NEW BOT Телеграм, страница

Smishing Android Botnets Going Viral in Iran
https://research.checkpoint.com/2021/smishing-botnets-going-viral-in-iran/

Smishing Botnets Going Viral in Iran - Check Point Research

Research by: Shmuel Cohen Introduction In the last few months, multiple Iranian media and social networks have published warnings about ongoing SMS phishing campaigns impersonating Iranian government services. The story is as old as time: victims click on…

👍2

7.61K views12:20

👍 11 👎 2 💬

Android Security & Malware

Android: vold's incremental-fs APIs trust paths from system_server for mounting (CVE-2022-20002)
https://bugs.chromium.org/p/project-zero/issues/detail?id=2221

7.66K views09:01

👍 11 👎💬

Android Security & Malware

Analysis of request forgery using Android deep link in CafeBazaar app
https://securityflow.io/impact-of-an-insecure-deep-link/

9.09K views10:18

👍 23 👎 2 💬

Android Security & Malware

Popular Android malware threats discovered in November, 2021
Full list - https://sk3ptre.github.io/Malware-Timeline-2021/
Download samples - https://github.com/sk3ptre/AndroidMalware_2021

sk3ptre

Android Malware Timeline 2021

👍1

9.6K views08:52

👍 28 👎 1 💬

Android Security & Malware

Mobile banking fraud: BRATA strikes again
https://www.cleafy.com/cleafy-labs/mobile-banking-fraud-brata-strikes-again

Cleafy

Mobile banking fraud: BRATA strikes again | Cleafy Labs

The mobile banking malware BRATA strikes again, and it is slowly spreading all over Europe. Read here the new Technical Report, which explains in detail how it works and how to prevent it.

9.83K views08:38

👍 24 👎 2 💬

Android Security & Malware

Vulnerability found in Android/Linux kernel leads to use-after-free (CVE-2021-1048)
https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1048.html

9.89K views15:38

👍 23 👎 1 💬

Android Security & Malware

Mobile espionage in Palestine Region by APT-C-23 group
https://raw.githubusercontent.com/T-SecLab/APT-C-23/main/cyber%20espionage%20in%20palestine%20region%20.pdf

9.93K views10:26

👍 16 👎💬

Android Security & Malware

How a bug in Android and Microsoft Teams could have caused this user’s 911 call to fail
https://medium.com/@mmrahman123/how-a-bug-in-android-and-microsoft-teams-could-have-caused-this-users-911-call-to-fail-6525f9ba5e63

Medium

How a bug in Android and Microsoft Teams could have caused this user’s 911 call to fail

Written by Mishaal Rahman (@MishaalRahman) and edited by @linuxct, Kuba Wojciechowski (@Za_Raczke), and Al Sutton (@alsutton).

9.7K views15:32

👍 29 👎💬

Android Security & Malware

Use cryptography in mobile apps the right way
https://blog.oversecured.com/Use-cryptography-in-mobile-apps-the-right-way/

News, Techniques & Guides

Use cryptography in mobile apps the right way

At Oversecured, we scan thousands of apps every month. We observe that some vulnerabilities now come up much less frequently than they did a few years ago.

👍1

8.68K views09:01

👍 13 👎 1 💬

Android Security & Malware

A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution
https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html

projectzero.google

A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution - Project Zero

Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen Lab for sharing a sample of the FORCEDENTRY exploit with us, and...

9.88K views09:17

👍 40 👎💬

Android Security & Malware

Pegasus vs. Predator Dissident’s Doubly-Infected iPhone Reveals Cytrox Mercenary Spyware
https://citizenlab.ca/2021/12/pegasus-vs-predator-dissidents-doubly-infected-iphone-reveals-cytrox-mercenary-spyware/

The Citizen Lab

Pegasus vs. Predator

Two Egyptians—exiled politician Ayman Nour and the host of a popular news program (who wishes to remain anonymous)—were hacked with Predator spyware, built and sold by the previously little-known mercenary spyware developer Cytrox. The phone of Ayman Nour…

👍2

10.3K views13:25

👍 38 👎💬

Android Security & Malware

Android Application Testing Using Windows 11 and Windows Subsystem for Android
https://sensepost.com/blog/2021/android-application-testing-using-windows-11-and-windows-subsystem-for-android/

9.13K views10:37

👍 29 👎💬

Android Security & Malware

A simple frida noscript for iOS apps that spits out API request URLs, headers and body even if SSL pinning is enabled
https://github.com/bhavukjain1/frida_helper/blob/7eb165d23980c84eb9aab5b975738bee296b6ac2/spit_ios.js

GitHub

frida_helper/spit_ios.js at 7eb165d23980c84eb9aab5b975738bee296b6ac2 · bhavukjain1/frida_helper

Contribute to bhavukjain1/frida_helper development by creating an account on GitHub.

👍2

9.29K views09:30

👍 30 👎 1 💬

Android Security & Malware

Bluetooth-using home COVID test was cracked to fake results
https://labs.f-secure.com/blog/faking-a-positive-covid-test

9.39K views15:36

👍 23 👎 1 💬

Android Security & Malware

IP address leak (Android), and denial of service (DoS) dubbed Message of Death (Android) found in Android Microsoft Teams app https://positive.security/blog/ms-teams-1-feature-4-vulns

positive.security

MS Teams: 1 feature, 4 vulnerabilities | Positive Security

Microsoft Team's link preview feature is susceptible to spoofing and vulnerable to Server-Side Request Forgery. Team's Android users can be DoS'ed and, in the past, their IP address could be leaked.

👍1

10.5K views12:52

👍 41 👎 2 💬

Android Security & Malware

Malicious App Targets Major Brazilian Bank Itaú Unibanco
https://blog.cyble.com/2021/12/23/malicious-app-targets-major-brazilian-bank-itau-unibanco/

Cyble

Malicious App Targets Major Brazilian Bank Itaú Unibanco

Cyble's research on an Android Malware that has been targeting a major banking company in Brazil.

👍2