I have installed the app to investigate it. The app is mainly a webview linked to the kcb - online banking link ( https://onlinebanking.kcbbankgroup.com/kcbonline/ ). 

Insecure considering you can pull the application db and harvest data e.g browse the plain text passwords .See attached image.

@Rad Incidentally, app does not intercept transactions. yet!

Insane to use this app!



On 10 May 2012 14:55, Rad! <conradakunga@gmail.com> wrote:
I think its insane to install a banking app that is not officially from the bank or at least endorsed by it.

What will stop the app from capturing your passwords and authorization codes? Deducting a shilling from each transaction? Mining your information?

Whoever is brave/misguided enough to install and use this software - may the Force be with you

On Thu, May 10, 2012 at 2:25 PM, Daniel Ndeti <dantoz@gmail.com> wrote:
Seems to connect to the online portal for web banking but still,i wont dare login with it.Its not from KCB and I haven't got a response from them over the app.
_______________________________________________
Skunkworks mailing list
Skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke


_______________________________________________
Skunkworks mailing list
Skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------

Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke