Channel Public Channel

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com

Open in Telegram

Subscribers: 44.8K
Photos: 136
Videos: 22
Links: 2.9K

Showing posts older than #2300 · Back to latest

Older Posts 19 shown

Post #2299 7.58K Aug 1, 2024, 08:44 UTC

Open Redirect in Login Redirect in MobSF (CVE-2024-41955)
Update to MobSF v4.0.5.
https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-8m9j-2f32-2vx4

GitHub Open Redirect in Login Redirect ### Impact _What kind of vulnerability is it? Who is impacted?_ An open redirect vulnerability exist in MobSF authentication view. PoC 1. Go to http://127.0.0.1:8000/login/?next=//afine.co...

🔥 8

Post #2298 8.08K Aug 1, 2024, 08:04 UTC

iOS Reverse Engineering
https://github.com/GhidraEnjoyr/iOS-Reverse-Engineering

GitHub GitHub - GhidraEnjoyr/iOS-Reverse-Engineering Contribute to GhidraEnjoyr/iOS-Reverse-Engineering development by creating an account on GitHub.

🌚 9
👍 4
🔥 1

Post #2297 7.32K Aug 1, 2024, 06:59 UTC

BlueStacks (Android emulator) privilege escalation through VM backdooring (CVE-2024-33352)
https://github.com/mmiszczyk/CVE-2024-33352

GitHub GitHub - mmiszczyk/CVE-2024-33352: BlueStacks privilege escalation through VM backdooring BlueStacks privilege escalation through VM backdooring - mmiszczyk/CVE-2024-33352

🔥 10
👍 5
❤ 1

Post #2296 7.33K Jul 31, 2024, 21:30 UTC

Android CraxsRAT strikes in Malaysia
https://www.group-ib.com/blog/craxs-rat-malaysia/

Group-IB Android Remote Access malware strikes in Malaysia | Group-IB Blog Group-IB's investigation on a malware sample targeting a Malaysia-based financial organization's clients in the Asia-Pacific region.

🤡 7
🥱 5
❤ 2

Post #2295 7.89K Jul 31, 2024, 06:44 UTC

Mandrake spyware sneaks onto Google Play again, flying under the radar for two years
https://securelist.com/mandrake-apps-return-to-google-play/113147/

Securelist New Mandrake Android spyware version discovered on Google Play Mandrake spyware threat actors resume attacks with new functionality targeting Android devices while being publicly available on Google Play

🤯 8
👍 6

Post #2294 7.63K Jul 31, 2024, 05:01 UTC

Unmasking the SMS Stealer: Targeting Several Countries with Deceptive Apps
https://www.zimperium.com/blog/unmasking-the-sms-stealer-targeting-several-countries-with-deceptive-apps/

Zimperium Unmasking the SMS Stealer: Targeting Several Countries with Deceptive Apps - Zimperium true

👍 10

Post #2293 9.32K Jul 27, 2024, 08:10 UTC

Vulnerability in Telegram for Android: Use-after-free in Connection::onReceivedData
https://bugs.chromium.org/p/project-zero/issues/detail?id=2547

👍 10

Post #2292 10.5K Jul 25, 2024, 09:43 UTC

How to install Kali NetHunter on TicWatch Pro 3
https://www.mobile-hacker.com/2024/07/25/how-to-install-kali-nethunter-on-ticwatch-pro-3/

Mobile Hacker How to install Kali NetHunter on TicWatch Pro 3 In previous series of blogs I focused on installation of Kali NetHunter on older model of TicWatch Pro 2018 (catfish) which might be for some of you a good choice if you already have them forgotten in your drawer or you can get them cheap to play around.…

🔥 20
👍 6
❤ 1

Post #2291 8.89K Jul 24, 2024, 12:09 UTC

Android spyware named Ratel pretending to be Hamster Kombat game distributed via an unofficial Telegram channel
https://www.welivesecurity.com/en/eset-research/tap-estry-threats-targeting-hamster-kombat-players/

Welivesecurity The tap-estry of threats targeting Hamster Kombat players ESET research reveals how the success of Hamster Kombats has attracted malicious actors trying to abuse interest in the game for monetary gain.

🔥 14
🤣 9
😁 3

Post #2290 9.93K Jul 23, 2024, 12:30 UTC

WhatsApp trick: Android malware can impersonate PDF file
https://www.mobile-hacker.com/2024/07/23/whatsapp-trick-android-malware-can-impersonate-pdf-file/

Mobile Hacker WhatsApp trick: Android malware can impersonate PDF file On July 14th 2024, a malware analyst @0x6rss discovered and shared on X a security issue in WhatsApp Messenger for Android. This issue allows an attacker to disguise malicious Android app as PDF file shared in chat. The bug cannot be misused to share malicious…

👍 22
❤ 4
👎 1
😁 1
😱 1

Post #2289 7.82K Jul 23, 2024, 08:52 UTC

Part 1: Injecting and Exploiting Synthetic Remote Vulnerabilities to explore Signal-iOS and WebRTC
https://margin.re/2024/07/you-cant-spell-webrtc-without-rce-part-1/

Margin Research You Can't Spell WebRTC without RCE - Part 1 Injecting and Exploiting Synthetic Remote Vulnerabilities to explore Signal-iOS and WebRTC It’s another average Friday morning and my iPhone shows 705 unread Signal messages. Signal has not completely supplanted my use of iMessage, but it does dominate communications…

🔥 17
🥰 1

Post #2288 12.1K Jul 22, 2024, 14:04 UTC

Hacking a 2014 tablet... in 2024!
https://blog.r0rt1z2.com/hacking-a-2014-tablet-in-2024.html

❤ 12
🔥 4
🥰 3

Post #2287 13.9K Jul 22, 2024, 12:18 UTC

Exploiting the EvilVideo vulnerability on Telegram
Discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos
https://www.welivesecurity.com/en/eset-research/cursed-tapes-exploiting-evilvideo-vulnerability-telegram-android/

Welivesecurity Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android ESET researchers discovered a zero-day Telegram for Android exploit that allows sending malicious files disguised as videos.

👍 11
🔥 4
❤ 1
👎 1
👏 1

Post #2286 9.31K Jul 18, 2024, 11:40 UTC

Beware of BadPack: One Weird Trick Being Used Against Android Devices
https://unit42.paloaltonetworks.com/apk-badpack-malware-tampered-headers/

Unit 42 Beware of BadPack: One Weird Trick Being Used Against Android Devices Our data shows a pattern of APK malware bundled as BadPack files. We discuss how this technique is used to garble malicious Android files, creating challenges for analysts.

👌 12
👍 5
❤ 4

Post #2285 8.07K Jul 18, 2024, 11:08 UTC

Konfety Spreads ‘Evil Twin’ Android Apps for Multiple Fraud Schemes
https://www.humansecurity.com/learn/blog/satori-threat-intelligence-alert-konfety-spreads-evil-twin-apps-for-multiple-fraud-schemes

Humansecurity Satori Threat Intelligence Alert: Konfety Spreads ‘Evil Twin’ Apps for Multiple Fraud Schemes - HUMAN Security Uncover the intricate web of the Konfety ad fraud operation spreading through 'evil twin' apps, exposing malicious tactics and deceptive practices in the mobile advertising realm.

👍 8

Post #2283 8.63K Jul 18, 2024, 07:21 UTC

Cellebrite leaked documents display which Android and iOS versions it is capable to unlock and access data from
https://www.404media.co/leaked-docs-show-what-phones-cellebrite-can-and-cant-unlock/

❤ 22
👍 4

Post #2282 7.97K Jul 18, 2024, 06:31 UTC

Use TicWatch Pro as a Keystroke Injector
https://www.mobile-hacker.com/2024/07/18/ticwatch-pro-as-a-keystroke-injector/

Mobile Hacker TicWatch Pro as a Keystroke Injector If you successfully installed NetHunter as described in previous blogs, we can start use its tools. In this blog, I will focus on Duck Hunter provided by NetHunter. Using DuckHunter allows our TicWatch Pro smartwatches to behave as Rubber Ducky, also known…

👍 11

Post #2281 13.9K Jul 17, 2024, 15:59 UTC

APKscan: Scan for secrets, endpoints, API keys, tokens, credentials in Android apps
https://github.com/LucasFaudman/apkscan

GitHub GitHub - LucasFaudman/apkscan: Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android… Scan for secrets, endpoints, and other sensitive data after decompiling and deobfuscating Android files. (.apk, .xapk, .dex, .jar, .class, .smali, .zip, .aar, .arsc, .aab, .jadx.kts). - LucasFaudma...

❤ 21
🔥 8
👍 4
👏 3

Post #2280 7.56K Jul 17, 2024, 08:37 UTC

Install NetHunter on TicWatch Pro after flashing factory firmware + troubleshooting
https://www.mobile-hacker.com/2024/07/17/install-nethunter-on-ticwatch-pro-after-flashing-factory-firmware/

Mobile Hacker Install NetHunter on TicWatch Pro after flashing factory firmware You tried to flash custom ROM, root it or install Kali NetHunter on your TicWatch Pro (catfish) but something went wrong? Your smartwatches end-up in bootloop, always boots into recovery, from installation logs you were informed there is not enough free space…

👍 14

Older posts →