A bug allows anyone who has the victim’s phone to read all their contact list without unlocking the security lock

Microsoft updated the security advisory of an information disclosure vulnerability that previously impacted only Windows Remote Desktop Protocol clients to also include the Microsoft Remote Desktop for Android app.

ESET research breaks down the first known spyware that is built on the AhMyth open-source espionage tool and has appeared on Google Play – twice.

A few months ago I stumbled upon a 2016 blog post by Mark Murphy, warning about the state of FLAG_SECURE window leaks in Android. This class of vulnerabilities has been around for a while, hence I wasn’t confident that I could still leverage the same weakness…

Happily, I recently found that it’s already possible to get everything working, even a working debugging session on IDA Pro, however…

A demo of CVE-2019-8646, retrieving an image from a remote device's messages

Hello Everyone — Long time no see!

#Riltok #Android still around in France http://karambga3j. net/3lfk3jGj/fKJh3jKLO/login.php f51a27163cb0ddd08caa29d865b9f238848118ba2589626af711330481b352df

In this article, I’ll explain how to bypass SSL pinning of any android application using frida framework.

Introduction BSIDES CTF 2019 was hosted by Google and Facebook in San Francisco during the BSides Conference. Teams from all over the world could compete, but the prizes can only be claimed by team…

###What is The Vulnerability?

The Passcode can be bypassed by calling a MainLoginActivity which is com.owncloud.android.ui.activity.FileDisplayActivity , We have successfully bypassed the passcode...

Since its introduction in May 2019, the xHelper dropper, an Android Trojan, has climbed to our top 10 list of most detected mobile malware.

out here
rce, lpe, code injection in Messages, sleep 1s, alert

Recently, the popular CamScanner – Phone PDF creator app caught our attention. After analyzing the app, we saw that the developer added an advertising library to it that contains a malicious dropper component.

Another Malicious App targeting Pernambucanas clients: https://t.co/vcZjTNDDeB @assolini @defesa_digital @Android @GooglePlay @emilio_simoni

Fake VPN client has been found and removed from Google Play. On command: -opens web, #instagram, #telegram and google play pages -downloads and tries to install other applications ioc: d789d13c6187ad3cd2991b6d387d9e943d394a8c #android #trojan #malware

Two apps with over 1.5 million downloads use new method to stealthily click ads on users’ devices. Apps present on Play Store for almost a year before being discovered.