Channel Public Channel

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com

Open in Telegram

Subscribers: 44.7K
Photos: 136
Videos: 22
Links: 2.9K

Showing posts older than #1699 · Back to latest

Older Posts 20 shown

Post #1698 6.66K Nov 11, 2022, 07:54 UTC

Lookout Discovers Long-running Surveillance Campaigns Targeting Uyghurs
https://www.lookout.com/blog/uyghur-surveillance-campaign-badbazaar-moonshine

Lookout Lookout Discovers Surveillance Campaigns Targeting Uyghurs | Threat Intel Researchers from Lookout have uncovered two new surveillance campaigns, BadBazaar and MOONSHINE, targeting Uyghurs in the People’s Republic of China and abroad.

😐 8
👍 4
😢 4
🌭 1

Post #1697 7.09K Nov 10, 2022, 17:55 UTC

Vulnerability affecting seemingly all Google Pixel phones allows to bypass lock screen protection (Bounty: $70K, CVE-2022-20465)
https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass/

bugs.xdavidhu.me Accidental $70k Google Pixel Lock Screen Bypass David Schütz's bug bounty writeups

👍 21
🤯 7
😐 7

Post #1696 6.65K Nov 10, 2022, 16:22 UTC

Massive Phishing Campaigns Target India Banks’ Clients
https://www.trendmicro.com/en_us/research/22/k/massive-phishing-campaigns-target-india-banks-clients.html

Trend Micro Massive Phishing Campaigns Target India Banks’ Clients

👍 11

Post #1695 8.32K Nov 4, 2022, 19:15 UTC

A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain
https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html

projectzero.google A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain Posted by Maddie Stone, Project Zero Note: The three vulnerabilities discussed in this blog wer...

❤ 18
👍 4

Post #1694 8.36K Nov 2, 2022, 22:15 UTC

Analysis of SOVA Android Banking Trojan
https://kratikal.com/blog/sova-a-new-android-banking-trojan/

👍 11
👎 1

Post #1693 7.8K Nov 2, 2022, 17:36 UTC

Pixel 6 bootloader: Emulation, ROP (part 2)
https://eshard.com/posts/pixel6bootloader-2

👍 10
😁 1

Post #1692 7.59K Nov 2, 2022, 12:03 UTC

Malware on the Google Play store leads to harmful phishing sites
https://www.malwarebytes.com/blog/news/2022/11/malware-on-the-google-play-store-leads-to-harmful-phishing-sites

Malwarebytes Malware on the Google Play store leads to harmful phishing sites A family of malicious apps from developer Mobile apps Group are on Google Play infected with HiddenAds.

👍 17

Post #1691 6.99K Nov 2, 2022, 08:51 UTC

New SandStrike spyware infects Android devices via malicious VPN app
https://www.bleepingcomputer.com/news/security/new-sandstrike-spyware-infects-android-devices-via-malicious-vpn-app/

BleepingComputer New SandStrike spyware infects Android devices via malicious VPN app Threat actors are using a newly discovered spyware known as SandStrike and delivered via a malicious VPN application to target Persian-speaking Android users.

👍 11
😢 3

Post #1690 6.1K Nov 2, 2022, 08:01 UTC

Drinik Android Malware Returns With Advanced Capabilities Targeting Indian Taxpayers
https://blog.cyble.com/2022/10/27/drinik-malware-returns-with-advanced-capabilities-targeting-indian-taxpayers/

👍 9
🔥 3

Post #1689 6.34K Nov 1, 2022, 21:08 UTC

A vulnerability in the Galaxy Store allows attackers through an XSS to cause the store to install and launch an application
https://ssd-disclosure.com/ssd-advisory-galaxy-store-applications-installation-launching-without-user-interaction/

SSD Secure Disclosure SSD Advisory – Galaxy Store Applications Installation/Launching without User Interaction - SSD Secure Disclosure A vulnerability in the Galaxy Store allows attackers through an XSS to cause the store to install and/or launch an application, allowing remote attackers to trigger a remote command execution in the phone.

👍 18

Post #1688 6.93K Oct 31, 2022, 20:31 UTC

A TECHNICAL ANALYSIS OF PEGASUS FOR ANDROID – PART 3
https://cybergeeks.tech/a-technical-analysis-of-pegasus-for-android-part-3/

👍 8

Post #1687 7.95K Oct 29, 2022, 07:40 UTC

Malware wars: the attack of the droppers (Sharkbot, Vultur)
https://www.threatfabric.com/blogs/the-attack-of-the-droppers.html

Threatfabric Malware wars: the attack of the droppers ThreatFabric’s analysts discovered multiple new droppers on Google Play Store distributing banking Trojans.

👍 10
🕊 5

Post #1686 7.47K Oct 28, 2022, 10:13 UTC

Analysis of ERMAC 2.0: Evades MFA to Steal Banking Credentials of Over 400 Android Apps
https://quointelligence.eu/2022/10/new-ermac-2-0/

QuoIntelligence ERMAC 2.0 Evades MFA to Steal Banking Credentials of Over 400 Android Apps New ERMAC (2.0) Evades MFA to Steal Banking Credentials of Over 400 Android Apps, Android trojans continue to proliferate and evolve.

👍 11
👌 4
❤ 1

Post #1685 7.2K Oct 27, 2022, 12:09 UTC

🤡 49
👌 8
👍 2

Post #1684 6.69K Oct 27, 2022, 12:03 UTC

In Android Authority poll, 19.72% out of 3,300 voters stated their Android is rooted
https://www.androidauthority.com/android-phone-rooted-poll-results-3225345/

Android Authority We asked, you told us: Your Android phone definitely isn't rooted There are many reasons to root your Android phone, but it turns out that most polled readers don't have a rooted daily driver.

👍 6
🥰 3

Post #1683 6.2K Oct 27, 2022, 11:09 UTC

SiriSpy - iOS bug allowed apps to eavesdrop on your conversations with Siri (CVE-2022-32946 - $7000 bounty)
"Any app with access to Bluetooth could record your conversations with Siri and audio from the iOS keyboard dictation feature when using AirPods or Beats headsets."
https://rambo.codes/posts/2022-10-25-sirispy-ios-bug-allowed-apps-to-eavesdrop