Channel Public Channel

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com

Open in Telegram

Subscribers: 44.8K
Photos: 136
Videos: 22
Links: 2.9K

Showing posts older than #2441 · Back to latest

Older Posts 20 shown

Post #2440 10.3K Jan 6, 2025, 13:12 UTC

Emulating Android native libraries using unidbg
https://bhamza.me/blogpost/2024/09/10/Emulating-Android-native-libraries-using-unidbg.html

Hamza’s blog posts, notes and thoughts. Emulating Android native libraries using unidbg Introduction Unidbg is an open-source framework to emulate Android native libraries (and to a certain extent has experimental iOS emulation capabilities). There are a few use cases where emulating Android libraries is beneficial. I will cover a single use…

🔥 11
🌚 4
👍 3
👏 3

Post #2439 9.54K Jan 5, 2025, 09:31 UTC

FireScam: Android information stealing malware with spyware capabilities
https://www.cyfirma.com/research/inside-firescam-an-information-stealer-with-spyware-capabilities/

CYFIRMA Inside FireScam : An Information Stealer with Spyware Capabilities - CYFIRMA This report has been revised to remove references to the obfuscation tool previously mentioned, as the obfuscation techniques in the...

🌚 12
👍 6
❤ 1

Post #2438 17.4K Dec 31, 2024, 11:53 UTC

Ultimate iOS (iPhone & iPad) Hardening Guide
https://github.com/martinholovsky/Security-Blueprints/blob/main/iOS-Hardening-Guide.md

GitHub Security-Blueprints/iOS-Hardening-Guide.md at main · martinholovsky/Security-Blueprints Collection of my Security Blueprints & Guides. Contribute to martinholovsky/Security-Blueprints development by creating an account on GitHub.

👍 12
🔥 5
🤡 3

Post #2437 10.2K Dec 31, 2024, 10:50 UTC

How to install and run any firmware (Marauder, Bruce, Ghost ESP...) on ESP32 devices without using computer with M5Stick Launcher
https://www.mobile-hacker.com/2024/12/29/run-firmware-anywhere-flexibility-of-m5stick-launcher/

🔥 21
👍 4
❤ 1

Post #2436 9.79K Dec 31, 2024, 08:05 UTC

Android instrumentation using Frida
https://learnfrida.info/

learnfrida.info Frida HandBook Frida handbook, resource to learn the basics of binary instrumentation in desktop systems (Windows, Linux, MacOS) with real-world examples.

👍 11

Post #2435 11.1K Dec 29, 2024, 11:08 UTC

Install and run any firmware (Marauder, Bruce, Ghost ESP...) on ESP32 devices without using computer with M5Stick Launcher
https://www.mobile-hacker.com/2024/12/29/run-firmware-anywhere-flexibility-of-m5stick-launcher/

Mobile Hacker Run Firmware Anywhere: Flexibility of M5Stick Launcher Launcher tool that is able to switch between all of the three firmware without a need of a computer, and even while on the go.

👍 15
🌚 2

Post #2434 11.6K Dec 24, 2024, 08:03 UTC

Android BADBOX Botnet Is Back
https://www.bitsight.com/blog/badbox-botnet-back

Bitsight BADBOX Botnet Is Back | Bitsight The TRACE team investigated BADBOX, which is a large-scale cybercriminal operation selling off-brand Android TV boxes, smartphones, and other Android electronics with preinstalled malware.

👍 16
🔥 5
😁 2

Post #2433 12.1K Dec 23, 2024, 08:49 UTC

Exploring Marauder, Bruce, and Ghost ESP on Cheap Yellow Device
https://www.mobile-hacker.com/2024/12/23/exploring-marauder-bruce-and-ghost-esp-on-cheap-yellow-device/

Mobile Hacker Exploring Marauder, Bruce, and Ghost ESP on Cheap Yellow Display - Mobile Hacker The Cheap Yellow Display (CYD) is a cost-effective development board that has captured the attention of the maker community. Featuring a 2.8-inch TFT touchscreen LCD and powered by an ESP32 microcontroller, this device is ideal for a variety of IoT and graphical…

👍 13
🔥 8

Post #2432 11.4K Dec 19, 2024, 05:29 UTC

Screen recording Android spyware distributed through Amazon Appstore
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/spyware-distributed-through-amazon-appstore/

McAfee Blog Spyware distributed through Amazon Appstore | McAfee Blog Authored by Wenfeng Yu and ZePeng Chen As smartphones have become an integral part of our daily lives, malicious apps have grown increasingly deceptive

🤔 13
😁 7
🔥 2

Post #2431 11.4K Dec 18, 2024, 08:17 UTC

Diving into ADB protocol internals (2/2)
https://www.synacktiv.com/publications/diving-into-adb-protocol-internals-22.html

Synacktiv Diving into ADB protocol internals (2/2)

👍 10
🔥 6
😁 5
🌚 4
❤ 1

Post #2430 10.5K Dec 16, 2024, 10:55 UTC

Authorities in Serbia used Cellebrite to unlock mobile phones so they could then infect them with NoviSpy Android malware
https://securitylab.amnesty.org/latest/2024/12/a-digital-prison-surveillance-and-the-suppression-of-civil-society-in-serbia/

Amnesty International Security Lab “A Digital Prison”: Surveillance and the suppression of civil society in Serbia - Amnesty International Security Lab This is the Executive Summary of Amnesty International’s report on surveillance and the suppression of civil society in Serbia. Please click here for the full report in PDF format. You can read the Executive Summary in Serbian, French or Spanish. In February…

🔥 11
😁 5
👍 3

Post #2429 8.47K Dec 16, 2024, 10:18 UTC

Discovery of 6 vulnerabilities in one Qualcomm driver and one of the used as In-the-Wild exploit
https://googleprojectzero.blogspot.com/2024/12/qualcomm-dsp-driver-unexpectedly-excavating-exploit.html

projectzero.google The Qualcomm DSP Driver - Unexpectedly Excavating an Exploit Posted by Seth Jenkins, Google Project ZeroThis blog post provides a technical analysis of exploi...

🔥 10
👍 2
❤ 1

Post #2428 9.04K Dec 16, 2024, 07:30 UTC

How to detect ARP spoofing attack using Android app
https://www.mobile-hacker.com/2024/12/16/detect-arp-spoofing-attack-using-android-app/

Mobile Hacker Detect ARP spoofing attack using Android app ARP spoofing attacks are often used in combination with other types of attacks, such as DNS spoofing, SSL stripping, and more. These attacks can be used to steal sensitive information, launch phishing attacks.

👍 13
🔥 3
👏 1

Post #2427 8.38K Dec 14, 2024, 13:56 UTC

WiFi Calling: Revealing Downgrade Attacks and Not-so-private private Keys
https://i.blackhat.com/EU-24/Presentations/EU-24-DabrowskiGegenhuber-WiFi-Calling-Revealing-Downgrade-Attacks.pdf

🔥 12

Post #2426 8.77K Dec 14, 2024, 13:51 UTC

My other ClassLoader is your ClassLoader: Creating evil twin instances of a class
https://i.blackhat.com/EU-24/Presentations/EU-24-Valsamaras-My-other-classloader.pdf

🔥 12

Post #2425 8.18K Dec 14, 2024, 12:50 UTC

Unmasking State-Sponsored Mobile Surveillance Malware from Russia, China, and North Korea – Threat Actors, Tactics, and Defense Strategies
https://i.blackhat.com/EU-24/Presentations/EU-24-V2-Islamoglu-Unmasking-State-Sponsored-Mobile-Surveillance.pdf

🔥 10
😁 8

Post #2424 7.79K Dec 14, 2024, 11:49 UTC

Vulnerabilities in the eSIM download protocol
http://i.blackhat.com/EU-24/Presentations/EU-24-Ahmed-VulnerabilitiesIneSIM.pdf

🔥 14

Post #2423 7.99K Dec 14, 2024, 11:05 UTC

Android's CVE-2022-20201 (InstalldNativeService)
https://pwner.gg/blog/Android's-CVE-2022-20201

( ͡◕ _ ͡◕)👌 Android's CVE-2022-20201 (InstalldNativeService) Intro This is another attempt as part of my @vr_progress to hack my old, unpatched OnePlus phone which didn’t get any updates for years. This time I chose CVE-2022-20201, a crafty little bug hiding in one of the subsystems used by Android’s package manager.

🔥 13
🙏 2
❤ 1
💩 1

Post #2422 6.64K Dec 14, 2024, 10:25 UTC

Bluetooth RCE allows to compromise the car to be able to record in-car audio, take screenshots, and download contacts from a Skoda Superb over the Internet
https://i.blackhat.com/EU-24/Presentations/EU-24-Parnishchev-OverTheAirVW.pdf

🔥 16
👍 2
❤ 1

Post #2421 11.8K Dec 14, 2024, 09:36 UTC

Understanding XSS in Android Apps
https://medium.com/@anandrishav2228/earn-10-000-xss-in-android-apps-scratch-to-advance-cb3aa6c2b98f

Medium Earn $10,000 XSS in Android Apps Scratch to Advance. Cross-Site Scripting (XSS) attacks are often associated with web applications, but they can also be critical in Android application…

👍 12

Older posts →