The missing signal in gaming fraud: What the running game can tell you

In the publicly documented malicious campaigns reviewed for this post, we found no evidence of an AI agent running the full attack chain against a mobile application. But AI is already taking over individual stages, changing the economics of reverse engineering, runtime instrumentation, and attack adaptation.

Cybersecurity Awareness Month 2026 is about making life harder for attackers. At runtime, that means raising the cost of analyzing, tampering, and abusing web and mobile applications.

AI is beginning to take over the decisions between automated attack stages, not just execute the steps themselves. As systems learn from results, pivot approaches, and coordinate with other agents, the attacker starts to behave more like a feedback loop.

Independent security researcher 0xobfuscated developed a protection-bypass technique against Promon Shield for Mobile™ on Android. They contacted us before publishing, giving our teams time to investigate the research, strengthen the protection, and make updated releases available to customers.

Attacks no longer stay inside one app, one region, or one stage of the kill chain. A runtime intelligence loop helps app protection learn from the wider threat picture. Then it turns that learning into detectors, policies, and controls that run locally inside protected apps.

GPU debugging tools were built to help developers inspect rendering. But the same mechanisms can become an injection path when turned against a shipping app. Our research shows how Vulkan layers can be abused on Android, with mobile games as a particularly attractive target.

Application attestation should prove more than that the right code was delivered. It must show that the protected runtime is still intact and operating without detected interference when trust is granted.

Certification establishes an important security baseline. Wallet Providers must still verify genuine Wallet Instances, monitor operational security posture, and respond when trust changes. Here is what the current Architecture and Reference Framework (ARF) says, what it leaves open, and what mobile wallet teams should examine next.

Your applications run on devices and browsers you don’t control. Attempting to make those environments trustworthy isn't the answer. Instead, create a protected runtime inside them, verify its state, and only then allow sensitive data to enter.

CBUAE Notice 2176 gives UAE financial institutions an urgent set of actions against Android malware. It also makes the mobile app, its runtime environment, and the evidence it produces part of the fraud response.

Promon Shield for Web™ brings Promon’s protection model to web applications running in the browser. Server-side attestation gives organizations proof they can use when deciding whether selected API endpoints should release data.

DEX encryption raises the cost of static analysis and reverse engineering. The hard part is protecting the decryption key, preserving app launch performance, and accounting for what happens after the code is decrypted.

Application Shielding continues to move into mainstream adoption in a maturing mobile-first market.

AI is accelerating attack workflows. Mobile security still has to defend a potentially hostile client.

What happened when Promon's Security Research team succeeded in performing an analysis of the Coretax RAT malware? How does an attack look from the perspective of attacker and defender?

LexisNexis Risk Solutions’ risk intelligence with Promon Shield in‑app protection and Promon Insight trusted telemetry together aim to help organizations protect mobile apps from manipulation and enable more trusted fraud decisions.

A practical checklist for Asian banks reviewing deepfake, biometric spoofing, and camera-injection risk in eKYC, login, and account recovery.

How has AI changed mobile app security? What does AI do to help mobile app attackers? And are there limits on the power of app shielding to protect against them?

A practical self-assessment for fraud, security, compliance, and digital teams preparing the mobile channel for PSD3 and the EU PSR

Deepfake resilience in mobile banking depends on two control layers working together: strong biometric checks and even stronger protection around the app, device, and camera path.

Malware scanning still matters. But modern mobile threats increasingly exploit environment and runtime manipulation beyond the reach of scan-first defenses.

PSD3 isn't PSD2 with updates. It broadens key requirements and raises the bar on both protection and the evidence banks and PSPs need when payments are challenged.

Discover the rising threat of Coretax RAT malware in Indonesia's banking sector, how it works, and what defense is possible against this emerging cyber risk.

PlayPraetor abuses legitimate Android features to steal credentials, hijack sessions, and support on-device fraud. It's another reason why banks need runtime protection embedded inside the app itself.

AI can help security researchers move faster, but evidence still matters. Credible vulnerability claims must be handled in a way that protects users.

On-device GenAI changes what runs locally and what attackers can reach. If the intelligence lives in the app, protection has to hold at runtime.

What does strong, mature mobile telemetry look like today? What telemetry data is the most valuable for mobile app security? Is there a practical operating model for mobile attack telemetry, with common execution failures to avoid?

App shielding is the baseline for mobile app security. But can black-box shielding slow teams down? Does post-compile protection still matter? And is protecting an app and an SDK the same? Find clarity and guidance here.

Trace the fragile economics and untracked revenue killers of the dating app industry. Investigate how mobile malware and device compromise are creating a industry-wide security crisis. Learn how runtime protection is revenue protection for dating apps.

Discover what happened when Promon's security team tested leading AI models against OLLVM obfuscation. Where did mobile app code protection hold up and where did it fall short? What are the key takeaways and recommendations for security and product teams?

Uncover the cost of mobile app protection without intelligence. Discover the plan to take you from protection to intelligence, and the products that transform protection into intelligence.

What are the main deployment options available for mobile app security products? Does an on-prem or cloud model best suit your organizational needs?

This paper will look at the three main reasons why mobile payment apps need to get EMVCo certified and the benefits of EMVCo SBMP certified Software Protection Tool solutions.

Learn about the main risks after a framework migration, what scenarios trigger a mobile app security re-evaluation, and how to protect your code.

Discover the common routes attackers use to change mobile app monetization outcomes with their business impacts. Learn how to reduce revenue loss upstream and check for on-device bypasses, whatever your industry.

Recognize the business case for EMVCo SBMP certification and why it matter now. Discover what labs examine during an evaluation, where mobile payment apps fail, and how teams can prepare effectively.

How do attackers exploit runtime logic in Unity and Unreal engine mobile games? What does runtime hardening change for integrity, trust, and revenue?

Learn why SDKs are uniquely exposed in the security-by-design model. Explore the tactics teams can employ to secure SDKs without slowing down development.

As 2025 draws to a close and we stand on the brink of a new year, let's take a look at what Promon predicts for cybersecurity in 2026, from compliance and cryptography to OS environments and AI threats.

Explore the state of security for facial recognition systems in 2025. Discover how the facial recognition process works, as well as the main threat types and available countermeasures.

Why secure mobile environments are essential for banks to safely reduce friction, protect revenue, and maintain PSD2 compliance.

Discover a new, comprehensive threat model for AI security in mobile apps that combines threat analysis, the latest solutions, and implementation strategies.

Learn about the latest research and industry signals on prompt injection attacks. Uncover the present business impact and future growth of prompt injections in AI AppSec.

Learn the difference between regular and resilience pentests, why both matter for mature mobile security, and how to prepare your app for penetration tests with confidence

Why vibe coding creates a security gap that demands runtime protection in mobile applications

Why is mobile AI on the rise, what new threat surfaces has it created, and how should high-risk industries respond?

Why security at the application level remains mission-critical despite Google Play's new policy

Discover the state of security for banking and financial apps in 2025. Explore the threat landscape for global malware campaigns with new AI-powered attacks and AI-based security solutions.

Learn why mobile app security goes beyond device protection. Find out how layered defenses keep your apps, data, and users safe from today’s evolving threats.

Find out how Huawei-developed HarmonyOS 5.0, also called HarmonyOS NEXT, works and the threats to its apps.

Learn about JavaScript obfuscation for app security, its techniques, and the things to know before you buy and use JS obfuscation tools.

This App Threat Report breaks down the defenses introduced by iOS and Android to prevent attacks against apps. Learn how they keep your app safe.

While Antora does not support creating an RSS feed in its static sites for AsciiDoc, JavaScript and Antora extensions can help. Our developer shares how.

Deepfakes have become the attack vector of choice for criminals. Here's how they work and how you can defend your banking app against identity fraud.

Protect your banking app from the rise in banking trojans by learning about the malware threats in 2025 and how to protect your apps against them.

Achieve DORA compliance with actionable insights on incident reporting, cyber threat response, and related EU regulations. Learn more about detecting threats and securing your mobile financial apps.

Protect your mobile banking app from major security threats. Learn about trojans, fake apps, MitM attacks, and more. Safeguard your users' financial data with insights on evolving fraud techniques.

Get a clear comparison of compiler, wrapper, and hybrid security approaches for mobile apps. Learn the pros, cons, and best options to balance security, speed, and efficiency.

Learn how to break down your pen test report, identify critical vulnerabilities, and prioritize fixes—so you can launch your mobile app securely and with confidence.

iOS app encryption isn’t as strong as many think. This blog reveals gaps in Apple’s protection and explains why developers must go the extra mile safeguard their apps.

Discover how to detect and prevent root access threats to your apps. Learn about root detection techniques and safeguard your app security effectively.

Protect your streaming app's exclusive content. Learn about the common attacks and threats that streaming apps face and how you can protect your app from them by combining app shielding with DRM, encryption, authentication, and RASP.

Protect your gaming app from cheaters. Learn effective strategies to secure your game, prevent fraud, and maintain fair play. Boost user trust and revenue.

Find out all you need to know about code obfuscation techniques and how to choose the right obfuscation tool for protecting your app in this guide.

Maximize your cybersecurity ROI. Discover how mobile app analytics can enhance your security measures, reduce risks, and optimize your investment in protection.

Germany's changed data security requirements for digital health apps. Learn what this means for DiGA manufacturers and how to achieve compliance.

Learn about the changes in NIST Cybersecurity Framework 2.0. Find out how app shielding techniques align with the framework to enhance mobile app protection.

Secure your apps with runtime protection. RASP for mobile and web apps is different. Learn about RASP for mobile and web apps and 10 RASP best practices.

Find out which mobile platform is more secure in 2024. With Apple's iron-clad security approach shaking due to sideloading, learn if it's safer than Android.

Learn more about Vultur, the Android banking trojan targeting banks in the Nordics. Find out how to protect your banking app from malware.

The US government banned TikTok amid data security concerns. Find out what it means for data privacy and security compliance regulations globally.

Do you measure the ROI you get on your mobile app security? Learn how to break down your risk and measure your mobile app security ROI.

Learn how to evaluate the different app shielding solutions on the market — and what it really takes to secure your mobile app.

Find out the challenges facing AI code deobfuscation code. While AI deobfuscators are being built, here's what you can do to protect your apps.

Learn what the European Union's Digital Markets Act means as sideloading becomes a reality with iOS 17.4.

Secure your dating apps from attackers. Dating apps have a lot of personal information that cybercriminals exploit. Here's how to prevent breaches in them.

Find out how the users in the European Union will be affected by the release of iOS 17.4 in March with the introduction of sideloading.

Explore what 2024 holds for cybersecurity dynamics and challenges.

Promon has discovered a new type of malware attacking banking apps. This blog post explores what FjordPhantom is and how it works.

Explore iOS obfuscation techniques to strengthen your app's defenses. Learn effective methods to safeguard your code from reverse engineering attacks.

Master hacker mindsets to fortify Android app security. Gain practical insights on identifying vulnerabilities and implementing robust protection measures.

Strengthen app security beyond certificate pinning. Learn advanced techniques to mitigate cyber threats and protect sensitive data in mobile applications.

Delve into cybersecurity challenges in gaming. Explore unique threats and effective protection strategies for mobile game developers and publishers.

Select optimal code obfuscation levels for your app. Balance security and performance with expert guidance on mobile application protection techniques.

Uncover 5 critical mobile gaming security threats. Equip yourself with knowledge to safeguard your game against cheating, piracy, and data breaches.

Safeguard mobile games with 5 app shielding techniques. Protect your gaming app from hackers, cheaters, and malicious attacks with proven security methods.

Explore top 5 mobile payment security threats. Strengthen your financial app's defenses against fraud, data theft, and other critical vulnerabilities.

Achieve BSI compliance with app shielding solutions. Learn how to meet security standards and protect sensitive data in your mobile applications.

Identify and mitigate top 6 API security threats. Enhance your mobile app's data protection by securing critical communication channels.

Ensure HIPAA compliance in healthcare apps. Implement robust security measures to protect patient data and meet stringent regulatory requirements.

Secure mobile health and medical apps effectively. Learn best practices for protecting sensitive patient data and ensuring regulatory compliance.

Navigate PCI mobile payment security guidelines. Ensure your financial app complies with industry standards while maintaining robust protection.

Examine critical vulnerabilities in government apps. Learn from real-world security flaws to strengthen your own mobile application defenses.

Prevent data leaks in government applications. Implement robust security measures to protect sensitive information and maintain public trust.

Uncover risks of embedded secrets in Android apps. Learn from a major security breach affecting 100 million users to enhance your app's protection.

Master code obfuscation techniques for app security. Protect your mobile application from reverse engineering and intellectual property theft.

Implement effective Android obfuscation strategies. Safeguard your app's code and data from malicious actors and competitive analysis.

Understand iOS jailbreak risks and countermeasures. Enhance your app's security to detect and mitigate threats from compromised devices.

Defend against Android overlay attacks effectively. Implement robust security measures to protect your app from this emerging threat vector.

Master Android root detection techniques. Safeguard your app from unauthorized access and potential security breaches on rooted devices.

Protect your app from Rogue malware threats. Implement effective security measures to detect and prevent this sophisticated mobile attack.

Secure health app API keys from exposure. Implement robust protection measures to safeguard sensitive data and maintain user privacy.

Combat rising keylogger attacks on banking apps. Implement advanced security measures to protect user credentials and financial data.

Test your malware knowledge with our quiz. Distinguish between real threats and fictional names to enhance your mobile security awareness.

Explore 10 critical application security threats. Arm yourself with knowledge to protect your mobile app against common and emerging risks.

Learn from massive mobile banking fraud cases. Implement robust security measures to protect your financial app and user assets.

Enhance mobile app security with application hardening. Discover three effective techniques to fortify your app against various cyber threats.

Understand the StrandHogg vulnerability's impact. Learn from this Android security flaw to enhance your app's protection against similar threats.

Learn from Tesla's vulnerabilities to prevent car theft and data breaches. Implement robust security measures to protect your app ecosystem, brand, and customers.