We expose a new security leak for smartphone users, which allows to stole user personal data by accessing the mobile operator user page when auto-login is employed. We show how any "apparently" genuine app can steal these data from some mobile operators, affecting more than 80% of Italian mobile smartphones.
@article{arxiv.2003.08458,
title = {My SIM is Leaking My Data: Exposing Self-Login Privacy Breaches in Smartphones},
author = {Andrea Coletta and Gaia Maselli and Mauro Piva and Domenicomichele Silvestri and Francesco Restuccia},
journal= {arXiv preprint arXiv:2003.08458},
year = {2020}
}