Flaw was exploited when government officials clicked on links in LinkedIn messages.

This blog post analyzes the Frida and Jailbreak detection in PokemonGO for iOS.

NSO Group claims that its Pegasus spyware is only used to “investigate terrorism and crime” and “leaves no traces whatsoever”. This Forensic Methodology Report shows that neither of these statements are true. This report accompanies the release of the Pegasus…

On iOS we have seen link shortener services pushing spam calendar files to victims’ devices.

Corellium provided virtual iOS-based devices for individual accounts on our groundbreaking security research platform, CORSEC. Corellium’s…

Android Joker Malware, posing as legitimate apps, continues to find its way into the Google Play store using new tactics.

Doctor Web warns of a newly discovered family of Android banking trojans dubbed Android.BankBot.Coper. The malicious apps have a modular architecture and a multi-stage infection mechanism. They also have several protective techniques helping them withstand…

We recently conducted an investigation into a malicious Android malware sample, which we believe can be attributed to the StrongPity APT group, that was posted on the Syrian e-Gov website. To the best of our knowledge, this is the first time that the group…

Signal has fixed a serious bug in its Android app that, in some cases, sent random unintended pictures to contacts without an obvious explanation. Although the issue was reported in December 2020, given the difficulty of reproducing the bug, it isn't until…

New Android RAT Vultur using keylogging and VNC-based screen recording to target banking apps.

Contribute to cynychwr/android-malware development by creating an account on GitHub.

The Android malware Oscorp keeps evolving. UBEL was born, a new advanced threat targeting banks across the globe: here is the full technical report

This finding was an another private bug bounty program. The scope of the target was a ticketing android app (Prod). This app was a major…

ProtonMail is a full PGP end-to-end encrypted email provider who is claiming privacy, anonymity and security. As forensic examiners, we…

Don’t get me wrong but I couldn’t find more appropriate noscript in order to describe the specific vulnerability. I don’t know what happens…

A phishing campaign from a Twitter post. The Threat Actor (TA) hosts malicious Android APK files on a counterfeit version of Jamaat websites.

frida ctf challenge root detection