Channel Public Channel

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com

Open in Telegram

Subscribers: 44.7K
Photos: 136
Videos: 22
Links: 2.9K

Showing posts older than #2220 · Back to latest

Older Posts 20 shown

Post #2219 14.5K Apr 30, 2024, 14:07 UTC

Advanced Frida Usage Part 9 – Memory Scanning in Android
https://8ksec.io/advanced-frida-usage-part-9-memory-scanning-in-android/

8kSec Frida Part 9: Memory Scanning in Android | 8kSec Learn about Frida's Memory.scan() API for scanning and patching bytes in Android process memory. Covers pattern matching and practical patching.

🔥 9
👍 3
❤ 2

Post #2218 9.28K Apr 29, 2024, 09:56 UTC

Brokewell: do not go broke from new banking malware
https://www.threatfabric.com/blogs/brokewell-do-not-go-broke-by-new-banking-malware

ThreatFabric Brokewell: do not go broke from new banking malware! Explore the new malware family, Brokewell, with Device Takeover capabilities. Understand the risks it poses to financial institutions and how to stay protected.

🔥 9
👍 4

Post #2217 10.4K Apr 25, 2024, 20:20 UTC

Security issues in phone-tracking app iSharing exposed users locations
https://www.ericdaigle.ca/isharing-data-leak-writeup/

👍 6
❤ 2

Post #2216 10.6K Apr 25, 2024, 16:46 UTC

Brokewell: A New Android Banking Trojan Targeting Users In Germany
https://cyble.com/blog/brokewell-a-new-android-banking-trojan-targeting-users-in-germany/

Cyble Brokewell: A New Android Banking Trojan Targeting Users In Germany Cybel uncovers the 'Brokewell' Android Banking Trojan targeting German users with overlay attacks, keylogging, and screen recording. Stay updated on threats.

👍 10
❤ 2
😁 1

Post #2215 10.8K Apr 23, 2024, 12:38 UTC

Vulnerabilities across cloud keyboard apps reveal keystrokes to network eavesdroppers (Baidu, Honor, iFlytek, OPPO, Samsung, Tencent, Vivo, and Xiaomi that could be exploited to reveal what a user types)
https://citizenlab.ca/2024/04/vulnerabilities-across-keyboard-apps-reveal-keystrokes-to-network-eavesdroppers/

The Citizen Lab The not-so-silent type In this report, we examine cloud-based pinyin keyboard apps from nine vendors (Baidu, Honor, Huawei, iFlyTek, OPPO, Samsung, Tencent, Vivo, and Xiaomi) for vulnerabilities in how the apps transmit user keystrokes. Our analysis found that eight of the nine…

👍 13
🔥 5

Post #2214 8.99K Apr 23, 2024, 08:32 UTC

Security analysis of system apps of prepaid Android carrier devices
[slides] https://media.defcon.org/DEF%20CON%2031/DEF%20CON%2031%20presentations/Ryan%20Johnson%20Mohamed%20Elsabagh%20Angelos%20Stavrou%20-%20Still%20Vulnerable%20Out%20of%20the%20Box%20Revisiting%20the%20Security%20of%20Prepaid%20Android%20Carrier%20Devices.pdf

🔥 9
👍 2
❤ 1

Post #2213 9.56K Apr 22, 2024, 11:51 UTC

[BlackHat Asia 2024] SystemUI As EvilPiP: The Hijacking Attacks on Modern Mobile Devices
https://www.blackhat.com/asia-24/briefings/schedule/?s=03#systemui-as-evilpip-the-hijacking-attacks-on-modern-mobile-devices-36260
[slides] https://i.blackhat.com/Asia-24/Presentations/Asia-24-WeiMinCheng-systemui-as-evilpip-the-hijacking-attacks-on-modern-mobile-devices.pdf

Blackhat Black Hat Asia 2024

👍 7

Post #2212 8.85K Apr 22, 2024, 10:51 UTC

[BlackHat Asia 2024] Privacy Detective: Sniffing Out Your Data Leaks for Android
https://www.blackhat.com/asia-24/briefings/schedule/?s=03#privacy-detective-sniffing-out-your-data-leaks-for-android-37301
[slides] https://i.blackhat.com/Asia-24/Presentations/Asia-24-Zhou-PrivacyDetective.pdf

Blackhat Black Hat Asia 2024

👍 6
❤ 3

Post #2211 10K Apr 22, 2024, 09:50 UTC

[BlackHat Asia 2024] Analysing a NSO iOS Spyware Sample
https://www.blackhat.com/asia-24/briefings/schedule/?s=03#you-shall-not-pass---analysing-a-nso-ios-spyware-sample-37980
[slides] https://i.blackhat.com/Asia-24/Asia-24-Frielingsdorf-YouShallNotPassAnalysing.pdf

Blackhat Black Hat Asia 2024

👍 16
❤ 2

Post #2210 9.52K Apr 21, 2024, 07:43 UTC

XAgent Spyware Targeting iOS Devices in Western Europe: Analysis of Capabilities
https://www.linkedin.com/pulse/xagent-spyware-targeting-ios-devices-western-europe-dmitry-bestuzhev-xunle

Linkedin XAgent Spyware Targeting iOS Devices in Western Europe: Analysis of Capabilities Executive Summary: During a recent discussion between "Isabelle Quinn" and myself regarding the latest findings of iOS malware, we encountered new samples of interest. Following observations of activity from the Triangulation group a few days ago by Dmitry…

🔥 12
❤ 1
👍 1

Post #2209 8.61K Apr 21, 2024, 07:01 UTC

Element Android CVE-2024-26131, CVE-2024-26132 - Never Take Intents From Strangers
https://www.shielder.com/blog/2024/04/element-android-cve-2024-26131-cve-2024-26132-never-take-intents-from-strangers/

Shielder Shielder - Element Android CVE-2024-26131, CVE-2024-26132 - Never Take Intents From Strangers A writeup about two intent-based Android vulnerabilities CVE-2024-26131 and CVE-2024-26132 in Element (Matrix).

🔥 11
👍 2
💯 2

Post #2208 9.04K Apr 20, 2024, 13:13 UTC

Breaking Custom Encryption Using Frida
https://labs.cognisys.group/posts/Breaking-Custom-Ecryption-Using-Frida-Mobile-Application-pentesting/

Cognisys Group Labs Breaking Custom Encryption Using Frida (Mobile Application Pentesting) Overview

👍 10
❤ 5

Post #2207 9.96K Apr 17, 2024, 16:38 UTC

SoumniBot: the new Android banker’s unique techniques
https://securelist.com/soumnibot-android-banker-obfuscates-app-manifest/112334/

👍 8
❤ 2

Post #2206 9.32K Apr 17, 2024, 15:29 UTC

iOS LightSpy Returns: Renewed Espionage Campaign Targets Southern Asia, Possibly India
https://blogs.blackberry.com/en/2024/04/lightspy-returns-renewed-espionage-campaign-targets-southern-asia-possibly-india

👍 8
🔥 2

Post #2205 11.5K Apr 11, 2024, 05:05 UTC

ANDROID SUPPLY CHAIN VALIDATION CHEAT SHEET
This cheat sheet is based on the work performed on Android TV devices (we documented our steps in the post Android TV Devices: Pre-0wned Supply Chain Security Threats)
https://eclypsium.com/blog/android-supply-chain-validation-cheat-sheet/

Eclypsium | Supply Chain Security for the Modern Enterprise Android Supply Chain Validation Cheat Sheet Several different tools and techniques are available for Android to enumerate software and configurations, allowing you to begin to validate the software on devices. This cheat sheet is based on the work performed on Android TV devices (we documented our…

👍 14
❤ 2

Post #2204 9.9K Apr 10, 2024, 09:59 UTC

Active Android espionage campaign targeting users mainly in India and Pakistan with apps bundled with the XploitSPY malware posing mostly as messaging services - even available on Google Play Store
https://www.welivesecurity.com/en/eset-research/exotic-visit-campaign-tracing-footprints-virtual-invaders/

🔥 7
👍 5
⚡ 1

Post #2203 10.1K Apr 10, 2024, 08:32 UTC

Threat actor "Starry Addax" targets human rights defenders in North Africa with new Android malware
https://blog.talosintelligence.com/starry-addax/

Cisco Talos Starry Addax targets human rights defenders in North Africa with new malware Cisco Talos is disclosing a new threat actor we deemed “Starry Addax” targeting mostly human rights activists, associated with the Sahrawi Arab Democratic Republic (SADR) cause with a novel mobile malware.

👍 11

Post #2202 9.6K Apr 9, 2024, 18:47 UTC

Bypassing anti-reversing defences in iOS applications
https://twelvesec.com/2023/10/10/bypassing-anti-reversing-defences-in-ios-applications/

Twelvesec Bypassing anti-reversing defences in iOS applications - Twelvesec A walktrough on dynamically bypassing anti-debugging and anti-reversing defences in iOS applications.

👍 9
❤ 3

Post #2201 21.6K Apr 9, 2024, 09:25 UTC

Hornet dating app with over 10 million installs had vulnerabilities, allowing precise location determination of their users, even with distance display being disabled
https://research.checkpoint.com/2024/the-illusion-of-privacy-geolocation-risks-in-modern-dating-apps/

Check Point Research The Illusion of Privacy: Geolocation Risks in Modern Dating Apps - Check Point Research Key takeaways Introduction Dating apps traditionally utilize location data, offering the opportunity to connect with people nearby, and enhancing the chances of real-life meetings. Some apps can also display the distance of the user to other users. This feature…

👍 16
❤ 2
🤷‍♂ 1
🤔 1

Post #2200 11.4K Apr 4, 2024, 12:48 UTC

How charging your phone can compromise your data using three types of Juice Jacking attack
https://www.mobile-hacker.com/2024/04/04/how-charging-your-phone-can-compromise-your-data-using-juice-jacking-attack/

👍 19
😨 4
⚡ 2

Older posts →