TGViewer
Channel Public Channel
Android Security & Malware

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com
Open in Telegram
Subscribers
44.7K
Photos
136
Videos
22
Links
2.9K

Showing posts older than #1800 Β· Back to latest

Older Posts 20 shown
Post #1798 9.76K

Forwarded from The Bug Bounty Hunter

The code that wasn’t there: Reading memory on an Android device by accident

https://github.blog/2023-02-23-the-code-that-wasnt-there-reading-memory-on-an-android-device-by-accident/
The GitHub Blog The code that wasn't there: Reading memory on an Android device by accident CVE-2022-25664, a vulnerability in the Qualcomm Adreno GPU, can be used to leak large amounts of information to a malicious Android application. Learn more about how the vulnerability can be used to leak information in both the user space and kernel space…
  • πŸ‘ 16
  • πŸ”₯ 8
Post #1797 9.29K
Google vulnerability Reward Program: 2022 Year in Review
- identified and fix over 2,900 security issues
- Google paid $12 million in bug bounties
- $4.8 million rewards for Android security issues
https://security.googleblog.com/2023/02/vulnerability-reward-program-2022-year.html
Google Online Security Blog Vulnerability Reward Program: 2022 Year in Review Posted by Sarah Jacobus, Vulnerability Rewards Team It has been another incredible year for the Vulnerability Reward Programs (VRPs) at G...
  • πŸ‘ 11
  • πŸ₯° 3
  • 😱 3
  • ❀ 2
Post #1794 8.16K
Vulnerabilities in NSPredicate were discovered in macOS 13.2 and iOS 16.3 (CVE-2023-23530, CVE-2023-23531)
App can achieve code execution inside of SpringBoard, a highly privileged app that can access location data, the camera and microphone, call history, photos, and other sensitive data, as well as wipe the device
https://www.trellix.com/en-us/about/newsroom/stories/research/trellix-advanced-research-center-discovers-a-new-privilege-escalation-bug-class-on-macos-and-ios.html
Trellix Trellix Advanced Research Center Discovers a New Privilege Escalation Bug Class on macOS and iOS The Trellix Advanced Research Center vulnerability team has discovered a large new class of bugs that allow bypassing code signing to execute arbitrary code in the context of several platform applications, leading to escalation of privileges and sandbox escape…
  • πŸ‘ 7
  • πŸ”₯ 1
Post #1793 7.88K
OyeTalk - Live Voice Chat Room app with 5M+ installs leaked private user conversations
It stored unencrypted user chats, names and IMEI numbers on a database unguarded by a password
https://cybernews.com/security/android-voice-chat-app-leaked-private-user-conversations/
Cybernews Android voice chat app leaked private user conversations A popular app for voice chats, OyeTalk, stored unencrypted user chats on a database unguarded by a password.
  • πŸ‘ 15
  • πŸ₯° 2
Post #1790 8.8K
Android backdoor targets journalist in South Korea through APT phishing campaign
https://interlab.or.kr/archives/2567
interlab.or.kr Interlab μΈν„°λž© | Cyber Threat Report: RambleOn Android Malware Interlab is a non-profit organization based in Seoul with mission to create resilient digital safety net for freedom of citizens, providing free digital security consultations, trainings, incident response support and research of cyber threat toward civic…
  • πŸ‘ 9
  • ❀ 2
Post #1788 14.3K
Resource for Android static analysis and vulnerability assessment
Tutorials, tools, and resources for identifying and mitigating security vulnerabilities in Android applications
https://github.com/krizzsk/HackersCave4StaticAndroidSec
GitHub GitHub - krizzsk/HackersCave4StaticAndroidSec: A comprehensive resource for Android static analysis and vulnerability assessment.… A comprehensive resource for Android static analysis and vulnerability assessment. Tutorials, tools, and resources for identifying and mitigating security vulnerabilities in Android applications. -...
  • πŸ‘ 13
  • πŸ‘Ž 1
Post #1784 7.07K
Android Banker Deep Dive (Part 1)
Fully reverse engineering of a Android Banker trojan from start to finish
https://youtu.be/Vs9Z3NDnVT8
YouTube Android Banker Deep Dive (Part 1) In this [RE]laxing new series, I fully reverse a difficult Android Banker trojan from start to finish. These extensive "Deep Dive" segments concentrate on dissecting malware specimens and delving into the individual approaches employed to fully reverse them.…
  • πŸ‘ 13
  • πŸ“ 4
  • πŸ‘ 1
Post #1783 7.42K
Inappropriate implementation in Full screen mode in Google Chrome on Android
It allowed a remote attacker to spoof the contents of the security UI via a crafted HTML page.
[$4000] - CVE-2023-0697
https://chromereleases.googleblog.com/2023/02/stable-channel-update-for-desktop.html
Chrome Releases Stable Channel Update for Desktop The Chrome team is delighted to announce the promotion of Chrome 110 to the stable channel for Windows, Mac and Linux . This will roll out ...
  • πŸ‘ 19
  • πŸ”₯ 1
  • πŸ₯° 1
Post #1782 7.31K
MediaTek Android information disclosure | CVE-2023-20606
By executing a specially-crafted application, an attacker could exploit this vulnerability to obtain sensitive information.
Affected Software Versions: Android 12.0, 12.1
https://www.redpacketsecurity.com/mediatek-android-information-disclosure-cve-2023-20606/
RedPacket Security MediaTek Android information disclosure | CVE-2023-20606 - RedPacket Security NAME__________MediaTek Android information disclosure
  • πŸ‘ 6
  • πŸ”₯ 3
Post #1781 12.5K
SQL injection vulnerabilities in Owncloud Android app - CVE-2023-24804, CVE-2023-23948
The Owncloud Android app uses content providers to manage its data. The provider FileContentProvider has SQL injection vulnerabilities that allow malicious applications or users in the same device to obtain internal information of the app
https://securitylab.github.com/advisories/GHSL-2022-059_GHSL-2022-060_Owncloud_Android_app/
GitHub Security Lab GHSL-2022-059_GHSL-2022-060: SQL injection vulnerabilities in Owncloud Android app - CVE-2023-24804, CVE-2023-23948 The Owncloud Android app uses content providers to manage its data. The provider FileContentProvider has SQL injection vulnerabilities that allow malicious applications or users in the same device to obtain internal information of the app. The app also handles…
  • πŸ‘ 9
  • 😒 3
Post #1780 6.42K
1) CVE-2023-23529
Vulnerability in WebKit browser engine for iPhones and iPads once exploited could result in arbitrary code execution.
This zero-day flaw has been actively exploited in the wild.

2) CVE-2023-23514
An app may be able to execute arbitrary code with kernel privileges affecting iPhones and iPads.
https://support.apple.com/en-us/HT213635
Apple Support About the security content of iOS 16.3.1 and iPadOS 16.3.1 This document describes the security content of iOS 16.3.1 and iPadOS 16.3.1.
  • πŸ‘ 9
  • πŸ”₯ 4
  • ❀ 1
Older posts β†’
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook β†’Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 β†’