Researchers at Checkmarx found that the Ring Android app could have allowed a malicious application installed on the user’s phone to expose their personal data, geolocation, and camera recordings.

Note: all applications mentioned in this research have been taken down and are
no longer accessible.

This post explains how to bypass TLS verification on Flutter apps, including bypassing Dio Pinning.

Technical analysis of the MoqHao (a.k.a RoamingMantis) Android malware and phishing campaign

A collection of interesting and diverse Android malware samples

Doctor Web reports that it has discovered backdoors in the system partition of budget Android device models that are counterfeit versions of famous brand-name models. These trojans target arbitrary code execution in the WhatsApp and WhatsApp Business messaging…

'apk-yara-checker' is a little CLI tool written in Rust to check Yara rules against a folder of APK files. - segura2010/apk-yara-checker

Kernel exploitation technique. Contribute to Markakd/DirtyCred development by creating an account on GitHub.

We will discuss the chaining of two bugs on the telegram android application, which can make malicious applications steal internal telegram…

In the first part, we are going to examine the top 10 basic security factors in 18 Iranian banking apps to see how strong their walls are

A PDF reader found on Google Play with over one million downloads is aggressively displaying full screen ads, even when the...

In this video, we unpack a malicious sample of Android/Joker with an open source tool named Medusa. This tool is dynamic, based on Frida. We select hooks to display unobfuscated strings, dump dynamic DEX and URLs.

A similar demo was presented in French at…

This first blog post introduces the RASP checks used in SingPass

Microsoft discovered a high-severity vulnerability in the TikTok Android application, now identified as CVE-2022-28799 and fixed by TikTok, which could have allowed attackers to compromise users' accounts with a single click.

بسم الله الرحمن الرحيم

Over three-quarters of the apps Symantec analyzed contained valid AWS access tokens that allowed access to private AWS cloud services.

Authored by Alberto Segura (main author) and Mike Stokkel (co-author) Introduction After we discovered in February 2022 the SharkBotDropper in Google Play posing as a fake Android antivirus and cle…

بسم الله الرحمن الرحيم