패스워드 매니저 취약점을 이용한 사용자 계정 탈취 방법

User has an ID and password for each of the multiple Internet services. This can lead to administrative difficulties by having multiple IDs and passwords, and may cause other sites to be compromised by information leakage from one site due to the use of similar IDs and passwords. Password managers are increasingly used to solve these problems. The password manager manages the user account information to provide the user with the convenience of management and security against vulnerable IDs and passwords. However, a vulnerability exists in the password manager. This paper analyzes vulnerability of password manager in Android environment based on related research and suggests possibility of all account information leakage and countermeasures.