NEW BOT Телеграм, страница

Android Security & Malware

BADBOX: a firmware backdoored trojan found in 74,000 Chinese Android phones, tablets, and TV boxes in 227 counties and territories
There are confirmed 8 devices with backdoors installed — seven TV boxes, the T95, T95Z, T95MAX, X88, Q9, X12PLUS, and MXQ Pro 5G, and a tablet J5-W.
BADBOX functionality:
-Ad Fraud,
-Uses backdoored devices as proxy,
-Create fake accounts,
-Downloads and runs additional modules.
Report: https://www.humansecurity.com/hubfs/HUMAN_Report_BADBOX-and-PEACHPIT.pdf

😱9👍4🔥2😡2❤1⚡1🤣1

10.6K views07:17

👍 18 👎

Android Security & Malware

NetHunter Hacker IX: How to use MANA Toolkit to create Wi-Fi rogue access point and intercept HTTP traffic
https://www.mobile-hacker.com/2023/10/05/nethunter-hacker-ix-use-mana-toolkit-to-create-wi-fi-rogue-access-point-and-intercept-traffic/

Mobile Hacker

NetHunter Hacker IX: Use MANA Toolkit to create Wi-Fi rogue access point and intercept traffic Mobile Hacker

MANA allows you to perform various Wi-Fi attacks even using your Android device. The MANA (MITM And Network Attacks) Wireless Toolkit is a suite of tools that can be used to perform man-in-the-middle (MITM) attacks, create evil access point, denial of service…

👍24🤔3

9.38K views10:53

👍 35 👎

Android Security & Malware

Trigger iOS proximity paring messages from over 50 meters using Android phone
The update of the blog explains how to boost transmitted signal from Android nRF Connect app, demonstrates running AppleJuice on iOS17 and using cheap Arduino ESP32 board
https://www.mobile-hacker.com/2023/09/07/spoof-ios-devices-with-bluetooth-pairing-messages-using-android/

Mobile Hacker

Spoof iOS devices with Bluetooth pairing messages using Android Mobile Hacker

[update 09.10.2023] In this update, I will share how to extend the signal of Android nRF Connect app that can send pairing messages, demonstrate AppleJuice on the latest iOS 17, show which specific advertisement packet can trigger pop-ups from up to 50 meters…

👍11

8.16K views13:14

👍 23 👎 2

Android Security & Malware

Get external IP address of the user during Telegram call. Now it works well and returns public instead of local IP
https://twitter.com/androidmalware2/status/1711313647576686621

X (formerly Twitter)

Mobile Hacker (@androidmalware2) on X

Get external IP address of the user during #Telegram call. Now it works well and returns public instead of local IP
https://t.co/hfiK1Lz6Mh

❤18👎3👍1

8.48K views15:06

👍 27 👎 3

Android Security & Malware

Well explained blog on how to find and exploit XSS in Android apps in WebViews and Deep Links
https://securityboulevard.com/2023/10/execution-of-arbitrary-javanoscript-in-android-application/

Security Boulevard

Execution of Arbitrary JavaScript in Android Application

In this blog, we will learn about the possible ways to find cross-site noscripting by abusing JavaScript in Android applications. Cross-site noscripting (XSS) in an Android application occurs when an attacker successfully injects malicious noscripts (usually JavaScript)…

👍18❤1

14.1K views21:14

👍 25 👎 3

Android Security & Malware

Unmasking the Godfather - Reverse Engineering the Latest Android Banking Trojan
Talk: https://youtu.be/jNQmc2REwFg
Slides: https://github.com/LaurieWired/StrangeLoop

YouTube

"Unmasking the Godfather - Reverse Engineering the Latest Android Banking Trojan" by Laurie Kirk

Banking malware has wreaked havoc on millions of Android users over the last few years, employing advanced stealth techniques to evade detection. During this presentation, I will reverse engineer the Java code of the pervasive Godfather Android banking malware…

👍20❤4

8.4K views06:22

👍 24 👎 1

Android Security & Malware

iOS Pentesting Series
Learn how to work with useful tools and apps such as Frida, Objection, 3uTools, Cydia, Burp, fsmon, fridump, SSL bypass, reFlutter etc.
Part 1: https://kishorbalan.medium.com/start-your-first-ios-application-pentest-with-me-part-1-1692311f1902
Part 2: https://kishorbalan.medium.com/ios-pentesting-series-part-2-into-the-battlefield-f17ed2778890
Part 3: https://kishorbalan.medium.com/ios-pentesting-series-part-3-the-ceasefire-53fcea3bbd70

Medium

Start your first iOS Application Pentest with me.. (Part- 1)

Hola Heckers,

🔥12👍7

12.3K views06:15

👍 28 👎 1

Android Security & Malware

How to detect Wi-Fi deauthentication attack and even receive notification on your smartphone
https://www.mobile-hacker.com/2023/10/12/detect-wi-fi-deauthentication-attack-using-esp8266-and-receive-notification-on-smartphone/

Mobile Hacker

Detect Wi-Fi deauthentication attack using ESP8266 and receive notification on smartphone Mobile Hacker

A Wi-Fi deauthentication attack, also known as a "deauth attack" or "disassociation attack," is a type of denial-of-service that targets wireless networks. The primary goal of this attack is to disconnect or deauthenticate devices (such as smartphones, laptops…

👍26🤣3❤2

9.71K views10:24

👍 45 👎 2

Android Security & Malware

An analysis of an in-the-wild iOS Safari WebContent to GPU Process exploit
https://googleprojectzero.blogspot.com/2023/10/an-analysis-of-an-in-the-wild-ios-safari-sandbox-escape.html

Blogspot

An analysis of an in-the-wild iOS Safari WebContent to GPU Process exploit

By Ian Beer A graph representation of the sandbox escape NSExpression payload In April this year Google's Threat Analysis Group, in ...

👍6❤1

8.68K views17:29

👍 26 👎

Android Security & Malware

PoC exploit for CVE-2023-41993 where web content may lead to arbitrary code execution affecting iOS before 16.7
https://github.com/po6ix/POC-for-CVE-2023-41993

GitHub

GitHub - po6ix/POC-for-CVE-2023-41993

Contribute to po6ix/POC-for-CVE-2023-41993 development by creating an account on GitHub.

👍12🔥1

8.19K views12:32

👍 14 👎 2

Android Security & Malware

Analysis of SpyNote spyware that logs and steals a variety of information, including key strokes, call logs, information on installed applications etc.
https://blog.f-secure.com/take-a-note-of-spynote/

F-Secure

Take a note of SpyNote malware | F‑Secure

SpyNote malware is targeting Android users — learn how it works, the risks it poses, and how to keep your device secure.

👍10🥱6😴1💅1

7.57K views14:24

👍 16 👎 2

Android Security & Malware

Malicious “RedAlert - Rocket Alerts” Application Targets Israeli Phone Calls, SMS, and User Information through fake website
https://blog.cloudflare.com/malicious-redalert-rocket-alerts-application-targets-israeli-phone-calls-sms-and-user-information/

The Cloudflare Blog

Malicious “RedAlert - Rocket Alerts” application targets Israeli phone calls, SMS, and user information

On October 13, 2023, Cloudflare’s Cloudforce One Threat Operations Team became aware of a malicious Google Android application impersonating the real-time rocket alert app, Red Alert, which provides real-time rocket alerts for Israeli citizens

👍16👏1

7.38K views20:02

👍 17 👎 2

Android Security & Malware

BLE Spam allows now to send unwanted notifications to iOS, Android and Windows at once using Flipper Zero.
If you don't have Flipper Zero, in the blog I explained how to trigger popups using any Android smartphone even with custom messages
https://www.mobile-hacker.com/2023/10/17/spam-ios-android-and-windows-with-bluetooth-pairing-messages-using-flipper-zero-or-android-smartphone/

Mobile Hacker

Spam iOS, Android and Windows with Bluetooth pairing messages using Flipper Zero or Android smartphone Mobile Hacker

So far, it was possible to spam through proximity paring messages only iOS devices, either using Flipper Zero, Arduino board or any Android as explained in my previous blog here. However, recently developers of Xtreme firmware for Flipper Zero pushed and…

👍13❤3🔥1🤔1

9.08K views10:06

👍 23 👎 2

Android Security & Malware

iObfuscate: Unraveling iOS Obfuscation Techniques
Examine multiple examples of Reverse Engineering iOS obfuscation techniques
https://github.com/LaurieWired/ObjectiveByTheSea2023/

GitHub

GitHub - LaurieWired/ObjectiveByTheSea2023: This contains notes and slides for my Objective by the Sea talk

This contains notes and slides for my Objective by the Sea talk - LaurieWired/ObjectiveByTheSea2023

👍18❤3🔥2

9.2K views12:53

👍 20 👎 3

Android Security & Malware

Automatically extract URL and IP endpoints from Android app to a text file using apk2url.
Fast and useful tool for pentesters, bug bounty hunters, or malware analyst
https://github.com/n0mi1k/apk2url

GitHub

GitHub - n0mi1k/apk2url: An OSINT tool to quickly extract IP and URL endpoints from APKs by disassembling and decompiling

An OSINT tool to quickly extract IP and URL endpoints from APKs by disassembling and decompiling - n0mi1k/apk2url

🔥20👍8🤔2❤1

9.59K views10:02

👍 34 👎 3

Android Security & Malware

Analysis of Rusty Droid Android RAT
https://labs.k7computing.com/index.php/rusty-droid-under-the-hood-of-a-dangerous-android-rat/

K7 Labs

Rusty Droid: Under the Hood of a Dangerous Android RAT

Threat actors focus on gaining remote access and control of victims’ devices. For this they either use fake apps or […]

👍12❤3😁2🤔1

10.1K views12:06

👍 25 👎 5

Android Security & Malware

The outstanding stealth of Operation Triangulation
https://securelist.com/triangulation-validators-modules/110847/

Securelist

Triangulation: validators, post-compromise activity and modules

In this report Kaspersky shares insights into the validation components used in Operation Triangulation, TriangleDB implant post-compromise activity, as well as details of some additional modules.

👍10🥰1

7.67K views14:45

👍 17 👎 2

Android Security & Malware

How to increase radio range of Flipper Zero beyond 100 meters | internal vs. external radio module
https://www.mobile-hacker.com/2023/10/24/how-to-increase-radio-range-of-flipper-zero-yourself-beyond-100-meters/

Mobile Hacker

How to increase radio range of Flipper Zero yourself beyond 100 meters Mobile Hacker

Equipped with an integrated module, Flipper Zero is capable of both receiving and transmitting radio frequencies spanning from 300 MHz to 928 MHz. This module enables to capture, store, and replicate remote controls, commonly employed for tasks such as interfacing…

👍18❤3🤔1

8.34K views06:41

👍 33 👎 1

Android Security & Malware

Pwn2Own 2023 hacking contest resulted in hacking Samsung Galaxy S23 twice, Xiaomi's 13 Pro smartphone, as well as printers, smart speakers, Network Attached Storage (NAS) devices, and surveillance cameras from Western Digital, QNAP, Synology, Canon, Lexmark, and Sonos
https://www.bleepingcomputer.com/news/security/samsung-galaxy-s23-hacked-twice-on-first-day-of-pwn2own-toronto/

BleepingComputer

Samsung Galaxy S23 hacked twice on first day of Pwn2Own Toronto

Security researchers hacked the Samsung Galaxy S23 twice during the first day of the consumer-focused Pwn2Own 2023 hacking contest in Toronto, Canada.

❤10🔥2👍1👏1🤣1

8.73K views07:47

👍 22 👎 2

Android Security & Malware

Leveraging a Hooking Framework to Expand Malware Detection Coverage on the Android Platform
https://unit42.paloaltonetworks.com/hooking-framework-in-sandbox-to-analyze-android-apk/

Unit 42

Leveraging a Hooking Framework to Expand Malware Detection Coverage on the Android Platform

We employ static and dynamic analysis to dissect two case studies using obfuscation in Android malware: a Cerberus banking trojan and HiddenAd adware.

👍13🤔3🔥1