Channel Public Channel

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com

Open in Telegram

Subscribers: 44.8K
Photos: 136
Videos: 22
Links: 2.9K

Showing posts older than #2501 · Back to latest

Older Posts 20 shown

Post #2500 11.1K Apr 12, 2025, 07:47 UTC

A Random and Simple Tip: Advanced Analysis of JNI Methods Using Frida
https://revflash.medium.com/a-random-and-simple-tip-advanced-analysis-of-jni-methods-using-frida-8b948ffcc8f5

Medium A Random and Simple Tip: Advanced Analysis of JNI Methods Using Frida In this article, I will share a tip for those interested in performing a more detailed analysis of the behavior of native methods, with a…

🌚 6

Post #2499 6.52K Apr 11, 2025, 20:56 UTC

SMS Pumping: How Criminals Turn Your Messaging Service into Their Cash Machine
https://www.group-ib.com/blog/sms-pumping/

Group-IB SMS Pumping: How Criminals Turn Your Messaging Service into Their Cash Machine SMS Pumping fraud is a deceptive scheme where fraudsters manipulate SMS verification systems to inflate non-organic traffic and generate revenue at businesses’ expense. Discover how it works and ways to mitigate it.

❤ 8
👍 1
🌚 1

Post #2498 5.94K Apr 11, 2025, 16:18 UTC

Overview of the PlayPraetor Masquerading Party Variants
https://www.ctm360.com/reports/play-masquerading-party-report

Ctm360 Play Masquerading Party (PMP) Report | CTM360’s Analysis of Android Scam Variants CTM360’s Play Masquerading Party (PMP) report reveals the evolution of the PlayPraetor scam, highlighting fake Play Store pages, phishing apps, and RATs.

👍 5
❤ 2
🌚 1

Post #2497 6.21K Apr 11, 2025, 15:38 UTC

BADBAZAAR and MOONSHINE: Technical analysis and mitigations
https://www.ncsc.gov.uk/news/advisory-badbazaar-moonshine-technical-analysis-mitigations

National Cyber Security Centre BADBAZAAR and MOONSHINE: Technical analysis and mitigations This advisory provides new and collated threat intelligence on two variants of spyware known as BADBAZAAR and MOONSHINE, and includes advice for app store operators, developers and social media companies to help keep their users safe.

❤ 4
🌚 2

Post #2496 6.68K Apr 11, 2025, 15:38 UTC

BADBAZAAR and MOONSHINE: Spyware targeting Uyghur, Taiwanese and Tibetan groups and civil society actors
https://www.ncsc.gov.uk/news/advisory-badbazaar-moonshine

National Cyber Security Centre - NCSC.GOV.UK BADBAZAAR and MOONSHINE: Spyware targeting Uyghur, Taiwanese and Tibetan groups and civil society actors The NCSC and partners publish new information and mitigation measures for those at high risk from two spyware variants.

🌚 5
❤ 2

Post #2495 6.52K Apr 11, 2025, 14:33 UTC

Android Malware Disguised as Government Alerts distributed in India via WhatsApp
https://blogs.quickheal.com/beware-malicious-android-malware-disguised-as-government-alerts/

Home - Quick Heal Blog Beware: Malicious Android Malware Disguised as Government Alerts - Home In our high-tech world, sneaky cyber threats can pop up anywhere. Lately, we've spotted sneaky malware on Android phones spreading through fake WhatsApp messages. These messages pretend to be from the government, but they're hiding something nasty inside.…

👍 7
🤡 3
🌚 2
❤ 1
👎 1
🥱 1

Post #2494 6.34K Apr 11, 2025, 10:16 UTC

[pdf] DVa: Extracting Victims and Abuse Vectors from Android Accessibility Malware
https://www.usenix.org/system/files/sec24summer-prepub-136-xu-haichuan.pdf

🌚 5
❤ 1
👍 1
👏 1

Post #2493 7.47K Apr 11, 2025, 09:22 UTC

Salvador Stealer: New Android Malware That Phishes Banking Details & OTPs
https://any.run/cybersecurity-blog/salvador-stealer-malware-analysis/

any.run Salvador Stealer: Analysis of New Mobile Banking Malware Discover detailed analysis of Salvador Stealer, a new Android malware targeting users of mobile banking apps.

🌚 6
❤ 2
👍 1
👏 1

Post #2492 6.58K Apr 11, 2025, 08:50 UTC

Detailed Analysis of DocSwap Malware Disguised as Security Document Viewer operated by Kimsuky APT
https://medium.com/s2wblog/detailed-analysis-of-docswap-malware-disguised-as-security-document-viewer-218a728c36ff

Medium Detailed Analysis of DocSwap Malware Disguised as Security Document Viewer Author: HyeongJun Kim | S2W TALON

🌚 5
👍 1
🥱 1
🥴 1

Post #2491 9.15K Apr 1, 2025, 08:52 UTC

'Lucid' Phishing Platform Targets iOS and Android Users with SMS Attacks
https://catalyst.prodaft.com/public/report/lucid/overview

👍 15
🌚 3

Post #2490 8.33K Mar 31, 2025, 13:38 UTC

TsarBot: A New Android Banking Trojan Targeting Over 750 Banking, Finance, and Cryptocurrency Applications
https://cyble.com/blog/tsarbot-using-overlay-attacks-targeting-bfsi-sector/

Cyble TsarBot Trojan Hits 750+ Banking & Crypto Apps! Beware of TsarBot! This Android banking Trojan spreads via phishing, steals credentials, and hijacks devices. Stay safe with our latest insights.

👍 9
🌚 1

Post #2489 7.46K Mar 31, 2025, 12:32 UTC

Exposing Crocodilus: New Device Takeover Malware Targeting Android Devices
https://www.threatfabric.com/blogs/exposing-crocodilus-new-device-takeover-malware-targeting-android-devices

ThreatFabric Exposing Crocodilus: New Device Takeover Malware Targeting Android Devices ThreatFabric analysts discovered a new Device-Takeover Android banking Trojan equipped with remote access, black screen overlays, and advanced credential theft capabilities.

👍 8

Post #2488 7.54K Mar 31, 2025, 10:46 UTC

Feberis Pro: I have tested a new 4-in-1 Expansion Board for Flipper Zero
https://www.mobile-hacker.com/2025/03/31/feberis-pro-the-ultimate-4-in-1-expansion-board-for-flipper-zero/

Mobile Hacker Feberis Pro: The Ultimate 4-in-1 Expansion Board for Flipper Zero - Mobile Hacker In a previous blog post, I introduced Feberis, a versatile expansion board that enhanced the capabilities of the Flipper Zero by offering additional communication protocols. Now, I am excited to dive into the newly released Feberis Pro, a next-generation…

👍 19

Post #2487 6.8K Mar 31, 2025, 08:43 UTC

PJobRAT makes a comeback, takes another crack at chat apps
https://news.sophos.com/en-us/2025/03/27/pjobrat-makes-a-comeback-takes-another-crack-at-chat-apps/

Sophos PJobRAT makes a comeback, takes another crack at chat apps Sophos X-Ops uncovers a recent campaign from an Android RAT first seen in 2019 – now infecting users in Taiwan

👍 6
❤ 1

Post #2486 8.26K Mar 27, 2025, 13:24 UTC

APT36 Mimics India Post Website to Spread Malware to Windows and Android Users
https://www.cyfirma.com/research/turning-aid-into-attack-exploitation-of-pakistans-youth-laptop-scheme-to-target-india/

CYFIRMA TURNING AID INTO ATTACK: EXPLOITATION OF PAKISTAN'S YOUTH LAPTOP SCHEME TO TARGET INDIA - CYFIRMA EXECUTIVE SUMMARY In this report, CYFIRMA examines the tactics employed by a Pakistan-based APT group, assessed with medium confidence as...

👍 7

Post #2485 8.32K Mar 27, 2025, 08:09 UTC

A Blueprint of Android Activity Lifecycle
https://8ksec.io/a-blueprint-of-android-activity-lifecycle/

8kSec Android Activity Lifecycle Blueprint | 8kSec Deep dive into the Android Activity lifecycle through AOSP internals and Android 15 source code. Understand each state transition beyond basic callbacks.

👍 9
🤡 4
👎 1
🤣 1

Post #2484 8.42K Mar 25, 2025, 09:24 UTC

New Android Malware Campaigns Evading Detection Using Cross-Platform Framework .NET MAUI (new Xamarin)
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/new-android-malware-campaigns-evading-detection-using-cross-platform-framework-net-maui/

McAfee Blog New Android Malware Campaigns Evading Detection Using Cross-Platform Framework .NET MAUI | McAfee Blog Authored by Dexter Shin Summary Cybercriminals are constantly evolving their techniques to bypass security measures. Recently, the McAfee Mobile

🌚 6
❤ 2
👍 1

Post #2483 8.78K Mar 24, 2025, 05:01 UTC

Safari 1day RCE Exploit
Confirmed exploit works on macOS 13.3.1, iOS 15.8.2.
https://github.com/wh1te4ever/WebKit-Bug-256172/tree/ios-arm64

GitHub GitHub - wh1te4ever/WebKit-Bug-256172 at ios-arm64 Safari 1day RCE Exploit. Contribute to wh1te4ever/WebKit-Bug-256172 development by creating an account on GitHub.

❤‍🔥 14
💩 4
👎 3
🤡 2
👍 1
🌚 1

Post #2482 9.89K Mar 21, 2025, 15:03 UTC

Looks like there is a demand for Telegram RCE exploit
https://techcrunch.com/2025/03/21/russian-zero-day-seller-is-offering-up-to-4-million-for-telegram-exploits/

🔥 24
😁 6
👍 2
❤ 1
👏 1
🤮 1
💩 1
🤡 1

Post #2481 10.8K Mar 19, 2025, 14:06 UTC

Analysis of Paragon’s Graphite Spyware Operations misusing WhatsApp Zero-Click exploit
https://citizenlab.ca/2025/03/a-first-look-at-paragons-proliferating-spyware-operations/

🔥 18
👏 4
❤ 1
👍 1

Older posts →