Channel Public Channel

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com

Open in Telegram

Subscribers: 44.7K
Photos: 136
Videos: 22
Links: 2.9K

Showing posts older than #2120 · Back to latest

Older Posts 20 shown

Post #2119 9.68K Jan 12, 2024, 15:15 UTC

Financial Fraud APK Campaign targeting Chinese users
https://unit42.paloaltonetworks.com/malicious-apks-steal-pii-from-chinese-users/

Unit 42 Financial Fraud APK Campaign Drawing attention to the ways threat actors steal PII for financial fraud, this article focuses on a malicious APK campaign aimed at Chinese users.

👏 12
👍 2

Post #2118 9.55K Jan 12, 2024, 07:17 UTC

Android DeviceVersionFragment.java Privilege Escalation Exploit for Pixel Watch (CVE-2023-48418)
https://0day.today/exploit/description/39237

👍 13

Post #2117 11K Jan 10, 2024, 11:31 UTC

Analysis of iOS Info Stealer malware distributed via phishing website
https://medium.com/@icebre4ker/analysis-of-an-info-stealer-chapter-2-the-ios-app-0529e7b45405

Medium Analysis of an Info Stealer — Chapter 2: The iOS App Introduction

👍 16

Post #2116 10.3K Jan 9, 2024, 09:06 UTC

Portable Flipper Zero detector
Now you can detect any Flipper Zeros and BLE advertisement spam attacks in vicinity using Android Bluetooth LE Spam app
https://www.mobile-hacker.com/2024/01/09/how-to-detect-flipper-zero-and-bluetooth-advertisement-attacks/

👍 11
❤ 2

Post #2115 12.5K Jan 5, 2024, 14:42 UTC

MyEstatePoint Property Search app leaked data on nearly half a million of its users, exposing their names and plain-text passwords
https://cybernews.com/security/myestatepoint-property-search-app-data-leak/

Cybernews Real estate Android app leaks user passwords MyEstatePoint Property Search Android app leaks user passwords.

👍 12
😱 4
👏 1

Post #2114 11K Jan 5, 2024, 09:05 UTC

A PoC for the CVE-2023-32530, for iOS/MacOS from Operation Triangulation discovered by Kaspersky
- Tested on: iOS 16.3, 16.3.1, 16.4 and 16.5 (iPhone 14 Pro Max) and macOS 13.1 and 13.4 (MacBook Air M2 2022)
- Fixed in iOS 16.5.1 and macOS 13.4.1
https://github.com/felix-pb/kfd/blob/main/writeups/smith.md

GitHub kfd/writeups/smith.md at main · felix-pb/kfd kfd, short for kernel file descriptor, is a project to read and write kernel memory on Apple devices. - felix-pb/kfd

👍 11
🔥 6
❤ 4

Post #2113 11.6K Jan 2, 2024, 07:41 UTC

Path traversal to RCE in Android — Mobile Hacking Lab ‘Document Viewer’ write-up
https://ajmal-moochingal.medium.com/path-traversal-to-rce-in-android-mobile-hacking-lab-document-viewer-write-up-ef9226aea1ac

Medium Path traversal to RCE in Android — Mobile Hacking Lab ‘Document Viewer’ write-up During my preparation for eMAPT, I came across Mobile Hacking Lab — and their free hacking labs which I felt would help me for practice…

👍 18

Post #2112 10.4K Jan 1, 2024, 12:38 UTC

Frida Android Helper: Several handy commands to facilitate common Android pentesting tasks
https://github.com/Hamz-a/frida-android-helper

GitHub GitHub - Hamz-a/frida-android-helper: Frida Android utilities Frida Android utilities. Contribute to Hamz-a/frida-android-helper development by creating an account on GitHub.

👍 9

Post #2111 9.84K Dec 31, 2023, 16:10 UTC

Looking at an unfixed iOS vulnerability
https://joshua.hu/apple-ios-patched-unpatched-vulnerabilities

Joshua Rogers’ Scribbles No new iPhone? No secure iOS: Looking at an unfixed iOS vulnerability A look at the messy reality of iOS vulnerabilities: which bugs get patched, which quietly linger, and the challenges of tracking real device risk over time.

👍 8

Post #2110 10.3K Dec 31, 2023, 11:45 UTC

Vooki - Free Android APK & API Vulnerability Scanner(Yaazhini)
https://www.vegabird.com/yaazhini/

Vegabird Vooki - Free Android APK & API Vulnerability Scanner | Vooki Infosec Free Android Application APK & API Vulnerability Scanner tool. Available for Windows & Mac. Get the android app security scanner.

👍 14
❤ 2

Post #2109 10K Dec 31, 2023, 10:37 UTC

Frinet: Tracing the execution of a specific function in a userland process, on a Frida-compatible system (Tested on Linux/Android/iOS/Windows)
https://github.com/synacktiv/frinet