-0007-3655-8064"},"institutions":[{"id":"https://openalex.org/I168639165","display_name":"Singapore Institute of Technology","ror":"https://ror.org/01v2c2791","country_code":"SG","type":"education","lineage":["https://openalex.org/I168639165"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Joseph Guan Quan Lim","raw_affiliation_strings":["Singapore Institute of Technology, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0009-0007-3655-8064","affiliations":[{"raw_affiliation_string":"Singapore Institute of Technology, Singapore, Singapore","institution_ids":["https://openalex.org/I168639165"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5099069879","display_name":"Zhen Yu Kwok","orcid":"https://orcid.org/0009-0000-7676-0768"},"institutions":[{"id":"https://openalex.org/I168639165","display_name":"Singapore Institute of Technology","ror":"https://ror.org/01v2c2791","country_code":"SG","type":"education","lineage":["https://openalex.org/I168639165"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Zhen Yu Kwok","raw_affiliation_strings":["Singapore Institute of Technology, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0009-0000-7676-0768","affiliations":[{"raw_affiliation_string":"Singapore Institute of Technology, Singapore, Singapore","institution_ids":["https://openalex.org/I168639165"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006118838","display_name":"I.Y Soon","orcid":"https://orcid.org/0009-0008-8624-4220"},"institutions":[{"id":"https://openalex.org/I168639165","display_name":"Singapore Institute of Technology","ror":"https://ror.org/01v2c2791","country_code":"SG","type":"education","lineage":["https://openalex.org/I168639165"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Isaac Soon","raw_affiliation_strings":["Singapore Institute of Technology, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0009-0008-8624-4220","affiliations":[{"raw_affiliation_string":"Singapore Institute of Technology, Singapore, Singapore","institution_ids":["https://openalex.org/I168639165"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5099069880","display_name":"Jun Xian Yong","orcid":"https://orcid.org/0009-0000-5076-4752"},"institutions":[{"id":"https://openalex.org/I168639165","display_name":"Singapore Institute of Technology","ror":"https://ror.org/01v2c2791","country_code":"SG","type":"education","lineage":["https://openalex.org/I168639165"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jun Xian Yong","raw_affiliation_strings":["Singapore Institute of Technology, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0009-0000-5076-4752","affiliations":[{"raw_affiliation_string":"Singapore Institute of Technology, Singapore, Singapore","institution_ids":["https://openalex.org/I168639165"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5099069881","display_name":"Samuel Song Yuhao","orcid":"https://orcid.org/0009-0009-3117-9190"},"institutions":[{"id":"https://openalex.org/I168639165","display_name":"Singapore Institute of Technology","ror":"https://ror.org/01v2c2791","country_code":"SG","type":"education","lineage":["https://openalex.org/I168639165"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Samuel Song Yuhao","raw_affiliation_strings":["Singapore Institute of Technology, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0009-0009-3117-9190","affiliations":[{"raw_affiliation_string":"Singapore Institute of Technology, Singapore, Singapore","institution_ids":["https://openalex.org/I168639165"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5099069882","display_name":"Siti Halilah Binte Rosley","orcid":"https://orcid.org/0009-0008-3644-7564"},"institutions":[{"id":"https://openalex.org/I168639165","display_name":"Singapore Institute of Technology","ror":"https://ror.org/01v2c2791","country_code":"SG","type":"education","lineage":["https://openalex.org/I168639165"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Siti Halilah Binte Rosley","raw_affiliation_strings":["Singapore Institute of Technology, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0009-0008-3644-7564","affiliations":[{"raw_affiliation_string":"Singapore Institute of Technology, Singapore, Singapore","institution_ids":["https://openalex.org/I168639165"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5021323754","display_name":"Vivek Balachandran","orcid":"https://orcid.org/0000-0003-4847-7150"},"institutions":[{"id":"https://openalex.org/I168639165","display_name":"Singapore Institute of Technology","ror":"https://ror.org/01v2c2791","country_code":"SG","type":"education","lineage":["https://openalex.org/I168639165"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Vivek Balachandran","raw_affiliation_strings":["Singapore Institute of Technology, Singapore, Singapore"],"raw_orcid":"https://orcid.org/0000-0003-4847-7150","affiliations":[{"raw_affiliation_string":"Singapore Institute of Technology, Singapore, Singapore","institution_ids":["https://openalex.org/I168639165"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I168639165"],"apc_list":null,"apc_paid":null,"fwci":0.4171,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.50460029,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"155","last_page":"157"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.993399977684021,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9897000193595886,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8070515394210815},{"id":"https://openalex.org/keywords/compromise","display_name":"Compromise","score":0.7917749881744385},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7737905979156494},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.7512603998184204},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6299833655357361},{"id":"https://openalex.org/keywords/android-malware","display_name":"Android malware","score":0.5794380307197571},{"id":"https://openalex.org/keywords/private-information-retrieval","display_name":"Private information retrieval","score":0.5339720249176025},{"id":"https://openalex.org/keywords/android","display_name":"Android (operating system)","score":0.5280978083610535},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4777880609035492},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.12475460767745972},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.07573723793029785}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8070515394210815},{"id":"https://openalex.org/C46355384","wikidata":"https://www.wikidata.org/wiki/Q726686","display_name":"Compromise","level":2,"score":0.7917749881744385},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7737905979156494},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.7512603998184204},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6299833655357361},{"id":"https://openalex.org/C2989133298","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android malware","level":3,"score":0.5794380307197571},{"id":"https://openalex.org/C99221444","wikidata":"https://www.wikidata.org/wiki/Q1532069","display_name":"Private information retrieval","level":2,"score":0.5339720249176025},{"id":"https://openalex.org/C557433098","wikidata":"https://www.wikidata.org/wiki/Q94","display_name":"Android (operating system)","level":2,"score":0.5280978083610535},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4777880609035492},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.12475460767745972},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.07573723793029785},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3626232.3658638","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3626232.3658638","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Fourteenth ACM Conference on Data and Application Security and Privacy","raw_type":"proceedings-article"},{"id":"pmh:oai:figshare.com:article/27018664","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/A-COPILOT_Android_Covert_Operation_for_Private_Information_Lifting_and_OTP_Theft/27018664","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference contribution"}],"best_oa_location":{"id":"pmh:oai:figshare.com:article/27018664","is_oa":true,"landing_page_url":"https://figshare.com/articles/conference_contribution/A-COPILOT_Android_Covert_Operation_for_Private_Information_Lifting_and_OTP_Theft/27018664","pdf_url":null,"source":{"id":"https://openalex.org/S4377196282","display_name":"Figshare","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210132348","host_organization_name":"Figshare (United Kingdom)","host_organization_lineage":["https://openalex.org/I4210132348"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference contribution"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7400000095367432}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W2401561631","https://openalex.org/W2761145057","https://openalex.org/W3015902623","https://openalex.org/W3090890096","https://openalex.org/W3130016194","https://openalex.org/W3204960723","https://openalex.org/W4327808049","https://openalex.org/W4388483464"],"related_works":["https://openalex.org/W2782775281","https://openalex.org/W2560361988","https://openalex.org/W2507113366","https://openalex.org/W3200508744","https://openalex.org/W3025122950","https://openalex.org/W2895504842","https://openalex.org/W2311926078","https://openalex.org/W4383468964","https://openalex.org/W4312234627","https://openalex.org/W3195312353"],"abstract_inverted_index":{"<p":[0],"dir=\"ltr\">This":[1],"paper":[2],"investigates":[3],"an":[4],"underexplored":[5],"avenue":[6],"of":[7,57,107,111],"cybersecurity":[8],"threats":[9],"in":[10],"mobile":[11],"computing,":[12],"with":[13,98],"a":[14,31,39,104],"particular":[15],"focus":[16],"on":[17],"the":[18,55,61,77,89,108,117],"Android":[19,42],"platform,":[20],"which,":[21],"due":[22],"to":[23,66,96,124],"its":[24],"open":[25],"nature":[26],"and":[27,115],"widespread":[28],"adoption,":[29],"is":[30],"fertile":[32],"ground":[33],"for":[34,72,84,120],"cyber":[35],"threats.":[36],"We":[37],"present":[38],"Proof-of-Concept":[40],"(PoC)":[41],"application":[43],"that,":[44],"while":[45],"ostensibly":[46],"benign,":[47],"can":[48],"execute":[49],"covert":[50],"malicious":[51],"operations":[52],"by":[53],"exploiting":[54],"process":[56],"permission":[58],"granted.":[59],"Specifically,":[60],"app":[62],"manipulates":[63],"accessibility":[64,113],"permissions":[65,70],"autonomously":[67],"acquire":[68],"additional":[69],"needed":[71],"executing":[73],"unauthorized":[74],"activities":[75],"without":[76],"user's":[78],"knowledge.":[79],"The":[80,101],"research":[81],"outlines":[82],"conditions":[83],"minimal":[85],"detection":[86],"risk,":[87],"leveraging":[88],"times":[90],"when":[91],"users":[92],"are":[93],"less":[94],"likely":[95],"interact":[97],"their":[99],"devices.":[100],"study":[102],"provides":[103],"deeper":[105],"understanding":[106],"abuse":[109],"potential":[110],"Android's":[112],"features":[114],"highlights":[116],"critical":[118],"need":[119],"comprehensive":[121],"security":[122],"measures":[123],"counteract":[125],"such":[126],"exploitations.":[127]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}