Proof-of-concept for the CVE-2022-42864 IOHIDFamily race condition - Muirey03/CVE-2022-42864

It turns out that the first “all Google” phone includes a non-Google bug. Learn about the details of CVE-2022-38181, a vulnerability in the Arm Mali GPU. Join me on my journey through reporting the vulnerability to the Android security team, and the exploit…

Statically unpacking common android banker malware. - eybisi/kavanoz

CRIL analyzes Gigabud RAT, the latest Android malware posing as a government agency to steal sensitive information.

Using changing remote content, apps slide by official review process to deliver fraud through the Apple App Store and Google Play Store.

Cyble analyzes 'InTheBox' as part of its thorough research on Web Injects and their role in targeting Android Banking applications worldwide.

The UK has used small credit-card sized tickets to pay for train travel for years and years, since long before I was born — originally theAPTIS ticket1,which...

Learn about PixPirate, the new Android banking trojan discovered by Cleafy TIR. This malware uses ATS to automate malicious money transfers via the Pix payment platform used by multiple Brazilian banks. Discover its features, including interception of banking…

We look into an ongoing malware campaign we named TgToxic, targeting Android mobile users in Taiwan, Thailand, and Indonesia since July 2022. The malware steals users’ credentials and assets such as cryptocurrency from digital wallets, as well as money from…

A Course on Android Malware Analysis
The ISTS and Google are pleased to offer a 3-day Zoom course on Android Malware Analysis on Sep 9, 10, 11 2020. For more information please visit ists.dartmouth.edu.


Wednesday, September 9, 2020
12:00pm – 6:00pm
Zoom…

MEDUSA is an Extensible and Modularised framework that automates processes and techniques practiced during the dynamic analysis of Android Applications.

github : https://github.com/Ch0pin/medusa

Some of the MEDUSA's features include:

Tracing and instrumentation…

An information disclosure vulnerability has been identified in Money Lover, a finance tracking application created by Finsify and available on Android, iOS, Microsoft Store, with a web interface.

بسم الله الرحمن الرحيم

The motive to build this repo is to help beginner to start learn Android Pentesting by providing a roadmap. - dn0m1n8tor/AndroidPentest101

The emerging Indian social media app exposed a database of young users' private information, including school-going children.

Executive Summary In November 2022, CYFIRMA detected a cyber-attack on an intelligence operative in India. In this attack, the threat...

APKHunt is a comprehensive static code analysis tool for Android apps that is based on the OWASP MASVS framework. Although APKHunt is intended primarily for mobile app developers and security teste...