The Mizuho Direct App for Android version 3.13.0 and earlier does not verify server certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
- https://play.google.com/store/apps/details?id=jp.co.mizuhobank.banking
No PoCs found on GitHub currently.