Uncovering an extensive espionage operation infecting dozens of Thai pro-democracy campaigners with NSO Group's Pegasus spyware.

Google’s Threat Analysis Group (TAG) continues to closely monitor the cybersecurity environment in Eastern Europe with regard to the war in Ukraine. Many Russian government cyber assets have remained focused on Ukraine and related issues since the invasion…

Previous posts: Basic definitions and registers, lab setup, offset and addressing modes, Load And Store

Vodafone & Deutsche Telekom are trialing with Trustpid to introduce persistent user tracking

MoqHao (aka Wroba) is an Android Remote Access Trojan (RAT) with information-stealing and backdoor capabilities that likely spreads via SMS.

Joker, Facestealers and Banker swarming Google Play store

Update: 10 March 2024 List of open source Android applications for “de-google, de-samsung, de-microsoft, de-nsa, de-china-malware etc. etc.” your mobile phone, as always, the list is written in a KISS simple way. The apps in the list are divided by category…

Authored by Dexter Shin McAfee's Mobile Research Team has identified new malware on the Google Play Store. Most of them are disguising themselves as

This article is part of the Security Tech Blog Series: Spring Cleaning for Security. My name is Azeem Ilyas and I’m part

Previous posts: Basic definitions and registers, lab setup, offset and addressing modes, Load And Store, Branch

Introduction

The messaging app left a huge database of unencrypted private messages online but without a password for months.

Previous posts: Basic definitions and registers, lab setup, offset and addressing modes, Load And Store, Branch, Data Processing Part 1

Threat actors are constantly using new tricks and tactics to target users across the globe. This blog is about SpyNote,  […]

A deep dive into an in-the-wild Android exploit Guest Post by Xingyu Jin, Android Security Research This is part one of a two-part guest...

SOVA, a new Android Banking Trojan, is spreading across Europe. Already appeared in different versions, this malware is now evolving, and it is targeting more than 200 mobile applications, ranging from banking apps to crypto exchanges/wallets. Here's the…

Following our presentation at Black Hat USA, in this blog post we provide some details on CVE-2022-20233, the latest vulnerability we found on Titan M, and how we exploited it to obtain code execution on the chip.

In Q2 2022, we detected 405,684 mobile malware installation packages, of which 55,614 packages were related to mobile banking trojans, and 3,821 packages were mobile ransomware trojans.