Android Security & Malware

• 👍 19
• ❤ 4

Wololo.net PS4 PPPwn Exploit: DroidPPPwn port to Android phones (version 1.1) - Wololo.net Developer Deviato has released DroidPPPwn, a port of the PPPwn PS4 exploit to Android phones. It relies on the C++ port of the PPPwn exploit (and therefore is reasonably fast to run). As one...

• 👍 18
• 🫡 5
• 😱 4
• 🔥 3

• 👍 14
• 😱 2

• 👍 15

GitHub com.solarized.firedown/CVE-2024-31974 at main · actuator/com.solarized.firedown CVE-2024-31974. Contribute to actuator/com.solarized.firedown development by creating an account on GitHub.

• 👍 21
• 🤨 4

Medium Fuzzing Android binaries using AFL++ Frida Mode You might find this to be a fitting prologue to my earlier post on Creating and using JVM instances in Android C/C++ applications… and you…

• 👍 14

8kSec Mobile Malware Part 7: Blackrock Analysis | 8kSec Analyze the Blackrock Android malware in Part 7 of the mobile malware series. Learn how it abuses accessibility services and overlays to steal data.

• ❤ 19
• 👍 4
• 🥱 3
• 👎 2
• 😁 2

Cyble New Antidot Trojan Disguised As Fake Google Play Updates Discover the 'Antidot' Android Banking Trojan: a fake Google Play update that steals credentials using overlay attacks and remote control techniques.

• 🤔 12
• 👍 3
• 😁 2
• 🤡 2
• 🥱 2
• ❤ 1

• 👍 19
• 👏 3
• ❤ 1

• 👍 16
• ❤ 2

Forwarded from The Bug Bounty Hunter

Medium Flutter Windows Thick Client SSL Pinning Bypass I recently worked on a Flutter-based application and learned that it is different from other hybrid frameworks like React Native or…

• 🔥 26
• 👍 8
• ❤ 1

KnifeCoat Coverage guided fuzzing for native Android libraries (Frida & Radamsa) - KnifeCoat Intro Recently I have been getting into userland application testing on Android. I want to credit Iddo and Jacob for their excellent course on attacking IM Applications which I took at zer0con. As a …

• 🔥 21
• 👍 2

BleepingComputer Finland warns of Android malware attacks breaching bank accounts Finland's Transport and Communications Agency (Traficom) has issued a warning about an ongoing Android malware campaign targeting banking accounts.

• 🔥 10
• 👍 3

• 👍 18
• 😱 5

• 💩 21
• 🤡 12
• 👍 5
• 😁 5
• 🗿 3
• 😨 2

Medium How to Improve Your Android & iOS Static Analysis with Nuclei! TL;DR: In this post, we will cover how to statically analyze Android and iOS applications using Nuclei. We’ll start:

• 👍 12
• ❤ 3

Oversecured 20 Security Issues Found in Xiaomi Devices | Oversecured Blog Oversecured found and resolved significant mobile security vulnerabilities in Xiaomi devices. Our team discovered 20 dangerous vulnerabilities across various applications and system components that pose a threat to all Xiaomi users. The vulnerabilities

• 👍 15
• 😁 6
• 🤯 4
• 🍓 3
• 🙈 3

Microsoft News “Dirty stream” attack: Discovering and mitigating a common vulnerability pattern in Android apps Microsoft discovered a vulnerability pattern in multiple popular Android applications that could enable a malicious application to overwrite files in the vulnerable application’s internal data storage directory, which could lead to arbitrary code execution…

• 🔥 10
• 👍 2

奇安信 X 实验室 Playing Possum: What's the Wpeeper Backdoor Up To? Summary On April 18, 2024, XLab's threat hunting system detected an ELF file with zero detections on VirusTotal being distributed through two different domains. One of the domains was marked as malicious by three security firms, while the other was recently…

• ❤ 6
• 🔥 4
• 👍 1

• ❤ 8
• 😁 1