Banking app stopped working in secondary profile after latest update

jill

After today's update, my one banking app stopped working. It says device might be compromised, jail broken or rooted. I tried reinstalling it, reinstalling the profile, however nothing is making it work again. My banking profile has google play store and google play services enabled with necessary permissions granted.

I can however install and run the banking app successfully in owner profile.

Edit: There was no update in the banking app which may have caused this, so this has something to do with latest update of Graphene OS

fid02

jill Is it possible to reveal the name of the app, so that others will be able to try to reproduce this on both GrapheneOS and stock PixelOS?

GrapheneOS

jill

Edit: There was no update in the banking app which may have caused this, so this has something to do with latest update of Graphene OS

That's an incorrect assumption. The Play Integrity API and similar checks are enforced server side so changes to how they use the results are done server side. Apps also can and do often ship many of their major changes gated behind feature flags which are controlled by the server setting which flags are enabled. Apps can completely change their behavior with feature flags other than not being able to add new externally exported interfaces, requested permissions, etc.

GrapheneOS

Install the app from the sandboxed Play Store rather than from another source. Apps can see their install source and can also check if they were installed from the Play Store via the Play Integrity API. More apps are now doing that since it was added as a Play Integrity API feature, but some apps were doing it before.

jill

@fid02 App's name is Standard Chartered Bank.

@GrapheneOS I see, thanks for clarifying. I installed it from play store directly, but the strange thing is that app is working completely fine in owner profile, but fails to work in secondary profiles and private spaces even with google play services enabled.

fid02

jill App's name is Standard Chartered Bank.

I can't find an app on Play Store with just that name, but several apps made by that company called "SC Mobile" with regional variants. What's the app's name in Play Store?

jill

@fid02 thanks for helping, appreciate it. App's name is SC Mobile Pakistan.

fid02

jill thanks for helping, appreciate it. App's name is SC Mobile Pakistan.

The problem is reproducible for some of these companies' apps on stock PixelOS as well. Haven't tested the Pakistan app yet but I'll do it later. You don't have to waste time debugging this right now, it's likely the app is blocking being used in secondary profiles and private space but I'll check.

fid02

jill SC Mobile Pakistan on stock PixelOS on Pixel 6a is redirecting me to a website saying that my usage has been blocked for security reasons, but only when the app is run in a secondary profile or in Private Space. I don't have the link to the website it opens because I had to wipe the device.

So the app developers are blocking using it in secondary profiles.

jill

I ran the logs through GPT and it gave me summary of issues

SELinux denials : avc: denied { read } ...
Property access denied : Access denied finding property ...
ART APEX data files untrusted : ART APEX data files are untrusted.
Unable to find pattern file : Unable to find pattern file ...

jill

fid02 Yeah, that also seems to be the case for me.

Karul

fid02
This is the link:
https://av.sc.com/configuration/sg/rasp/?error=1011

Security Warning

If you see this page, then your current SC Mobile App is not the latest version or your device is not secured. Please download the latest version of SC Mobile or update your device.

For security tips, please refer https://www.sc.com/global/security-tips/

Error!
Code: #1011

I'm having similar experience for another app, they both crash and redirect us to a website when used in secondary profiles. I wonder if they are using similar SDKs?