NEW BOT Телеграм, страница

Malicious campaign Roaming Mantis (Wroba.o, Moqhao, XLoader) reaches Europe via SMiShing targeting Android and iOS
https://securelist.com/roaming-mantis-reaches-europe/105596/

Securelist

Roaming Mantis reaches Europe

We’ve observed some new activities by Roaming Mantis in 2021, and some changes in the Wroba malware that’s mainly used in this campaign.

👍9🥰1

9.6K views08:22

👍 26 👎💬

Android Security & Malware

Zero-Click RCE Exploit for the Peloton Bike (And Also Every Other Unpatched Android Device)
https://www.nowsecure.com/blog/2022/02/09/a-zero-click-rce-exploit-for-the-peloton-bike-and-also-every-other-unpatched-android-device/

Nowsecure

Zero-Click RCE Exploit for the Peloton Bike Identified and Patched

The Peloton Bike ran an unpatched version of Android 7 which led to it being vulnerable to a number of known issues, most significantly CVE-2021-0326, which could allow an attacker within WiFi range to execute arbitrary code on the device with no user interaction.

👍15🔥3❤1

10.3K views18:16

👍 26 👎 2 💬

Android Security & Malware

SIM Hijacking
https://sensepost.com/blog/2022/sim-hijacking/

👍20

11.1K views12:34

👍 45 👎 2 💬

Android Security & Malware

Google awarded $8.7 million to 696 security researchers in 2021

Highest reward - $157,000 by discovering critical exploitation chain in Android (CVE-2021-39698)

- $3 million went to Android vulnerabilities
- $3.3 million went to Chrome browser bugs
- $0.5 million went to Google Play Store vulnerabilities
- $0.313 million went to Google Cloud bugs.
https://security.googleblog.com/2022/02/vulnerability-reward-program-2021-year.html

Google Online Security Blog

Vulnerability Reward Program: 2021 Year in Review

Posted by Sarah Jacobus, Vulnerability Rewards Team Last year was another record setter for our Vulnerability Reward Programs (VRPs). Throu...

👍22🔥16🤯3❤2

9.41K views08:28

👍 44 👎 1 💬

Android Security & Malware

apkingo - get detailed information about apk files

I retrieves: package name, target SDK, permissions, metadata, certificate serial and issuer, info from Google Play Store and detect if it is malicious using Koodous
https://github.com/andpalmier/apkingo

GitHub

GitHub - andpalmier/apkingo: extract info from apk files

extract info from apk files. Contribute to andpalmier/apkingo development by creating an account on GitHub.

👍19🔥8❤2👏1

8.91K views16:00

👍 49 👎 2

Android Security & Malware

How to Bypass Jailbreak Detection On iOS Apps & Games (iOS 11 - iOS 14)
https://idevicecentral.com/jailbreak-guide/how-to-bypass-jailbreak-detection-on-ios-applications-and-games-ios-11-ios-14/

iDevice Central - iOS Jailbreak News, Tutorials and Tools!

How to Bypass Jailbreak Detection On iOS Applications and Games (iOS 11 – iOS 14) - iDevice Central

Jailbreaking allows users to do more with their devices, to get past Apple's unnecessary walled garden approach. Sideloading, theming, tweaks to customize UI elements or to add functionality that is simply not there on stock iOS, all of these are done through…

👍9👏1

7.48K views13:25

👍 16 👎 2

Android Security & Malware

WiFi Zero Click RCE Trigger PoC CVE-2021-1965
https://github.com/parsdefense/CVE-2021-1965

🔥14👍5

7.7K views13:40

👍 26 👎 1

Android Security & Malware

Collection of Android (Samsung) Security Related Resources https://github.com/NetKingJ/android-security-awesome

GitHub

GitHub - NetKingJ/awesome-android-security: A Collection of Android (Samsung) Security Research References

A Collection of Android (Samsung) Security Research References - NetKingJ/awesome-android-security

👍17❤2🔥1

7.66K views19:40

👍 28 👎💬

Android Security & Malware

SMS PVA Services' Use of Infected Android Phones Reveals Flaws in SMS Verification
https://www.trendmicro.com/en_us/research/22/b/sms-pva-services-use-of-infected-android-phones-reveals-flaws-in-sms-verification.html

Trend Micro

SMS PVA Services' Use of Infected Android Phones Reveals Flaws in SMS Verification

👍8

7.18K views09:56

👍 18 👎💬

Android Security & Malware

Mobile malware evolution 2021 by Kaspersky
https://securelist.com/mobile-malware-evolution-2021/105876/

Securelist

Mobile malware evolution 2021

In 2021, cybercriminal activity gradually decreased, and attempts to exploit the pandemic topic became less common. However, mobile malware became more advanced, and attacks more complex.

👍10🥰2👏2

7.66K views15:39

👍 30 👎 4

Android Security & Malware

Xenomorph: A newly hatched Banking Trojan
https://www.threatfabric.com/blogs/xenomorph-a-newly-hatched-banking-trojan.html

ThreatFabric

Xenomorph: A newly hatched Banking Trojan

ThreatFabric recently discovered Xenomorph: a newly hatched Banking Trojan.

👍1

7.83K views08:09

👍 31 👎 2

Android Security & Malware

Xenomorph - new Android Banker - here is a quick video how smoothly it creates malicious overlay once targeted app (PayPal, Binance, Coinbase etc.) are launched by victim
https://youtu.be/7-yT65lVBf8

👍15

9.8K views16:23

👍 35 👎💬

Android Security & Malware

Writeup for an iOS 15 exploit that can achieve kernel

Impact: A malicious application may be able to execute arbitrary code with kernel privileges (CVE-2021-30955)
https://www.cyberkl.com/cvelist/cvedetail/24

Cyberkl

昆仑实验室

👍7🤔5🤩1

14.9K views09:22

👍 29 👎💬

Android Security & Malware

Directory traversal vulnerability discovered in Android Slack lead to disclosure of auth tokens https://hackerone.com/reports/1378889

HackerOne

Slack disclosed on HackerOne: [Android] Directory traversal leading...

Files uploaded to and opened in Slack with specially-crafted names could cause the Android operating system to overwrite configuration files on customer devices, potentially exposing Slack data to...

👍13🥰2

7.95K views20:38