Post #1598 8.45K Jul 21, 2022, 12:27 UTC ARM 64 Assembly Series — Branchhttps://valsamaras.medium.com/arm-64-assembly-series-branch-9ce820987fc6 Medium ARM 64 Assembly Series — Branch Previous posts: Basic definitions and registers, lab setup, offset and addressing modes, Load And Store 👍 14 🔥 6 ❤ 2 🥰 2
Post #1597 8.03K Jul 20, 2022, 07:36 UTC The first distribution of Android related malware by Turla APT group spoofing domain Ukrainian Azov Regimenthttps://blog.google/threat-analysis-group/continued-cyber-activity-in-eastern-europe-observed-by-tag/ Google Continued cyber activity in Eastern Europe observed by TAG Google’s Threat Analysis Group (TAG) continues to closely monitor the cybersecurity environment in Eastern Europe with regard to the war in Ukraine. Many Russian government cyber assets have remained focused on Ukraine and related issues since the invasion… 👍 15 ❤ 1
Post #1596 8.67K Jul 18, 2022, 11:21 UTC Pegasus Spyware Used Against Thailand’s Pro-Democracy Movementhttps://citizenlab.ca/2022/07/geckospy-pegasus-spyware-used-against-thailands-pro-democracy-movement/ The Citizen Lab GeckoSpy Uncovering an extensive espionage operation infecting dozens of Thai pro-democracy campaigners with NSO Group's Pegasus spyware. 👍 15 👎 5 🔥 3
Post #1595 7.62K Jul 18, 2022, 09:30 UTC Exploiting Android Vulnerabilities with Malicious Third-Party Apps (featuring Oversecured APK)https://medium.com/@as3ng/exploiting-android-vulnerabilities-with-malicious-third-party-apps-featuring-oversecured-apk-adea3241ce49 Medium Exploiting Android Vulnerabilities with Malicious Third-Party Apps (featuring Oversecured APK) Mobile applications has become a trend these days since there are a rapid growing companies and startups which already taken their steps… 👍 14 🔥 5 👏 2 👎 1
Post #1594 7.12K Jul 18, 2022, 09:06 UTC Session On Android – An App Wrapped in Signalhttps://thebinaryhick.blog/2022/07/14/session-on-android-an-app-wrapped-in-signal/ The Binary Hick Session On Android – An App Wrapped in Signal NOTE: parts of this article describe steps by which the order of encryption methods are reversed to render encrypted data in clear-text. This was done in order to investigate the app being discusse… 👍 8 🔥 6
Post #1593 16.9K Jul 13, 2022, 09:16 UTC Lock Screen Bypass Exploit of Android Devices (CVE-2022–20006)https://medium.com/maverislabs/lock-screen-bypass-exploit-of-android-devices-cve-2022-20006-604958fcee3a Medium Lock Screen Bypass Exploit of Android Devices (CVE-2022–20006) Background on Lock Screen Bypass Exploits 👍 37 👎 1 👏 1
Post #1592 8.17K Jul 13, 2022, 08:57 UTC Heap Overflows on iOS ARM64: Heap Grooming, Use-After-Free (Part 3)https://www.inversecos.com/2022/07/heap-overflows-on-ios-arm64-heap.html Inversecos Heap Overflows on iOS ARM64: Heap Spraying, Use-After-Free (Part 3) 👍 9
Post #1591 9.55K Jul 12, 2022, 11:10 UTC Guide to Reversing and Exploiting iOS binaries Part 2: ARM64 ROP Chains https://www.inversecos.com/2022/06/guide-to-reversing-and-exploiting-ios.html Inversecos Guide to Reversing and Exploiting iOS binaries Part 2: ARM64 ROP Chains 👍 15
Post #1590 10K Jul 8, 2022, 09:35 UTC New malware detected on Google Play, 100.000+ users affectedhttps://blog.pradeo.com/pradeo-identifies-app-joker-malware-google-play Pradeo New malware detected on Google Play, 100.000+ users affected Joker is a malware that silently exfiltrates data and subscribes users to unwanted premium subscription. The malware was found in 24 apps on Google Play. 👍 13 🤔 5 💩 3
Post #1589 9.26K Jul 7, 2022, 07:47 UTC Apple implemented "Lockdown Mode" in their devices from version 16 to protects users against spyware"Hardens device defenses and strictly limits certain functionalities, sharply reducing the attack surface that potentially could be exploited by highly targeted mercenary spyware." https://www.apple.com/newsroom/2022/07/apple-expands-commitment-to-protect-users-from-mercenary-spyware/ Apple Newsroom Apple expands commitment to protect users from mercenary spyware Apple today detailed two initiatives to help protect users who may be personally targeted by sophisticated digital threats. 👍 17
Post #1588 7.65K Jul 6, 2022, 07:21 UTC Toll fraud malware: How an Android application can drain your wallet https://www.microsoft.com/security/blog/2022/06/30/toll-fraud-malware-how-an-android-application-can-drain-your-wallet/ Microsoft News Toll fraud malware: How an Android application can drain your wallet Toll fraud malware, a subcategory of billing fraud in which malicious applications subscribe users to premium services without their knowledge or consent, is one of the most prevalent types of Android malware – and it continues to evolve. 👍 11 🤬 1
Post #1587 7.37K Jul 5, 2022, 06:04 UTC Google patched security issues in Chrome for Android, one of the exploit exists in the wild (CVE-2022-2294, CVE-2022-2295)https://chromereleases.googleblog.com/2022/07/chrome-for-android-update.html Chrome Releases Chrome for Android Update Hi, everyone! We've just released Chrome 103 (103.0.5060.71) for Android: it'll become available on Google Play over the next few days. Th... 👍 13
Post #1586 9.09K Jun 30, 2022, 07:50 UTC AMAZON FIXED A VULNERABILITY OF BROKEN AUTHENTICATION IN AMAZON PHOTOS ANDROID APPhttps://checkmarx.com/blog/amazon-confirmed-and-fixed-a-high-severity-vulnerability-of-broken-authentication-in-amazon-photos-android-app/ Checkmarx Amazon Confirmed and Fixed a High Severity Vulnerability of Broken Authentication in Amazon Photos Android App Our research team at Checkmarx found that the Amazon Photos Android app could have allowed a malicious application, installed on the user’s phone, to steal their Amazon access token. The Android app has over 50 million downloads. 👍 21
Post #1585 7.68K Jun 30, 2022, 07:40 UTC Flubot: the evolution of a notorious Android Banking Malwarehttps://blog.fox-it.com/2022/06/29/flubot-the-evolution-of-a-notorious-android-banking-malware/ Fox-IT International blog Flubot: the evolution of a notorious Android Banking Malware Authored by Alberto Segura (main author) and Rolf Govers (co-author) Summary Flubot is an Android based malware that has been distributed in the past 1.5 years inEurope, Asia and Oceania affecting … 👍 19
Post #1584 7.29K Jun 30, 2022, 07:22 UTC Revive: from spyware to Android banking trojanhttps://www.cleafy.com/cleafy-labs/revive-from-spyware-to-android-banking-trojan Cleafy Revive: from spyware to android banking trojan | Cleafy Labs A new banking trojan targeting Europe has been discovered by Cleafy's Threat Intelligence Team. We dubbed it Revive and it is an evolution of simple spyware into a banking trojan, with the key capability of conducting Account Takeover attacks: here's the… 👍 15
Post #1583 7.27K Jun 28, 2022, 10:08 UTC Androscope is a collaborative Android malware encyclopediaYou can search for malware based on what they do, and if you are a reverse engineer you can contribute and add new entries to the encyclopedia. https://androscope.fortinet-cse.com/ 👍 19
Post #1582 8.77K Jun 24, 2022, 06:02 UTC Spyware vendor targets users in Italy and Kazakhstan #Android #iOS #Hermithttps://blog.google/threat-analysis-group/italian-spyware-vendor-targets-users-in-italy-and-kazakhstan/ Google Spyware vendor targets users in Italy and Kazakhstan Today, alongside Google’s Project Zero, we are detailing capabilities provided by RCS Labs, an Italian vendor that uses a combination of tactics, including atypical drive-by downloads as initial infection vectors to target mobile users on both iOS and Android. 👍 14
Post #1581 13.9K Jun 22, 2022, 22:10 UTC Exploiting vulnerabilities in iOS Applicationhttps://lonewolf-raj.medium.com/exploiting-vulnerabilities-in-ios-application-cf5718910c47 Medium Exploiting vulnerabilities in iOS Application Hello Everyone, Here I’m going to share one of my findings which I got while enumerating iOS application, below are my findings and the… 🤔 10 ❤ 5 💩 5 👍 2
Post #1580 7.92K Jun 22, 2022, 09:26 UTC ARM 64 Assembly Series— Basic definitions and registershttps://valsamaras.medium.com/arm-64-assembly-series-basic-definitions-and-registers-ec8cc1334e40 Medium ARM 64 Assembly Series— Basic definitions and registers Main Definitions 👍 18
Post #1579 6.84K Jun 22, 2022, 06:51 UTC Lab Setup for Android Pentesting on Android Emulator (M1 Macbook)https://guptashubham.com/blog/lab-setup-for-android-pentesting-on-android-emulator-m1-macbook 👍 1