NEW BOT Телеграм, страница

9.49K views21:24

r2-pay: anti-debug, anti-root & anti-frida (part 1)
https://www.romainthomas.fr/post/20-09-r2con-obfuscated-whitebox-part1/

Romain Thomas

r2-pay: anti-debug, anti-root & anti-frida (part 1) | Romain Thomas

This first blog post describes the protections in the challenge r2-pay.

4.49K views09:33

👍 11 👎💬

Android Security & Malware

Locating the Trojan inside an infected COVID-19 contact tracing app
https://medium.com/@cryptax/locating-the-trojan-inside-an-infected-covid-19-contact-tracing-app-21e23f90fbfe

Medium

Locating the Trojan inside an infected COVID-19 contact tracing app

An italian company, SoftMining, developed an Android COVID-19 contact tracing application “SM-COVID-19”. Unfortunately, malware authors…

4.45K views09:45

👍 12 👎💬

Android Security & Malware

Exploitation of LAN vulnerability found in Firefox for Android [demo]
I tested this PoC exploit on 3 devices on same wifi network, it worked pretty well.
I was able to open custom URL on every smartphone using vulnerable Firefox (68.11.0 and below).
https://twitter.com/LukasStefanko/status/1307013106615418883

5.07K views10:10

👍 11 👎💬

Android Security & Malware

iOS and Android scam apps spreading via TikTok
https://blog.avast.com/scam-apps-spreading-via-tiktok-avast

Avast

iOS and Android scam apps spreading via TikTok

After a 12-year-old girl reported a rogue app circulating on TikTok to Avast, our team found a total of seven adware scam apps available on both the Google Play Store and the Apple App Store.

4.91K views10:02

👍 11 👎 1 💬

Android Security & Malware

Vulnerabilities in ATM Milano's mobile app
https://blog.jacopojannone.com/en/post/atm-app-vulnerability/

4.74K views21:24

👍 7 👎💬

Android Security & Malware

Alien - the story of Cerberus' demise
https://www.threatfabric.com/blogs/alien_the_story_of_cerberus_demise.html

ThreatFabric

Alien - the story of Cerberus' demise

The Alien banking Trojan expands 2020’s threat landscape alongside the demise of the infamous Cerberus Trojan. Learn more about its advanced capabilities and relation with Cerberus.

4.48K views08:12

👍 8 👎 1 💬

Android Security & Malware

Code Execution Vulnerability in Instagram App for Android and iOS
https://research.checkpoint.com/2020/instagram_rce-code-execution-vulnerability-in-instagram-app-for-android-and-ios/

Check Point Research

#Instagram_RCE: Code Execution Vulnerability in Instagram App for Android and iOS - Check Point Research

Research by: Gal Elbaz Background Instagram, with over 100+ million photos uploaded every day, is one of the most popular social media platforms. For that reason, we decided to audit the security of the Instagram app for both Android and iOS operating systems.…

4.52K views12:47

👍 16 👎 2 💬

Android Security & Malware

Apps on Google Play Tainted with Cerberus Banker Malware
https://labs.bitdefender.com/2020/09/apps-on-google-play-tainted-with-cerberus-banker-malware/

Bitdefender Labs

Daily source of cyber-threat information. Established 2001.

4.33K views06:39

👍 6 👎💬

Android Security & Malware

Into Android Meterpreter and how the malware launches it — part 2
https://medium.com/@cryptax/into-android-meterpreter-and-how-the-malware-launches-it-part-2-ef5aad2ebf12

Medium

Into Android Meterpreter and how the malware launches it — part 2

This is a part 2 of “Locating the Trojan inside an infected COVID-19 contact tracing app”. We are going to explain how the malware works.

4.61K views08:56

👍 14 👎💬

Android Security & Malware

Latest disclosed campaign of Android FinFisher used in 2019
https://www.amnesty.org/en/latest/research/2020/09/german-made-finspy-spyware-found-in-egypt-and-mac-and-linux-versions-revealed/

Amnesty International

German-made FinSpy spyware found in Egypt, and Mac and Linux versions revealed

• FinSpy is a commercial spyware suite produced by the Munich-based company FinFisher Gmbh. Since 2011 researchers have documented numerous cases of targeting of Human Rights Defenders (HRDs) - including activists, journalists, and dissidents with the use…

4.93K views12:44

👍 6 👎💬

Android Security & Malware

Exploiting Android deep links and exported components
Slides: https://docs.google.com/presentation/d/1YnO_XF-iw2CvJa3rM-GdwYDV22SSzqVHQttXVedY3O4/edit#slide
PoCs: https://www.dropbox.com/sh/spwflkxxky37ruu/AAAf0KCItLdPr2lRp2vtQx2Aa?dl=0

Google Docs

B3nac - Exploiting Android deep links and exported components

Exploiting Android deep links and exported components By Kyle B3nac @b3nac

8.72K views22:53

👍 17 👎💬 2

Android Security & Malware

MEDUZA - universal SSL unpinning tool for iOS
https://github.com/kov4l3nko/MEDUZA

4.98K views09:13

👍 4 👎 2 💬

Android Security & Malware

17 Joker Trojans found on Google Play caught stealing SMS messages, contact lists, and device information along with silently signing up the victim for premium wireless application protocol (WAP) services
https://www.zscaler.com/blogs/security-research/joker-playing-hide-and-seek-google-play

Zscaler

Joker Playing Hide-and-Seek with Google Play | Zscaler

Joker is one of the most prominent types of malware targeting Android and keeps finding its way into Google’s official application market.

5.14K views09:25

👍 13 👎 1 💬

Android Security & Malware

Using AT commands (not ADB commands) to extract sensitive Android device info via USB cable

AT commands could be used for Android forensics to extract filesystem images and for some cases even unlocking smartphone
https://www.instagram.com/p/CFtkDgkgHTj/

5.29K views08:04

👍 26 👎 2 💬 5

Android Security & Malware

Android Hacking Primer

How to get started hacking Android applications
https://vickieli.dev/hacking/intro-android/

Vickie Li's Security Blog

An Android Hacking Primer

How to get started hacking Android applications.

4.74K views12:43

👍 16 👎 1 💬

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Jailbreaking iOS without a Mac (1/4): The Plan

https://medium.com/bugbountywriteup/jailbreaking-ios-without-a-mac-1-4-the-plan-b49c0edc1759