North Korean state-sponsored hackers posed as Samsung recruiters and sent fake job offers to employees at South Korean security companies that sell anti-malware software, Google said this week in the first edition of its new Threat Horizons report.

In Q3 2021, 9,599,519 malware, adware and riskware attacks on mobile devices were prevented.

Actors behind Android banking trojans actively use Google Play droppers to deliver trojans to over 300k victims

The ScarCruft group (also known as APT37 or Temp.Reaper) is a nation-state sponsored APT actor. Recently, we had an opportunity to perform a deeper investigation on a host compromised by this group.

Research by: Shmuel Cohen Introduction In the last few months, multiple Iranian media and social networks have published warnings about ongoing SMS phishing campaigns impersonating Iranian government services. The story is as old as time: victims click on…

Popular Android malware seen in 2021, I have uploaded APK files for all the entries that I could on my Github repository

January:
New Android spyware targets users in Pakistan
Going Rogue- a Mastermind behind Android Malware Returns with a New RAT
Imitation…

The mobile banking malware BRATA strikes again, and it is slowly spreading all over Europe. Read here the new Technical Report, which explains in detail how it works and how to prevent it.

Written by Mishaal Rahman (@MishaalRahman) and edited by @linuxct, Kuba Wojciechowski (@Za_Raczke), and Al Sutton (@alsutton).

At Oversecured, we scan thousands of apps every month. We observe that some vulnerabilities now come up much less frequently than they did a few years ago.

Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen Lab for sharing a sample of the FORCEDENTRY exploit with us, and...

Two Egyptians—exiled politician Ayman Nour and the host of a popular news program (who wishes to remain anonymous)—were hacked with Predator spyware, built and sold by the previously little-known mercenary spyware developer Cytrox. The phone of Ayman Nour…

Contribute to bhavukjain1/frida_helper development by creating an account on GitHub.

Microsoft Team's link preview feature is susceptible to spoofing and vulnerable to Server-Side Request Forgery. Team's Android users can be DoS'ed and, in the past, their IP address could be leaked.

Cyble's research on an Android Malware that has been targeting a major banking company in Brazil.