NEW BOT Телеграм, страница

Unidbg to production
https://bhamza.me/blogpost/2024/09/20/unidbg-to-production.html

Introduction In the last blogpost, we covered how to use unidbg from scratch to emulate an Android native library. As some might have noticed, the Proof of Concept code is not production ready as it does not allow for a way to call the signing functionality…

👍11🔥6🌚1

11K views13:35

👍 18 👎

Android Security & Malware

Boost Flipper Zero with FEBERIS: 3-in-1 SubGhz, NRF24, and WiFi board
https://www.mobile-hacker.com/2025/01/09/boost-your-flipper-zero-with-feberis-3-in-1-subghz-nrf24-and-wifi-board/

Mobile Hacker

Boost Your Flipper Zero with FEBERIS: 3-in-1 SubGhz, NRF24, and WiFi board

I am excited to introduce you to FEBERIS, an expansion 3-in-1 development board for the Flipper Zero. This custom board utilizes external Wi-Fi, NRF24, and CC1101 modules, enhancing the capabilities of your Flipper Zero device.

👍17❤12👌2

13.2K views08:25

👍 39 👎 1

Android Security & Malware

Fully-remote (0-click) bug on the Samsung S24 if Google Messages is configured for RCS (the default configuration on this device), as the trannoscription service decodes incoming audio before a user interacts with the message for trannoscription purposes. Issue is fixed now.
https://project-zero.issues.chromium.org/issues/368695689

🔥34👍3⚡1

19.1K views17:59

👍 43 👎 4

Android Security & Malware

Analysis of Autel MaxiCharger Android app to reviewing the attack surface
https://www.zerodayinitiative.com/blog/2025/1/15/reviewing-the-attack-surface-of-the-autel-maxicharger-part-two

Zero Day Initiative

Zero Day Initiative — Reviewing the Attack Surface of the Autel MaxiCharger: Part Two

Previously , we covered the internals of the Autel MaxiCharger where we highlighted each of the main components. In this post, we aim to outline the attack surface of the MaxiCharger in the hopes of providing inspiration for vulnerability research. All information…

🌚7👍1

11.6K views06:37

👍 25 👎 4

Android Security & Malware

Android malware in DoNot APT operations
https://www.cyfirma.com/research/android-malware-in-donot-apt-operations/

CYFIRMA

ANDROID MALWARE IN DONOT APT OPERATIONS - CYFIRMA

EXECUTIVE SUMMARY The research team at CYFIRMA collected a sample attributed to the Indian APT group known as ‘DONOT’, which...

❤12🌚6🤔2👍1

11.3K views08:19

👍 32 👎 2

Android Security & Malware

USB Army Knife: Close Access Penetest Tool
It is capable of: remote keystroke injection, VNC, USB network adapter, EvilAP, Marauder, record microphone, controlled over web interface with fancy LCD screen
https://www.mobile-hacker.com/2025/01/24/usb-army-knife-the-ultimate-close-access-penetest-tool/

Mobile Hacker

USB Army Knife: The Ultimate Close Access Penetest Tool

Whether you want to transform into a USB Ethernet adapter and capture network traffic, create custom user interface for your attacks, or use covert storage devices, the USB Army Knife has you covered.

👍29🔥3👏2

10.7K views08:50

👍 29 👎 1

Android Security & Malware

Vulnerability of hotel room Android kiosk tablets
It was possible to execute ADB commands, unlock bootloader and possibly escalate privileges to root. Pull kiosk apps for reverse engineering and obtain servers (pivot) or hardcoded secrets.
As a result attacker could pose as another guest room terminal and control the air conditioning and lights, place orders, display bills, and eavesdrop on chats
https://devblog.lac.co.jp/entry/20250124

ラック・セキュリティごった煮ブログ

高級ホテルの客室タブレットに潜む危険：他客室も操作、盗聴可能だった脆弱性を発見するまで - ラック・セキュリティごった煮ブログ

しゅーとです。新婚旅行で沖縄に行ってきたのですが、そこで泊まった高級リゾートホテルの客室にタブレットが置いてありました。このタブレットを調査したところ、客室内の盗聴・盗撮が可能となる脆弱性や、第三者がネットワーク上から他客室のコントロール、チャットの盗聴が可能となる脆弱性を発見しました。この問題はIPAを通して開発…

👍11🔥5😁2🌚2

11.7K views10:18

👍 24 👎

Android Security & Malware

Analysis of TrickMo Android malware campaign targeting Poland
https://www.sirt.pl/atak-na-uzytkownikow-androida-falszywa-aplikacja-olx/

PREBYTES Security Incident Response Team

Atak na użytkowników Androida - Fałszywa aplikacja OLX

W ostatnich tygodniach użytkownicy OLX padli ofiarą nowej złośliwej aplikacji, która podszywa się pod popularną platformę ogłoszeniową. Atak malware wykorzystuje metodę phishingu, mając na celu kradzież danych osobowych i środków finansowych. Jak działa ta…

❤8👍2🔥2😁2🌚1