NEW BOT Телеграм, страница

Android Security & Malware

Android Banker Deep Dive (Part 1)
Fully reverse engineering of a Android Banker trojan from start to finish
https://youtu.be/Vs9Z3NDnVT8

YouTube

Android Banker Deep Dive (Part 1)

In this [RE]laxing new series, I fully reverse a difficult Android Banker trojan from start to finish.

These extensive "Deep Dive" segments concentrate on dissecting malware specimens and delving into the individual approaches employed to fully reverse them.…

👍13🍓4👏1

7.03K views07:58

👍 22 👎 4

Android Security & Malware

Embedding Frida in iOS TestFlight Apps
https://naehrdine.blogspot.com/2023/02/embedding-frida-in-ios-testflight-apps.html

Blogspot

Embedding Frida in iOS TestFlight Apps

Wireless and firmware hacking, PhD life, Technology

👍14

7.62K views14:00

👍 16 👎 1

Android Security & Malware

Re-Exploiting Huawei Recovery With FaultyUSB
FaultyUSB: exploiting a TOCTOU race condition bug in recovery to get root on Huawei devices by emulating a malicious USB flash drive
https://labs.taszk.io/articles/post/reunzip/

labs.taszk.io

[BugTales] REUnziP: Re-Exploiting Huawei Recovery With FaultyUSB

Huawei Recovery Update Zip ToC-ToU Vulnerability

🔥11👍3

7.06K views07:29

👍 23 👎

Android Security & Malware

[new version] OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS
https://github.com/OWASP/igoat-swift

GitHub

GitHub - OWASP/iGoat-Swift: OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS

OWASP iGoat (Swift) - A Damn Vulnerable Swift Application for iOS - OWASP/iGoat-Swift

👍12

7.19K views10:26

👍 18 👎 1

Android Security & Malware

Resource for Android static analysis and vulnerability assessment
Tutorials, tools, and resources for identifying and mitigating security vulnerabilities in Android applications
https://github.com/krizzsk/HackersCave4StaticAndroidSec

GitHub

GitHub - krizzsk/HackersCave4StaticAndroidSec: A comprehensive resource for Android static analysis and vulnerability assessment.…

A comprehensive resource for Android static analysis and vulnerability assessment. Tutorials, tools, and resources for identifying and mitigating security vulnerabilities in Android applications. -...

👍13👎1

14.2K views11:50

👍 19 👎

Android Security & Malware

Awesome ADB
Probably the most detailed ADB documentation with examples I have ever seen
https://github.com/mzlogin/awesome-adb/blob/master/README.en.md

GitHub

awesome-adb/README.en.md at master · mzlogin/awesome-adb

ADB Usage Complete / ADB 用法大全. Contribute to mzlogin/awesome-adb development by creating an account on GitHub.

👍20🔥8❤4

9.41K views13:31

👍 23 👎

Android Security & Malware

Android backdoor targets journalist in South Korea through APT phishing campaign
https://interlab.or.kr/archives/2567

interlab.or.kr

Interlab 인터랩 | Cyber Threat Report: RambleOn Android Malware

Interlab is a non-profit organization based in Seoul with mission to create resilient digital safety net for freedom of citizens, providing free digital security consultations, trainings, incident response support and research of cyber threat toward civic…

👍9❤2

8.75K views17:11

👍 17 👎

Android Security & Malware

FaceStealers, Fleeceware and Adware discovered on Google Play posing as AI art apps
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/the-rise-and-risks-of-ai-art-apps/

McAfee Blog

The Rise and Risks of AI Art Apps | McAfee Blog

Authored by Fernando Ruiz The popularity of AI-based mobile applications that can create artistic images based on pictures, such as the “Magic Avatars”

👍15❤1

7.79K views08:19

Android Security & Malware

Flipper Zero Controlling Traffic Lights
https://youtu.be/TrVLmTLHgew

YouTube

Flipper Zero Controlling Traffic Lights

Flipper Zero using its onboard Signal Generator and interfaced through the GPIO's with a high power Infrared LED array can imitate a 3M OptiCom transmitter. This system is known as Traffic Signal Preemption and can cause the traffic light controller to give…

👍30🔥5❤1

8.43K views12:29

👍 53 👎 3

Android Security & Malware

OyeTalk - Live Voice Chat Room app with 5M+ installs leaked private user conversations
It stored unencrypted user chats, names and IMEI numbers on a database unguarded by a password
https://cybernews.com/security/android-voice-chat-app-leaked-private-user-conversations/

Cybernews

Android voice chat app leaked private user conversations

👍15🥰2

7.84K views06:56

👍 12 👎

Android Security & Malware

Vulnerabilities in NSPredicate were discovered in macOS 13.2 and iOS 16.3 (CVE-2023-23530, CVE-2023-23531)
App can achieve code execution inside of SpringBoard, a highly privileged app that can access location data, the camera and microphone, call history, photos, and other sensitive data, as well as wipe the device
https://www.trellix.com/en-us/about/newsroom/stories/research/trellix-advanced-research-center-discovers-a-new-privilege-escalation-bug-class-on-macos-and-ios.html

Trellix

Trellix Advanced Research Center Discovers a New Privilege Escalation Bug Class on macOS and iOS

The Trellix Advanced Research Center vulnerability team has discovered a large new class of bugs that allow bypassing code signing to execute arbitrary code in the context of several platform applications, leading to escalation of privileges and sandbox escape…

👍7🔥1

8.12K views08:24

👍 16 👎 2

Android Security & Malware

Hardening Firmware Across the Android Ecosystem
https://security.googleblog.com/2023/02/hardening-firmware-across-android.html

Google Online Security Blog

Hardening Firmware Across the Android Ecosystem

Posted by Roger Piqueras Jover, Ivan Lozano, Sudhi Herle, and Stephan Somogyi, Android Team A modern Android powered smartphone is a comp...

👍7🔥2🥰1

8.61K views11:10

👍 14 👎 2

Android Security & Malware

Android Banker Deep Dive Analysis - Part 2
https://youtu.be/cGxQ3WIv9nI

YouTube

Android Banker Deep Dive (Part 2)

Part 2 of our Banker Deep Dive. We continue our analysis of the JSON objects and recognize indicators of packing. We then try to use the Medusa framework to unpack.

---

In this [RE]laxing new series, I fully reverse a difficult Android Banker trojan from…

👍8👏7🍓2❤1

9.18K views10:12

👍 19 👎 2

Android Security & Malware

Google vulnerability Reward Program: 2022 Year in Review
- identified and fix over 2,900 security issues
- Google paid $12 million in bug bounties
- $4.8 million rewards for Android security issues
https://security.googleblog.com/2023/02/vulnerability-reward-program-2022-year.html

Google Online Security Blog

Vulnerability Reward Program: 2022 Year in Review

Posted by Sarah Jacobus, Vulnerability Rewards Team It has been another incredible year for the Vulnerability Reward Programs (VRPs) at G...

👍11🥰3😱3❤2

9.26K views08:35

👍 28 👎 2

Android Security & Malware

Forwarded from The Bug Bounty Hunter

The code that wasn’t there: Reading memory on an Android device by accident

https://github.blog/2023-02-23-the-code-that-wasnt-there-reading-memory-on-an-android-device-by-accident/

The GitHub Blog

The code that wasn't there: Reading memory on an Android device by accident

CVE-2022-25664, a vulnerability in the Qualcomm Adreno GPU, can be used to leak large amounts of information to a malicious Android application. Learn more about how the vulnerability can be used to leak information in both the user space and kernel space…

👍16🔥8

9.71K views10:15

Android Security & Malware

SameSite cookie bypass on Android by redirecting to to intent-picker with PoC code ($5,000 bounty)
https://bugs.chromium.org/p/chromium/issues/detail?id=1368230

👍10

13.6K views08:51

👍 10 👎

Android Security & Malware

Mobile Threat Report by McAfee 2023
https://www.mcafee.com/content/dam/consumer/en-us/docs/reports/rp-mobile-threat-report-feb-2023.pdf

👍10

9.61K views09:40

👍 18 👎 4

Android Security & Malware

Examples of recent Android malware with denoscription by Malwarebytes

👍16❤1

9.32K views08:43