NEW BOT Телеграм, страница

IOMobileFrameBuffer vulnerability in iPhone 6s and later (until iOS 15.3) has been actively exploited (CVE-2022-22587)

Impact: A malicious application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited
https://support.apple.com/en-us/HT213053

Apple Support

About the security content of iOS 15.3 and iPadOS 15.3

This document describes the security content of iOS 15.3 and iPadOS 15.3.

8.05K views08:46

Android Security & Malware

New FluBot and TeaBot Global Malware Campaigns Discovered
https://www.bitdefender.com/blog/labs/new-flubot-and-teabot-global-malware-campaigns-discovered

Bitdefender Labs

New FluBot and TeaBot Global Malware Campaigns Discovered

Some malware and phishing campaigns have short lives, tending to dissipate after
they're identified by security solutions.

👍2

8.54K views12:17

👍 24 👎 1

Android Security & Malware

Facestealer – The Rise of Facebook Credential Stealer Malware
https://labs.k7computing.com/index.php/facestealer-the-rise-of-facebook-credential-stealer-malware/

K7 Labs

Facestealer – The Rise of Facebook Credential Stealer Malware

Threat actors are constantly employing new tricks while also maintaining their old tried-and-tested tactics. One such evergreen tactic, is to deploy […]

7.58K views22:05

👍 19 👎 2 💬

Android Security & Malware

Malicious app on Google Play drops banking malware on users’ devices
https://blog.pradeo.com/vultur-malware-dropper-google-play

Pradeo

Malicious app on Google Play drops banking malware on users’ devices

Pradeo’s researchers discovered a malicious mobile application called 2FA Authenticator distributed on Google Play and installed by 10K+ users.

🥰2

7.99K views07:54

👍 26 👎 2 💬

Android Security & Malware

How Android updates work: A peek behind the curtains from an insider
https://medium.com/@Za_Raczke/how-android-updates-work-a-peek-behind-the-curtains-from-an-insider-1d8e1a48ec0b

Medium

How Android updates work: A peek behind the curtains from an insider

Updates on Android were always a topic of discussion in the tech communities. Even though they are a crazily complicated topic and very few…

8.06K views21:42

👍 22 👎 2 💬

Android Security & Malware

How to bypass root detection and SSL pinning on Android and iOS using Frida and Objection
https://securitycafe.ro/2022/02/01/root-detection-and-ssl-pinning-bypass/

Security Café

Root detection and SSL pinning bypass

There are multiple methods to circumvent the client-side security that blocks the usage of the tested application in an unsafe environment such as Rooted or Jailbroken devices. Next, I will give yo…

14K views08:27

👍 47 👎 1 💬

Android Security & Malware

A Primer On Android Forensics
https://nex.sx/tech/2022/01/28/a-primer-on-android-forensics.html

nex.sx

A Primer On Android Forensics - Nex

A lot has already been said on iOS forensics for the purpose of discovering traces of compromise and spyware execution. And although a lot more is left to ex...

👍1

8.79K views08:50

👍 28 👎💬

Android Security & Malware

Abusing Facebooks Call To Action to launch internal deeplinks
https://www.ash-king.co.uk/blog/abusing-Facebooks-call-to-action-to-launch-internal-deeplinks

www.ash-king.co.uk

Abusing Facebooks Call To Action to launch internal deeplinks

Ever noticed that big blue button on the top of every Facebook page? This feature, known as Call to action or CTA is designed for user engagement and allows a page to redirect their visitors to a website, an app, inbox etc. I found it was possible for a page…

👍1

8.47K views08:40

👍 27 👎 3 💬

Android Security & Malware

Diving Deeper in Android System Diagnostics and Remote Forensics
https://nex.sx/tech/2022/02/04/diving-deeper-in-android-system-diagnostics.html

nex.sx

Diving Deeper in Android System Diagnostics and Remote Forensics - Nex

Following up from last week’s Primer on Android Forensics, today we are going to dive a little deeper into Android system diagnostics, have a look at some ne...

👍7

8.48K views18:38

👍 25 👎 2 💬

Android Security & Malware

How to build a Cellphone IMSI Catcher (Stingray)
https://www.hackers-arise.com/post/software-defined-radio-part-6-building-a-imsi-catcher-stingray

👍18❤1

9.23K views13:49

👍 41 👎💬

Android Security & Malware

FluBot and Medusa Android banking Trojans attack banks side-by-side via SMiShing
https://www.threatfabric.com/blogs/partners-in-crime-medusa-cabassous.html#medusa-turkish-delight-with-dangerous-filling

Threatfabric

Partners-in-crime: Medusa and Cabassous attack banks side-by-side

Two advanced banking Trojans, Medusa and Cabassous (Flubot), are distributed side-by-side using the same SMiShing service.

👍9❤1

8.35K views23:38

👍 19 👎💬

Android Security & Malware

Malicious campaign Roaming Mantis (Wroba.o, Moqhao, XLoader) reaches Europe via SMiShing targeting Android and iOS
https://securelist.com/roaming-mantis-reaches-europe/105596/

Securelist

Roaming Mantis reaches Europe

We’ve observed some new activities by Roaming Mantis in 2021, and some changes in the Wroba malware that’s mainly used in this campaign.

👍9🥰1

9.6K views08:22

👍 26 👎💬

Android Security & Malware

Zero-Click RCE Exploit for the Peloton Bike (And Also Every Other Unpatched Android Device)
https://www.nowsecure.com/blog/2022/02/09/a-zero-click-rce-exploit-for-the-peloton-bike-and-also-every-other-unpatched-android-device/

Nowsecure

Zero-Click RCE Exploit for the Peloton Bike Identified and Patched

The Peloton Bike ran an unpatched version of Android 7 which led to it being vulnerable to a number of known issues, most significantly CVE-2021-0326, which could allow an attacker within WiFi range to execute arbitrary code on the device with no user interaction.

👍15🔥3❤1

10.3K views18:16

👍 26 👎 2 💬

Android Security & Malware

SIM Hijacking
https://sensepost.com/blog/2022/sim-hijacking/

👍20

11.1K views12:34

👍 45 👎 2 💬

Android Security & Malware

Google awarded $8.7 million to 696 security researchers in 2021

Highest reward - $157,000 by discovering critical exploitation chain in Android (CVE-2021-39698)

- $3 million went to Android vulnerabilities
- $3.3 million went to Chrome browser bugs
- $0.5 million went to Google Play Store vulnerabilities
- $0.313 million went to Google Cloud bugs.
https://security.googleblog.com/2022/02/vulnerability-reward-program-2021-year.html

Google Online Security Blog

Vulnerability Reward Program: 2021 Year in Review

Posted by Sarah Jacobus, Vulnerability Rewards Team Last year was another record setter for our Vulnerability Reward Programs (VRPs). Throu...

👍22🔥16🤯3❤2

9.41K views08:28

👍 44 👎 1 💬

Android Security & Malware

apkingo - get detailed information about apk files

I retrieves: package name, target SDK, permissions, metadata, certificate serial and issuer, info from Google Play Store and detect if it is malicious using Koodous
https://github.com/andpalmier/apkingo

GitHub

GitHub - andpalmier/apkingo: extract info from apk files

extract info from apk files. Contribute to andpalmier/apkingo development by creating an account on GitHub.

👍19🔥8❤2👏1

8.91K views16:00

👍 49 👎 2

Android Security & Malware

How to Bypass Jailbreak Detection On iOS Apps & Games (iOS 11 - iOS 14)
https://idevicecentral.com/jailbreak-guide/how-to-bypass-jailbreak-detection-on-ios-applications-and-games-ios-11-ios-14/

iDevice Central - iOS Jailbreak News, Tutorials and Tools!

How to Bypass Jailbreak Detection On iOS Applications and Games (iOS 11 – iOS 14) - iDevice Central

Jailbreaking allows users to do more with their devices, to get past Apple's unnecessary walled garden approach. Sideloading, theming, tweaks to customize UI elements or to add functionality that is simply not there on stock iOS, all of these are done through…

👍9👏1