NEW BOT Телеграм, страница

3.86K views22:08

Be careful when using shared devices

In-room tablets, phones in hotels, ordering tables in restaurants....

On some of them you can install TeamViewer to monitor all the activity.
https://twitter.com/JulienEhrhart/status/1160533140047351808?s=19

Twitter

Julien Ehrhart

Be very careful when you use complimentary in-room tablets or phones in hotels, they may lack proper security hardening. I was able to install @TeamViewer to monitor all the activity of the tablet (left) on my phone (right). Using @aavgohospitalit tablet…

3.1K views19:01

Android Security & Malware

Canon DSLR Camera can get infected with Ransomware over the air
https://research.checkpoint.com/say-cheese-ransomware-ing-a-dslr-camera/

Check Point Research

Say Cheese: Ransomware-ing a DSLR Camera - Check Point Research

Research by: Eyal Itkin TL;DR Cameras. We take them to every important life event, we bring them on our vacations, and we store them in a protective case to keep them safe during transit. Cameras are more than just a tool or toy; we entrust them with our…

3.32K views21:04

Android Security & Malware

Remotely Stole Files Through iMessage on iOS 12.3.1 (CVE-2019-8646 by natashenka) https://youtu.be/ld2m0CPR1nM

The Remote, Interaction-less Attack Surface of the iPhone

Slides from BlackHat about RCEs in iPhone
http://i.blackhat.com/USA-19/Wednesday/us-19-Silvanovich-Look-No-Hands-The-Remote-Interactionless-Attack-Surface-Of-The-iPhone.pdf

2.99K views20:47

Android Security & Malware

History of the worst Android app ever: mAadhaar
Slides: https://github.com/fs0c131y/ConPresentations/blob/master/AppSecVillageDefcon27.mAadhaar.pdf
Presentation: https://youtu.be/1dnyV2Gd48A

GitHub

ConPresentations/AppSecVillageDefcon27.mAadhaar.pdf at master · fs0c131y/ConPresentations

Slide decks from my conference presentations. Contribute to fs0c131y/ConPresentations development by creating an account on GitHub.

3.03K views09:28

Android Security & Malware

Cerberus - A new banking Trojan from the underworld
https://www.threatfabric.com/blogs/cerberus-a-new-banking-trojan-from-the-underworld.html

Threatfabric

Cerberus - A new banking Trojan from the underworld — ThreatFabric

New Cerberus Android banking Trojan joins the threat-landscape at the moment that the banking malware rental business has no more leader. Read what to expect next.

3.41K views12:36

Android Security & Malware

Intercepting traffic from Android Flutter applications
https://blog.nviso.be/2019/08/13/intercepting-traffic-from-android-flutter-applications/

NVISO Labs

Intercepting traffic from Android Flutter applications

Update: The explanation below explains the step for ARMv7. For ARMv8 (64bit), see this blogpost. ⚠️ Update August 2022 ⚠️An update to this blog post was written and can be found here. It …

3.38K views05:33

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Bypass of biometrics security functionality is possible in Android application (com.shopify.mobile)
https://hackerone.com/reports/637194

HackerOne

Shopify disclosed on HackerOne: Bypass of biometrics security...

# Summary
Shopify Android App has an option to sign in to the app using fingerprint. But if the application was open and someone triggers a "deeplink", authentication is no longer required.

##...

377 views15:07

Android Security & Malware

85 Adware Apps Found on Google Play Installed Over 8,000,000 Times
https://blog.trendmicro.com/trendlabs-security-intelligence/adware-posing-as-85-photography-and-gaming-apps-on-google-play-installed-over-8-million-times/

Trend Micro

Adware Posing as 85 Photography and Gaming Apps on Google Play Installed Over 8 Million Times

The mobile platform is ubiquitous — enabling users to make online transactions, run their everyday lives, or even use it in the workplace. It’s no surprise that fraudsters and cybercriminals would want to cash in on it. Delivering adware, for example, enables…

2.98K views12:12

Android Security & Malware

Cerberus - A new banking Trojan from the underworld https://www.threatfabric.com/blogs/cerberus-a-new-banking-trojan-from-the-underworld.html

Cerberus - new Android Banking Trojan is active

-spreads via fake website as Adobe Flash Player
-video demo of its installation and stealing credentials from PayPal
https://twitter.com/ESETresearch/status/1162315627052306432

Twitter

ESET research

#Cerberus, new Android banking Trojan is active and spreads via fake website as Flash Player. It has over 13K+ visits esp. from Japan 🇯🇵 and USA 🇺🇸. #ESETresearch's @LukasStefanko has been tracking it since July. Video of infection, installation and credentials…

❤1

3.28K views13:33

Android Security & Malware

Google Play now reviews all apps for at least three days for security reasons

✅ less harmful apps on Play Store
❌ security app updates could be delayed by 3 days
https://t.co/9gAnukJNFW

Choice of Games LLC

Google Warns Developers that All New Android Apps Require Three Days for Approval

In conversation with Google Play Store developer support today, they confirmed to me that all new Android apps now require at least three days for approval.

3.51K views18:09

Android Security & Malware

Bypassing Certificate Pinning by repackaging Android app
https://blog.approov.io/bypassing-certificate-pinning

approov.io

Bypassing Certificate Pinning

In this article you will learn how to repackage a mobile app to bypass certificate pinning in an Android emulator with a writeable file system.

2.96K views11:55

Android Security & Malware

Threat evolution Q2 2019 by Kaspersky

Top 10 mobile malware in Q2 2019:
1. DangerousObject.Multi.Generic
2. Trojan.AndroidOS.Boogr.gsh
3. DangerousObject.AndroidOS.GenericML
4. Trojan.AndroidOS.Hiddapp.cr
5. Trojan.AndroidOS.Hiddapp.ch
6. Trojan.AndroidOS.Hiddapp.cf
7. Trojan.AndroidOS.Hiddad.em
8. Trojan-Dropper.AndroidOS.Lezok.p
9. Trojan-Dropper.AndroidOS.Hqwar.bb
10.Trojan-Banker.AndroidOS.Asacub.a
https://securelist.com/it-threat-evolution-q2-2019-statistics/92053/

Securelist

IT threat evolution Q2 2019. Statistics

Kaspersky solutions blocked 717,057,912 attacks launched from online resources in 203 countries across the globe, 217,843,293 unique URLs triggered Web Anti-Virus components.

2.99K views12:18

Android Security & Malware

Apple accidentally unpatched a vulnerability it had already fixed, making current versions of iOS vulnerable to hackers.

Vulnerability was fixed in iOS 12.3 but Apple "unfixed" in iOS 12.4
https://www.vice.com/amp/en_us/article/qvgp77/hacker-releases-first-public-iphone-jailbreak-in-years

Vice

Hacker Releases First Public Jailbreak for Up-to-Date iPhones in Years

Apple accidentally unpatched a vulnerability it had already fixed, making current versions of iOS vulnerable to hackers.

3.64K views17:26

Android Security & Malware

Subnoscription Scam with 1,000,000+ installs. After start requests 5 star rating and €99,99 per year subnoscription. https://www.reddit.com/r/PlayStoreTrash/comments/csfp48/chinese_adware_how_does_it_work/

2.78K views06:03

Android Security & Malware

27 apps found on Google Play that prompt to install fake Google Play Store (Adware).
These app reached over 6,000 installs.
https://blogs.quickheal.com/alert-27-apps-found-google-play-store-prompt-install-fake-google-play-store/

Quick Heal Blog

Alert! 27 apps found on Google Play Store that prompt you to install Fake Google Play Store

Quick Heal Security Lab spotted 27 malicious apps of dropper category on official “Google Play Store”. These apps...

3.01K views11:19

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Facebook Bug Bounty: Reading WhatsApp contacts list without unlocking the device
https://medium.com/@ar_arvind/facebook-bug-bounty-reading-whatsapp-contacts-list-without-unlocking-the-device-a40e9c660a42

Medium

WhatsApp Bug Bounty: Reading contacts list without unlocking the device

A bug allows anyone who has the victim’s phone to read all their contact list without unlocking the security lock

276 views05:48

Android Security & Malware

Introducing new #Android #malware analysis platform!
Upload APK, detect malware and grab its configuration.
Currently open for trusted researchers only.
https://www.apkdetect.com/

2.8K views06:57

Android Security & Malware

Microsoft Patches Vulnerable Android Remote Desktop App
https://www.bleepingcomputer.com/news/security/microsoft-patches-vulnerable-android-remote-desktop-app/

BleepingComputer

Microsoft Patches Vulnerable Android Remote Desktop App

Microsoft updated the security advisory of an information disclosure vulnerability that previously impacted only Windows Remote Desktop Protocol clients to also include the Microsoft Remote Desktop for Android app.

2.77K views10:52

Android Security & Malware

First known spyware that is built on the AhMyth open-source espionage tool and has appeared on Google Play – twice
https://www.welivesecurity.com/2019/08/22/first-spyware-android-ahmyth-google-play/

WeLiveSecurity

First‑of‑its‑kind spyware sneaks into Google Play

ESET research breaks down the first known spyware that is built on the AhMyth open-source espionage tool and has appeared on Google Play – twice.