Channel Public Channel

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com

Open in Telegram

Subscribers: 44.7K
Photos: 136
Videos: 22
Links: 2.9K

Showing posts older than #1880 · Back to latest

Older Posts 17 shown

Post #1879 8.23K May 5, 2023, 05:49 UTC

Fleckpe - A new family of Trojan subscribers discovered on Google Play #Jocker #Harly
https://securelist.com/fleckpe-a-new-family-of-trojan-subscribers-on-google-play/109643/

👍 13

Post #1878 7.47K May 4, 2023, 14:03 UTC

Mobile Threats Report for Q1/2023 by Avast
https://decoded.avast.io/threatresearch/avast-q1-2023-threat-report/#mobile

Avast Threat Labs Avast Q1/2023 Threat Report - Avast Threat Labs Social Engineering Dominance, Rising Tide of Information-Stealers, and OneNote Abused by Malware Groups

👍 10
🤔 1

Post #1877 6.83K May 4, 2023, 12:19 UTC

FluHorse – Newly Discovered Android Malware Disguised as Popular Android Apps Targeting East Asia to steal victim credentials and 2FA codes
https://research.checkpoint.com/2023/eastern-asian-android-assault-fluhorse/

Check Point Research Eastern Asian Android Assault - FluHorse - Check Point Research Research by: Alex Shamshur, Sam Handelman, Raman Ladutska, Ohad Mana Introduction In the latest research conducted by Check Point Research, we describe a newly discovered malware called FluHorse. The malware features several malicious Android applications…

👍 13
🤔 2
❤ 1

Post #1876 6.23K May 4, 2023, 08:53 UTC

Arbitrary code execution discoverd in Android imo-International Calls & Chat with 1B installs up to version 2022.11.1051 (CVE-2022-47757)
A path traversal vulnerability delivered using a deeplink can force the IMO app to write files into its data directory. This allows an attacker to write a library file that the app uses to dynamically load modules
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47757

cve.mitre.org CVE - CVE-2022-47757 The mission of the CVE® Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities.

👍 11
❤ 1

Post #1875 6.73K May 4, 2023, 07:49 UTC

Flutter Hackers: Understand and reverse engineere Flutter APK Release Mode with Frida
Part 1: https://infosecwriteups.com/flutter-hackers-uncovering-the-devs-myopia-part-1-6c316be56b13
Part 2: https://infosecwriteups.com/flutter-hackers-uncovering-the-devs-myopia-part-2-598a44942b5e

Medium Flutter Hackers: Uncovering the Dev’s Myopia (Part 1) Life hack for understanding Flutter Application through source code leaks

👍 11
😁 3

Post #1874 6.49K May 4, 2023, 06:15 UTC

Vulnerabilities identified in Amazon Fire TV Stick
1) Local network PIN brute forcing (CVE-2023-1385)
2) Arbitrary Javascript code to execution (CVE-2023-1384)
3) Register services that are only locally accessible (CVE-2023-1383)
https://www.bitdefender.com/files/News/CaseStudies/study/430/Bitdefender-PR-Whitepaper-AMZFr-creat6696-en-EN.pdf

👍 7
🔥 7
❤ 1
🤔 1

Post #1873 10.9K May 2, 2023, 10:51 UTC

Android greybox fuzzing with AFL++ Frida mode
https://blog.quarkslab.com/android-greybox-fuzzing-with-afl-frida-mode.html

Quarkslab Android greybox fuzzing with AFL++ Frida mode - Quarkslab's blog This article is about greybox fuzzing of userland targets that can be encountered in Android using AFL++ and its Frida mode. We also discuss how to target JNI functions, to test the native features invoked by Java code.

👍 13

Post #1872 7.33K May 2, 2023, 09:59 UTC

Android TV Boxes: AllWinner H616/H618 & RockChip 3328 Android Malware Analysis & Cleanup
https://github.com/DesktopECHO/T95-H616-Malware

GitHub GitHub - DesktopECHO/T95-H616-Malware: "Pre-Owned" malware in ROM for AllWinner H616/H618 & RockChip RK3328 Android TV Boxes "Pre-Owned" malware in ROM for AllWinner H616/H618 & RockChip RK3328 Android TV Boxes - DesktopECHO/T95-H616-Malware

👍 9
🔥 1

Post #1871 10.4K May 2, 2023, 08:57 UTC

Androset: Automated script to convert and push Burp Suite certificate in Android, and modify Android's IP table to redirect all traffic to Burp Suite
https://github.com/Anof-cyber/Androset

GitHub GitHub - Anof-cyber/Androset: Automated script to convert and push Burp Suite certificate in Android, and modify Android's IP table… Automated script to convert and push Burp Suite certificate in Android, and modify Android's IP table to redirect all traffic to Burp Suite. - Anof-cyber/Androset

👍 11

Post #1870 6.1K May 2, 2023, 07:52 UTC

Smartphones With Qualcomm Chip Secretly Share Private Information With US Chip-Maker
"Smart phones with Qualcomm chip secretly send personal data to Qualcomm. This data is sent without user consent, unencrypted, and even when using a Google-free Android distribution."
https://www.nitrokey.com/news/2023/smartphones-popular-qualcomm-chip-secretly-share-private-information-us-chip-maker

Nitrokey Smartphones With Popular Qualcomm Chip Secretly Share Private Information With US Chip-Maker | Nitrokey Nitrokey security research reveals that smartphones with Qualcomm chips secretly send device data to Qualcomm without user consent. NitroPhone is not affected.

👍 11
👎 2
🤔 2
❤ 1
🔥 1

Post #1869 6.19K May 2, 2023, 06:44 UTC

BouldSpy (DAAM) - Android Spyware Tied to Iranian Police Targeting Minorities
https://www.lookout.com/blog/iranian-spyware-bouldspy

Lookout BouldSpy: Android Spyware Tied to Iranian Police Targets Minorities | Threat Intel Researchers at the Lookout Threat Lab have discovered a new Android surveillance tied to the Law Enforcement Command of the Islamic Republic of Iran (FARAJA).

👍 12

Post #1868 7.02K May 1, 2023, 13:37 UTC

Android Java code translation into native code to thwart AV detection
Video: https://youtu.be/UcdMx-te2NE
Slides and materials: https://github.com/LaurieWired/AndroidNativeObfuscation_defcon615

YouTube Android Undercover: Native Code Translation for AV Stealth - DC615/DEF CON Nashville This is a live recording of a talk I gave at DEFCON (DC615) Nashville. The presentation explores how translating Java code into Native code thwarts many AV detections. First, I go over a live example of translating Android Java code into Native code, and…

👍 15
👎 3

Post #1867 13.4K Apr 29, 2023, 07:10 UTC

Android Deep Link Issues And WebView Exploitation
https://8ksec.io/android-deeplink-and-webview-exploitation-8ksec-blogs/

8kSec Android Deep Links & WebView Exploitation | 8kSec In this Blog post, learn about Android deep link and WebView issues, explaining their targets, exploitation and security measures. Read now

👍 16
❤ 4
🔥 1

Post #1866 7.34K Apr 28, 2023, 10:46 UTC

Google Play Store bad apps and developers review in 2022
-blocked 1.43 million apps to be available on the Store
-banned 173K bad accounts
-prevented 500K submitted apps from unnecessarily accessing sensitive permissions over the past 3 years
-expanded the App Defense Alliance (McAfee, Trend Micro, ESET, Lookout, Zimperium)
https://security.googleblog.com/2023/04/how-we-fought-bad-apps-and-bad-actors.html

Google Online Security Blog How we fought bad apps and bad actors in 2022 Posted by Anu Yamunan and Khawaja Shams (Android Security and Privacy Team), and Mohet Saxena (Compute Trust and Safety) Keeping Google P...