Signal has fixed a serious bug in its Android app that, in some cases, sent random unintended pictures to contacts without an obvious explanation. Although the issue was reported in December 2020, given the difficulty of reproducing the bug, it isn't until…

New Android RAT Vultur using keylogging and VNC-based screen recording to target banking apps.

Contribute to cynychwr/android-malware development by creating an account on GitHub.

The Android malware Oscorp keeps evolving. UBEL was born, a new advanced threat targeting banks across the globe: here is the full technical report

This finding was an another private bug bounty program. The scope of the target was a ticketing android app (Prod). This app was a major…

ProtonMail is a full PGP end-to-end encrypted email provider who is claiming privacy, anonymity and security. As forensic examiners, we…

Don’t get me wrong but I couldn’t find more appropriate noscript in order to describe the specific vulnerability. I don’t know what happens…

A phishing campaign from a Twitter post. The Threat Actor (TA) hosts malicious Android APK files on a counterfeit version of Jamaat websites.

frida ctf challenge root detection

Android security guides, roadmap, docs, courses, write-ups, and teryaagh. - GitHub - Ralireza/Android-Security-Teryaagh: Android security guides, roadmap, docs, courses, write-ups, and teryaagh.

Many people who are starting to work with the Android OS are having difficulties to understand the application sandbox concept. This…

As mentioned in the [first part](https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/) of this series,Oversecured spent two weeks finding security bugs in Samsung’s built-in apps.

Reverse engineering the OTA that broke the bootrom exploits

When an Android app needs access to sensitive resources on the device, the app developers make use of the permissions model. While the model can be quite simple to use, developers often make mistakes when using permissions and this leads to security problems.

We discovered that the Trojan Triada snook into one of modified versions of the WhatsApp messenger called FMWhatsapp 16.80.0 together with the advertising software development kit (SDK).

We identified nine Bahraini activists whose iPhones were successfully hacked with NSO Group’s Pegasus spyware between June 2020 and February 2021. The hacked activists included three members of Waad (a secular Bahraini political society), three members of…