Suspicious Activity In Malwarelytics Indicates Future Cyber Attack Aiming at 775 Banks

On Thursday, April 22, between 09:03:12 GMT and 09:06:25 GMT, we noticed suspicious activity in the Malwarelytics threat intelligence back-end systems. After investigating the incident, we assume that the activity could be a part of a complex mobile banking malware attack on Android. The scenario is in preparation. The cybercriminals are now attempting to tamper the cyber defense systems (probably from various vendors) that could stop or minimize the attack’s impact.

We want to issue an early warning to the banks that could be affected. Not all of them are currently our customers.

In the case of any questions, do not hesitate to contact us at hello@wultra.com.

Recommendation

We recommend the following next steps:

• Intensify the “be careful” messaging towards your customer base.
• Ask your customers to only download mobile apps from Google Play.
• Remind the customers not to share the internet banking credentials in the mobile app.
• Ask your customers to report any suspicious app activity — glitchy user interface, sudden changes in the app authentication, suspicious instructions, etc.
• Ask your customers not to share their credentials, such as the password or the SMS OTPs, via the phone or chat applications.
• Stay alert and be ready to respond quickly when the mobile malware strikes.

What Happened?

We identified several suspicious requests in our systems for mobile banking malware detection. The structure of these requests and the way these requests were made indicate that they were manually crafted. The attacker created the requests in an advanced setup, reverse-engineering banking apps first and bypassing several protections we have in place in the mobile SDK. While removing those security layers does not alone create a security problem or directly threaten the customer accounts safety, we are now 100% sure that someone is actively trying to tamper with our systems to maximize the impact of the attack and remove the obstacles.

What Was the Attacker Aiming For?

We assume that the attacker was trying to examine our malware detection systems and “train” them not to recognize problematic malware apps (pretending to be the banking apps) by faking the on-device detection results. Luckily, we do not rely only on those detections when accepting the signals from the mobile app and evaluating the risk that apps pose to mobile banking.

Where Did These Requests Originate?

We lost track of the attacker trail at the well-known VPN proxy infrastructure. We notified the provider about the original requests, and the provider promptly proceeded with the investigation on their end. Due to the nature of the attack, we believe that the attacker already broke the law. We will contact the local authorities for assistance with the investigation.

Which Banks Could Be Affected?

We identified the following package names in the requests, the list is likely an updated list that was previously used by BankBot campaigns:

aib.ibank.android
air.app.scb.breeze.android.main.in.prod
air.app.scb.breeze.android.main.my.prod
air.app.scb.breeze.android.main.sg.prod
ao.atlantico.m.android.empresas
ar.bapro
ar.com.redlink.ciudad
ar.com.santander.rio.mbanking
ar.macro
ar.nbad.emobile.android.mobilebank
at.bawag.mbanking
at.easybank.mbanking
at.erstebank.cardcontrol
at.erstebank.george
at.erstebank.vicky
at.ing.diba.client.onlinebanking
at.oberbank.mbanking
at.oebb.ts
at.psa.app.bawag
at.racon.ebba
at.spardat.bcrmobile
at.spardat.netbanking
at.spardat.quickcheck
at.volksbank.volksbankmobile
au.com.amp.myportfolio.android
au.com.bankwest.mobile
au.com.cua.mb
au.com.heritage.app
au.com.ingdirect.android
au.com.macquarie.banking
au.com.mebank.banking
au.com.nab.mobile
au.com.nab.mobile.android.nabconnect
au.com.newcastlepermanent
au.com.pnbank.android
au.com.suncorp.SuncorpBank
biz.mobinex.android.apps.cep_sifrematik
borsacepte.android
br.com.banrisul.mbanking
br.com.bb.android
br.com.bb.android.gov
br.com.bb.android.pj
br.com.bb.android.pluginPDF
br.com.bb.homebroker
br.com.bb.old.android
br.com.gabba.Caixa
br.gov.caixa.fgts.trabalhador
br.gov.caixa.habitacao
br.gov.caixa.webcaixa
bri.delivery.brimobile
cedacri.mobile.bank.asti
cedacri.mobile.bank.bppb
cedacri.mobile.bank.desio.brianza
ch.raiffeisen.android
ch.raiffeisen.phototan
cl.santander.smartphone
cmb.pb
co.com.bbva.mb
co.kr.kdb.android.smartkdb
co.kr.kdb.android.smartkdbPad
co.uk.Nationwide.Mobile
com.AlinmaSoftToken
com.BOQSecure
com.BankAlBilad
com.CredemMobile
com.EurobankEFG
com.IngDirectAndroid
com.NGSE.aki
com.QIIB
com.SCBBizNet
com.SifrebazCep
com.VBSmartPhoneApp
com.a2a.android.burgan
com.abnamro.grip
com.abnamro.nl.mobile.payments
com.abnamro.nl.mobile.wallet
com.adcb.bank
com.adib.mbs
com.advantage.RaiffeisenBank
com.akbank.android.apps.akbank_direkt
com.akbank.softotp
com.alahli.mobile.android
com.albnk.InternetBankingJava
com.alinma.smartphone
com.alpha.pass
com.alseda.ideabank
com.amanalrajhi
com.anz.SingaporeDigitalBanking
com.anz.android
com.anz.android.gomoney
com.aod.smsbanking
com.aol.mobile.aolapp
com.app_banrisulri.layout
com.appfactory.tmb
com.arabbank.arabimobile
com.axabanque.fr
com.axis.cbk
com.axis.mobile
com.bancamarch.bancamovil
com.bancodebogota.bancamovil
com.bancomer.android
com.bancomer.mbanking
com.bancosabadell.fincom
com.bancsabadell.wallet
com.bank.sms
com.bankaustria.android.olb
com.bankcomm
com.bankcomm.university
com.bankcommhd
com.bankia.wallet
com.bankinter.bankintercard
com.bankinter.launcher
com.bankinter.portugal.bmb
com.bankinter.tvm
com.bankofireland.mobilebanking
com.bankofqueensland.boq
com.bapro.movil
com.barclaycard.germany
com.barclays.absa.banking
com.barclays.android.barclaysmobilebanking
com.barclays.bca
com.barclays.bpay
com.barclays.bw.mobile.android.ui
com.barclays.gh.mobile.android.ui
com.barclays.ke.mobile.android.ui
com.barclays.live
com.barclays.mau.mobile.android.ui
com.barclays.mz.mobile.android.ui
com.barclays.portugal.ui
com.barclays.sc.mobile.android.ui
com.barclays.tz.mobile.android.ui
com.barclays.ug.mobile.android.ui
com.barclays.zm.mobile.android.ui
com.barclays.zw.mobile.android.ui
com.bawagpsk.securityapp
com.bbl.mobilebanking
com.bbva.bbvacontigo
com.bbva.bbvawalletmx
com.bbva.netcash
com.bbva.netcashar
com.bbva.nxt_argentina
com.bbva.nxt_peru
com.bcp.bank.bcp
com.bendigobank.mobile
com.bifit.akibank
com.binckbank.evolution
com.bnpp.easybanking
com.bobrewardz
com.boubyanapp.boubyan.bank
com.boursorama.android.clients
com.breezeghana.ui
com.bsffm
com.business_token
com.caisseepargne.android.mobilebanking
com.cajamar.Cajamar
com.cajamar.GCCajamar
com.cajasur.android
com.carrefour.bank
com.cba.android.netbank
com.cba.shiraz
com.cbd.mobile
com.cbq.CBMobile
com.ccba
com.ccbm
com.chase.sig.android
com.chinamworld.bocapad
com.chinamworld.electronicpayment
com.chinamworld.electronicpaymentpad
com.cibc.android.mobi
com.cic_prod.bad
com.citi.citimobile
com.citi.regional.argentina
com.citibanamex.banamexmobile
com.citibank.mobile.au
com.citibank.mobile.citiuaePAT
com.citic.jetcopay
com.citic.mobilewallet
com.cityindex.whitelabel.barclays
com.clairmail.fth
com.cleverlance.csas.servis24
com.cm_prod.bad
com.cmb.ubank.UBUI
com.cmbchina.ccd.pluto.cmbActivity
com.coformatique.starmobile.android
com.coinbase.android
com.comarch.epayments
com.comarch.mobile
com.comarch.mobile.banking.bgzbnpparibas.biznes
com.comarch.mobile.banking.bnpparibas
com.comarch.mobile.banking.splitska
com.comarch.mobile.investment
com.comarch.mobile.investment.ing
com.comarch.security.mobilebanking
com.comdirect.phototan
com.commbank.netbank
com.commerzbank.commerzbanker
com.commerzbank.kontostand
com.commerzbank.msb
com.commerzbank.perspectives
com.commerzbank.photoTAN
com.contentsoftware.android.launcher
com.cs.vasco
com.csam.icici.bank.imobile
com.csg.cs.dnmb
com.db.awm.wealthmgt
com.db.businessline.cardapp
com.db.mm.berlinerbank
com.db.mm.deutschebank
com.db.mm.norisbank
com.db.mobilebanking
com.db.pbc.meubanco
com.db.pbc.miabanca
com.db.pbc.mibanco
com.db.pbc.phototan.db
com.db.tabbanking
com.defencebank.locationapp
com.dib.app
com.discoverfinancial.mobile
com.ducont.meethaq
com.ducont.muscatbank
com.enbddeals
com.entersekt.authapp.dkb
com.everis.bsa_1_3
com.evolaris.rmclub
com.evolaris.rmclubooe
com.exictos.mbanka.atlantico
com.ezmcom.softtoken.adcb
com.finansbank.mobile.cepsube
com.finanteq.finance.ca
com.firstdirect.bankingonthego
com.fpe.comptenickel
com.fronde.mbanking.android.pckg.bpi
com.fss.indus
com.fullsix.android.labanquepostale.accountaccess
com.fusion.banking
com.fusion.beyondbank
com.garanti.bonusapp
com.garanti.cepbank
com.garanti.cepsubesi
com.getingroup.mobilebanking
com.gieseckedevrient.android.wallet.rabo
com.gimb.paydirekt.app
com.google.android.1gm1
com.google.android.play.games
com.greater.Greater
com.groupama.toujoursla
com.grppl.android.shell.BOS
com.grppl.android.shell.CMBlloydsTSB73
com.grppl.android.shell.halifax
com.grupoavalav1.bancamovil
com.gt.citic
com.hanabank.ebk.channel.android.cpb
com.hanabank.ebk.channel.android.hananbank
com.hanabank.ebk.channel.android.hananftf
com.hanabank.ebk.channel.mini
com.hanabank.ewallet
com.higherone.mobile.android
com.hipercard.app
com.hipotecario.mobile
com.hsbc.hsbcukcmb
com.hshnordbank.hshbanking
com.htsu.hsbcpersonalbanking
com.ibk.neobanking.mini
com.ibk.neobanking.silver
com.ibk.onebankA
com.ibk.scbs
com.ibk.scbs.tab
com.ibk.smartmoney
com.icbc.hwhce
com.icbc.mobile.abroadARG
com.icbc.mobile.abroadbank
com.icomvision.bsc.mobilebank
com.icsfs.sn.test
com.idamob.tinkoff.android
com.ideaknow.catalunyacaixa
com.ideaknow.ing
com.ie.capitalone.uk
com.iflex.fcat.mobile.android
com.ifs.banking.fiid3836
com.ifs.banking.fiid4202
com.ifs.banking.fiid4387
com.ifs.banking.fiid4794
com.ifs.banking.fiid7330
com.imaginbank.app
com.imb.banking2
com.infinum.ebs
com.infinum.erste
com.infonow.bofa
com.ing.diba.mbbr2
com.ing.diba.smartsecure2
com.ing.mobile
com.ing.mobilepayments
com.ingbanktr.cuzdan
com.ingbanktr.ingmobil
com.intertech.mobilemoneytransfer.activity
com.isimplelab.ibank.almaz
com.isis_papyrus.raiffeisen_pay_eyewdg
com.itau
com.itau.applight
com.itau.empresas
com.itaucard.activity
com.kasikorn.retail.mbanking.wap
com.kasikornbank.retail.kmerchant
com.kb.pfms
com.kbc.mobilebanking
com.kbstar.kbbank
com.kbstar.kbbiz
com.kbstar.minibank
com.kcbbankgroup.android
com.kebhana.android.oneqinet
com.kfh.kfhonline
com.kftc.bankpay.android
com.kftc.jbsmb
com.kftc.jejusmb
com.kftc.knbsmb
com.kftc.shsmb
com.kjbank.smart.airbank
com.kjbank.smart.cbanking
com.kjbank.smart.pbanking
com.konylabs.ItauMobileBank
com.konylabs.capitalone
com.konylabs.cbplpat
com.ktb.bizgrowing
com.kutxabank.android
com.kutxabank.appatxas
com.kuveytturk.mobil
com.laposte.bnum.digiposteplus
com.latuabanca_tabperandroid
com.latuabancaperandroid
com.latuabancaperandroid.ispb
com.latuabancaperandroid.pg
com.lloydsbank.businessmobile
com.lumi.dekabank
com.macif.mobile.application.android
com.magiclick.odeabank
com.mbanking.nbb
com.mediaengine.allianzbank
com.mediolanum.android.bst
com.mediolanum.android.fullbanca
com.mediolanum.android.wallet
com.mobileloft.alpha.droid
com.mobilenik.bsf
com.mobilenik.ubika.bna
com.mod.scb.mobile.release
com.moneybookers.skrillpayments
com.moneybookers.skrillpayments.neteller
com.monitise.client.android.clydesdale
com.monitise.client.android.yorkshire
com.monitise.coop
com.mosync.app_Banco_Galicia
com.nbo.ar
com.nbo.mobs
com.ncb.softtoken
com.nearform.ptsb
com.niobiumlabs.eurobank.activity
com.ocito.cdn.activity.creditdunord
com.ofss.fcdb.mobile.android.phone.bahl.launcher
com.opentecheng.android.webank
com.palatine.android.mobilebanking.prod
com.paypal.android.p2pmobile
com.paypal.here
com.posteitaliane.postemobilestore
com.pozitron.albarakaturk
com.pozitron.anb
com.pozitron.ingkurumsal
com.pozitron.iscep
com.pozitron.vakifbank
com.pressmatrix.initiativbanking
com.rak
com.rbs.mobile.android.coutts
com.rbs.mobile.android.couttsint
com.rbs.mobile.android.natwest
com.rbs.mobile.android.natwestbandc
com.rbs.mobile.android.rbs
com.rbs.mobile.android.rbsbandc
com.rbs.mobile.android.rbsm
com.rbs.mobile.android.ubn
com.rbs.mobile.android.ubr
com.rev.mobilebanking.westpac
com.rsi
com.rsi.ruralviawallet
com.s4m
com.sa.baj.aljazirasmart
com.sabb
com.safeon.approval
com.samba.mb
com.santander.app
com.santandermovelempresarial.app
com.sbi.SBFreedom
com.sbi.SBIFreedomPlus
com.sc.breezeid.banking
com.sc.breezeje.banking
com.sc.breezenigeria.banking
com.sc.danb.scbankapp
com.sc.danb.scbankappkrsme
com.sc.privatebank.pvm
com.scb.ae.bmw
com.scb.breezebanking.bw
com.scb.breezebanking.hk
com.scb.breezebanking.ke
com.scb.breezebanking.tz
com.scb.breezebanking.ug
com.scb.breezebanking.zm
com.scb.breezebanking.zw
com.scb.dash.android
com.scb.phone
com.scb.pk.bmw
com.scb.poc.bmw
com.scbup2me
com.sccp.gbp.emv
com.schwab.mobile
com.scrignosa
com.sella.BancaSella
com.sfy.crediapp
com.shinhan.mobilebankbook
com.shinhan.sbanking
com.shinhan.sbanking2015
com.shinhan.sbankmini
com.shinhan.smartotp
com.shinhan.smartplaza.customer
com.shinhan.speedup
com.snapwork.hdfc
com.societegenerale.lappli.lab
com.softtech.isbankasi
com.softtech.parakod
com.solidpass.main.bsf
com.starfinanz.mobile.android.dkbpushtan
com.starfinanz.mobile.android.pushtan
com.starfinanz.smob.android.sbanking
com.starfinanz.smob.android.sfinanzstatus
com.suntrust.mobilebanking
com.supervielle.mBanking
com.swmind.vcc.android.bzwbk_mobile.app
com.targo_prod.bad
com.td
com.teb
com.tecnocom.cajalaboral
com.tescobank.mobile
com.tmob.denizbank
com.tmobtech.halkbank
com.todo1.davivienda.mobileapp
com.todo1.mobile
com.tokpag
com.trinetix.platinum
com.ubank.internetbanking
com.ubanksu
com.ubs.swidK2Y.android
com.ubs.swidKXJ.android
com.ukrgazbank.UGBCardM
com.unicredit
com.unionbank.ecommerce.mobile.android
com.usaa.mobile.android.usaa
com.usbank.mobilebanking
com.vakifbank.mobile
com.vipera.ts.starter.FGB
com.vipera.ts.starter.MashreqAE
com.vipera.ts.starter.MashreqQA
com.vipera.ts.starter.QNB
com.webmoney.my
com.westernunion.moneytransferr3app.eu
com.wf.wellsfargomobile
com.wooribank.bond
com.wooribank.otp.smart
com.wooribank.pib.smart
com.wooribank.pot.smart
com.wooribank.smart.mwib
com.wooribank.smlg_android
com.woorifis.stax
com.wr.biz.sb
com.wr.biz.tb
com.wr.pib.quick
com.yahoo.mobile.client.android.mail
com.ykb.android
com.ykb.android.db
com.ykb.android.mobilonay
com.ykb.avm
com.zenithBank.eazymoney
com.zentity.ing
com.zentity.sbank.csobsk
com.ziraat.ziraatmobil
coop.bancocredicoop.bancamobile
cz.airbank.android
cz.csas.app.mujstav
cz.csas.business24
cz.csas.georgego
cz.csob.smartbanking
cz.csob.smartklic
cz.kb.mba.business
cz.mbank
cz.moneta.smartbanka
cz.rb.app.smartphonebanking
cz.sberbankcz
cz.ulikeit.fio
de.adesso.mobile.android.gadfints
de.bundesbank.bbkapp
de.comdirect
de.comdirect.android
de.commerzbanking.mobil
de.consorsbank
de.direkt1822.banking
de.dkb.portalapp
de.dzbank.kartenregie
de.fgi.ms.securesign
de.fgi.ms.vrsecurecard
de.fiducia.smartphone.android.banking.bb
de.fiducia.smartphone.android.banking.eb
de.fiducia.smartphone.android.banking.nibc
de.fiducia.smartphone.android.banking.psd
de.fiducia.smartphone.android.banking.vr
de.fiducia.smartphone.android.securego.vr
de.fiducia.smartphone.android.securego.wl
de.ing_diba.kontostand
de.postbank.finanzassistent
de.sdvrz.ihb.mobile.app
de.sdvrz.ihb.mobile.secureapp.netbank.produktion
de.sdvrz.ihb.mobile.secureapp.sparda.produktion
de.stocard.stocard
enbd.mobilebanking
enbd.mobilebanking.ksamobile
enbd.mobilebanking.smartbusiness
es.bancopopular.nbmpopular
es.bancosantander.android.confirming
es.bancosantander.apps
es.bancosantander.empresas
es.bancosantander.wallet
es.bmn.bmnapp2
es.bmn.cajagranadaapp2
es.bmn.cajamurciaapp2
es.bmn.sanostraapp2
es.caixagalicia.activamovil
es.caixageral.caixageralapp
es.cajaespanaduero.cajaespanadueroapp
es.ccm.ccmapp
es.cecabank.ealia0487appstore
es.cecabank.ealia2048appstore
es.cecabank.ealia2103appstore
es.cecabank.ealia2105appstore
es.cm.android
es.connectis.mobile.alrajhi
es.evobanco.bancamovil
es.ibercaja.ibercajaapp
es.ibercaja.wallet
es.lacaixa.app.ingresos
es.lacaixa.app.localizadortv
es.lacaixa.app.runtime.android
es.lacaixa.hceicon2
es.lacaixa.mobile.android.newwapicon
es.lacaixa.quickcaixa
es.lacaixa.rbxicon
es.liberbank.cajasturapp
es.redsys.walletmb.app.kutxa.pro
es.redsys.walletmb.app.laboralkutxa.pro
es.santander.Criptocalculadora
es.santander.money
es.univia.unicajamovil
esi.mobile.android.oneclick
eu.eleader.mobilebanking.abk
eu.eleader.mobilebanking.bre
eu.eleader.mobilebanking.nbk
eu.eleader.mobilebanking.pekao
eu.eleader.mobilebanking.pekao.firm
eu.eleader.mobilebanking.raiffeisen
eu.inmite.prj.kb.mobilbank
eu.unicreditgroup.hvbapptan
finansbank.enpara
fr.axa.monaxa
fr.banquedesavoie.cyberplus
fr.banquepopulaire.cyberplus
fr.banquepopulaire.cyberplus.pro
fr.bnpparibasentreprise.android
fr.bred.fr
fr.creditagricole.androidapp
fr.creditagricole.macarteca
fr.laposte.lapostemobile
fr.lcl.android.customerarea
fr.lcl.android.entreprise
ftb.ibank.android
gr.exodus.easypay
gr.winbank.cardoffers
gr.winbank.mobile
gr.winbank.mobile.albania
gr.winbank.mobile.bulgaria
gr.winbank.mobile.cyprus
gr.winbank.mobile.romania
gr.winbank.mobile.ukraine
gr.winbank.mobilenext
gr.winbank.yellowday
hr.asseco.android.jimba.mUCI.bg
hr.asseco.android.jimba.mUCI.bl
hr.asseco.android.jimba.mUCI.cz
hr.asseco.android.jimba.mUCI.hu
hr.asseco.android.jimba.mUCI.ro
hr.asseco.android.jimba.mUCI.rs
hr.asseco.android.jimba.mUCI.sk
hr.asseco.android.jimba.mUCI.ua
hr.asseco.android.mtoken.credem.credemprod
hr.asseco.android.mtoken.pekao
hu.erstebank.ersteworld
in.co.bankofbaroda.mpassbook
in.co.unionbankofindia.mpassbook
it.bcc.iccrea.mycartabcc
it.bnl.apps.banking
it.bpm.bpmandroid
it.bpm.ptbandroid
it.carige
it.cividale.bpconline
it.copergmps.rt.pf.android.sp.bmps
it.copergmps.rt.pf.android.tab.ui.bmps
it.creval.bancaperta
it.elfisystems.ncbc.mobile
it.gruppobper.ams.android.bper
it.ingdirect.app
it.nogood.container
it.popso.SCRIGNOapp
it.relaxbanking
it.reply.up.mobile.android
it.secservizi.mobile.atime
it.secservizi.mobile.atime.bpaa
it.secservizi.mobile.atime.bpvi
it.ubi.digitalcode
it.ubiss.mpay
it.volksbank.android
kr.co.bsbank.bcs.smart
kr.co.bsbank.sbe.smart
kr.co.bsbank.sbp.smart
kr.co.dgb.dgbb
kr.co.dgb.dgbp
kr.co.dgb.dgbrn
kr.co.jbbank.smartbank
kr.or.giro.android
ktbcs.netbank
lu.bcee.snetmobile
may.maybank.android
mbanking.NBG
mobi.societegenerale.mobile.lappli
mobi.societegenerale.mobile.lapplipro
mobi.societegenerale.mobile.sogecashnet
mobile.alphabank.myAlphaWallet_android
mobile.santander.de
mx.bancosantander.supermovil
net.atos.alrajhi.mobilekw
net.bnpparibas.mescomptes
net.inverline.bancosabadell.officelocator.activobank
net.inverline.bancosabadell.officelocator.android
net.inverline.bancosabadell.officelocator.android_urq
net.typeengine.deutschebank
nh.smart
nh.smart.card
nh.smart.mobilecard
nh.smart.mtax
nh.smart.nhcok
nh.smart.nhibzbanking
nh.smart.opensign
nh.smart.speed
nl.asnbank.asnbankieren
nl.rabomobiel
nl.regiobank.regiobankieren
nl.snsbank.snsbankieren
nl.snsbank.snshelp
no.santander.mobilbank
nz.co.amp.myportfolio.android
nz.co.anz.android.mobilebanking
nz.co.asb.asbmobile
nz.co.asb.mobilebusiness
nz.co.bnz.droidbanking
nz.co.bnz.droidbusinessbanking
nz.co.cooperativebank
nz.co.kiwibank.mobile
nz.co.westpac
org.banelco
org.banelco.ibay
org.banelco.qlms
org.banelco.rbts
org.banelco.sdmr
org.banking.bom.businessconnect
org.banking.bsa.businessconnect
org.banking.stg.businessconnect
org.banking.stgeorge.payway
org.banking.westpac.payway
org.banksa.bank
org.bom.bank
org.microemu.android.model.common.VTUserApplicationLIN
org.microemu.android.model.common.VTUserApplicationLINKMB
org.stgeorge.bank
org.stgeorge.bankorg.westpac.bank
org.westpac.bank
org.westpac.col
org.westpac.mpos1
pe.com.interbank.mobilebanking
pl.aliorbank.kantorwalutowy
pl.bzwbk.bzwbk24
pl.bzwbk.ibiznes24
pl.bzwbk.mobile.tab.bzwbk24
pl.com.suntech.mobileconnect
pl.eurobank
pl.fmbank.smart
pl.ing.ingmobile
pl.ing.mojeing
pl.ipko.mobile
pl.ipkobiznes.mobile
pl.mbank
pl.millennium.corpApp
pl.pkobp.iko
pl.plus.plusonline
posteitaliane.posteapp.appbpol
pt.BancoPopular.android.app
pt.bancobest.android.mobilebanking
pt.bancobpi.mobile.autorizacoesempresas
pt.bancobpi.mobile.fiabilizacao
pt.cgd.caixadirecta
pt.cgd.caixadirectaempresas
pt.cgd.plim
pt.novobanco.nbapp
pt.santandertotta.mobileparticulares
pt.sibs.android.mbway
riyad.bankingapp.android
rm.beleggen
ro.btrl.mobile
royalascot.app
ru.abb.mobilebank
ru.alfabank.mobile.android
ru.alfabank.oavdo.amc
ru.avangard
ru.bcsb.app
ru.bm.mbm
ru.bpc.mobilebank.android
ru.ftc.faktura.absolutbank
ru.ftc.faktura.aksonbank
ru.ftc.faktura.baltinvestbank
ru.ftc.faktura.bankffin
ru.ftc.faktura.ccb
ru.ftc.faktura.cfb
ru.ftc.faktura.credprombank
ru.ftc.faktura.eurocitybank
ru.ftc.faktura.orbank
ru.ftc.faktura.ruscobank
ru.ftc.faktura.sistemabank
ru.ftc.faktura.vlbb
ru.ftc.faktura.vyborgbank
ru.mw
ru.raiffeisennews
ru.rosbank.android
ru.sberbank_sbbol
ru.sberbankmobile
ru.simpls.brs2.mobbank
ru.simpls.mbrd.ui
ru.ucb.android
ru.vtb24.mobilebanking.android
ru.vtb24.mobiletoken.android
ru.yandex.money
se.accumulate.me.core.androidclient.csb
se.accumulate.me.core.androidclient.occidente
softax.pekao.powerpay
spring.santander.url
src.com.idbi
th.co.ktam.ktampvd
tr.com.sekerbilisim.mbank
tsb.mobilebanking
ua.com.cs.ifobs.mobile.android.otp
ua.com.cs.ifobs.mobile.android.sbrf
ua.oschadbank.online
ua.pentegy.avalbank.production
ua.privatbank.ap24
ua.vtb.client.android
uk.co.bankofscotland.businessbank
uk.co.metrobankonline.personal.mobile
uk.co.northernbank.android.tribank
uk.co.santander.businessUK.bb
uk.co.santander.santanderUK
uk.co.santander.smartbank
uk.co.tsb.mobilebank
wit.android.bcpBankingApp.activoBank
wit.android.bcpBankingApp.millennium
wit.android.bcpBankingApp.millenniumPL
www.ingdirect.nativeframe

In the case of any questions, do not hesitate to contact us at hello@wultra.com.