Channel Public Channel

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com

Open in Telegram

Subscribers: 44.7K
Photos: 136
Videos: 22
Links: 2.9K

Showing posts older than #1840 · Back to latest

Older Posts 20 shown

Post #1839 7.06K Apr 7, 2023, 06:57 UTC

Pwning Pixel 6 with a leftover patch
https://github.blog/2023-04-06-pwning-pixel-6-with-a-leftover-patch/

The GitHub Blog Pwning Pixel 6 with a leftover patch In this post, I’ll look at a security-related change in version r40p0 of the Arm Mali driver that was AWOL in the January update of the Pixel bulletin, where other patches from r40p0 was applied, and how these two lines of changes can be exploited to gain…

👍 7
😁 3
❤ 1

Post #1838 7.43K Apr 6, 2023, 10:20 UTC

Configuring an Android Phone for Pentesting
https://www.blackhillsinfosec.com/start-to-finish-configuring-an-android-phone-for-pentesting/

Black Hills Information Security Start to Finish: Configuring an Android Phone for Pentesting - Black Hills Information Security, Inc. Jeff Barbi // *Guest Post Background Unless you’re pentesting mobile apps consistently, it’s easy for your methodologies to fall out of date. Each new version of Android brings with it […]

👍 16

Post #1837 7K Apr 6, 2023, 08:05 UTC

How to intercept network trafic on Android
https://github.com/LabCIF-Tutorials/Tutorial-AndroidNetworkInterception

GitHub GitHub - LabCIF-Tutorials/Tutorial-AndroidNetworkInterception: How to intercept network trafic on Android How to intercept network trafic on Android. Contribute to LabCIF-Tutorials/Tutorial-AndroidNetworkInterception development by creating an account on GitHub.

👍 19

Post #1836 6.56K Apr 5, 2023, 12:46 UTC

Moqhao (Shaoye aka XLoader) malware operated by Yanbian group can bypass text-based CAPTCHAs #RoamingMantis
This feature is used in combination with brute-force attacks on wireless router’s web interfaces to compromise routers and perform DNS hijacking attacks.
https://www.telekom.com/en/blog/group/article/moqhao-masters-new-tricks-1031484

Telekom Moqhao masters new tricks News from the Moqhao malware family. It attacks Android smartphones and has now even learned to overcome CAPTCHA.

👍 12
😨 2
🤔 1

Post #1835 11K Apr 5, 2023, 11:52 UTC

Set Up an Android Hacking Lab for $0
https://www.trustedsec.com/blog/set-up-an-android-hacking-lab-for-0/

TrustedSec Set Up an Android Hacking Lab for $0 Prerequisites: Python3 - https://www.python.org/downloads/ Android Studio - https://developer.android.com/studio Android Platform-Tools -…

👍 22

Post #1834 6.59K Apr 5, 2023, 06:18 UTC

Android Parcels: Introducing Android's Safer Parcel
https://youtu.be/qIzMKfOmIAA

YouTube Android Parcels: The Bad, the Good and the Better - Introducing Android's Safer Parcel Parcel is the serialization mechanism in Android and is behind almost every OS cross-process interaction. Parcelable implementations have been the source of vulnerabilities in Android for ~8 years, often rated high severity and weaponized by malware authors…

👍 13
❤ 1

Post #1833 12.2K Apr 4, 2023, 07:21 UTC

Mobile Pentesting 101 – How to set up your Android Environment
https://securitycafe.ro/2023/04/03/mobile-pentesting-101-how-to-set-up-your-android-environment/

Security Café Mobile Pentesting 101 – How to set up your Android Environment This article gives an idea about how your Android pentesting environment should look like. What tools should I use? Do I really need a physical device? Do I need a rooted device to pentest an appli…

👍 16
❤ 1
👎 1

Post #1832 8.84K Mar 31, 2023, 08:58 UTC

MacStealer: Wi-Fi Client Isolation Bypass
MacStealer can test Wi-Fi networks for client isolation bypasses (CVE-2022-47522) to intercept (steal) traffic toward other clients at the MAC layer
https://github.com/vanhoefm/macstealer

GitHub GitHub - vanhoefm/macstealer: MacStealer: Wi-Fi Client Isolation Bypass MacStealer: Wi-Fi Client Isolation Bypass. Contribute to vanhoefm/macstealer development by creating an account on GitHub.

👍 12
❤ 3
🔥 2

Post #1831 8.49K Mar 30, 2023, 15:02 UTC

Android GoatRAT Banker Attacks Automated Payment Systems
https://labs.k7computing.com/index.php/goatrat-attacks-automated-payment-systems/

K7 Labs GoatRAT Attacks Automated Payment Systems Recently, we came across a detection in our telemetry report named “com.goatmw” which gained our attention. We decided to investigate […]

👍 9
❤ 2
😁 2

Post #1830 8.37K Mar 29, 2023, 13:39 UTC

Spyware vendors use 0-days and n-days against Android and iOS
https://blog.google/threat-analysis-group/spyware-vendors-use-0-days-and-n-days-against-popular-platforms/

Google Spyware vendors use 0-days and n-days against popular platforms Google’s Threat Analysis Group (TAG) tracks actors involved in information operations (IO), government backed attacks and financially motivated abuse. For years, TAG has…

👍 8
🤔 2
👏 1

Post #1829 7.69K Mar 28, 2023, 07:44 UTC

ARM TrustZone: pivoting to the secure world
https://thalium.github.io/blog/posts/pivoting_to_the_secure_world/

👍 8

Post #1828 7.45K Mar 28, 2023, 06:23 UTC

Chinese Pinduoduo app exploited system vulnerabilities to escalate privileges to download and execute backdoors and gain unauthorized access to user data, notifications and files. The app was also removed from Google Play Store.
Original research: https://mp.weixin.qq.com/s/P_EYQxOEupqdU0BJMRqWsw
Context article: https://krebsonsecurity.com/2023/03/google-suspends-chinese-e-commerce-app-pinduoduo-over-malware/
New analysis report: https://github.com/davincifans101/pinduoduo_backdoor_detailed_report/blob/main/report_en.pdf

👍 5
❤ 1

Post #1827 6.82K Mar 28, 2023, 05:56 UTC

For the first time Windows Ursnif banking trojan campaigns started to target Android users via DroidJack RAT received from email
https://cert--agid-gov-it.translate.goog/news/ursnif-approda-nel-mondo-delle-app-mobile-lapk-droidjack-viene-veicolato-come-comunicazione-agenzia-delle-entrate/?s=03&_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en

CERT-AGID Ursnif approda nel mondo delle app mobile: l’APK DroidJack viene veicolato come comunicazione Agenzia delle Entrate

👍 6

Post #1826 7.32K Mar 27, 2023, 10:51 UTC

XSS vulnerability discovered in Android and iOS WordPress app plugin WPMobile.App (CVE-2023-22702)
https://patchstack.com/database/vulnerability/wpappninja/wordpress-wpmobile-app-android-and-ios-mobile-application-plugin-11-13-cross-site-scripting-xss-vulnerability

Patchstack Cross Site Scripting (XSS) in WordPress WPMobile.App Plugin Patchstack is the leading open source vulnerability research organization. Find information and protection for all WordPress and Drupal security issues.

👍 16

Post #1825 6.87K Mar 27, 2023, 09:12 UTC

iMessage and OpenGraph for Fun and Profit
Forge domain name in website preview shared in iMessage app
https://persist.tools/posts/imessage_og.html

👍 6
❤ 1

Post #1824 6.97K Mar 27, 2023, 07:16 UTC

Near-Ultrasound Inaudible Trojan (NUIT): Exploit smartphone speaker voice assistants with inaudible sound to perform commands
Paper: https://sites.google.com/view/nuitattack/home
Video demo: https://youtu.be/TUnPFR35AR4

Google NUIT Attack NUIT-1

👍 15

Post #1823 8.9K Mar 23, 2023, 14:38 UTC

Nexus: a new Android botnet based on SOVA banker
https://www.cleafy.com/cleafy-labs/nexus-a-new-android-botnet

Cleafy Nexus: a new Android botnet? | Cleafy Labs A new Android banking trojan might be spreading under the name of Nexus. It is promoted via a MaaS subscription and it contains some relations with an already known SOVA banking trojan. Read the full article to know more about this new player in cybercrime.

👍 18
❤ 1

Post #1822 8.35K Mar 23, 2023, 09:32 UTC

JADXecute - plugin for JADX that adds Dynamic Code Execution abilities
With JADXecute, you can dynamically run Java code to modify or print components of the jadx-gui output
https://github.com/LaurieWired/JADXecute

GitHub GitHub - LaurieWired/JADXecute: JADX-gui scripting plugin for dynamic decompiler manipulation JADX-gui scripting plugin for dynamic decompiler manipulation - LaurieWired/JADXecute

👍 16
🔥 6
❤ 1

Post #1821 8.46K Mar 22, 2023, 11:11 UTC

Bluehat 2023: Android Malware Obfuscation
Overview of multiple Android Malware Obfuscation techniques, along with their implementations and disadvantages
https://youtu.be/Bf-49tgDXW0

YouTube Bluehat 2023: Android Malware Obfuscation This is a recording of a quick talk I gave in early 2023 at the Bluehat Security conference. The presentation gives an overview of multiple Android Malware Obfuscation techniques, along with their implementations and disadvantages. Timestamps: 00:00 Intro…

👍 15
🔥 3

Post #1820 8.04K Mar 21, 2023, 07:52 UTC

Reverse engineering of Joker malware found on Google Play Store
https://medium.com/@themalwarebug/reverse-engineering-of-joker-malware-e97376db4810

Medium Reverse engineering of Joker Malware Hello guys,Hope you are doing good.Here is technical analysis of another android malware named Joker also known as bread toll_fraud,which…

👏 7
😱 4
👍 3
🤔 2
🥰 1

Older posts →