Android Security & Malware – Telegram
Android Security & Malware
@androidMalware
43.3K subscribers
127 photos
19 videos
7 files
2.69K links
Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com
Download Telegram
About
Blog
Apps
Platform
Join
Android Security & Malware
43.3K subscribers
Android Security & Malware
Android StrandHogg vulnerability

Vulnerability allows malicious app to masquerade as any other app on the device.
So, if you launch Facebook, malware is executed.
https://promon.co/security-news/strandhogg/
Video demo: https://twitter.com/LukasStefanko/status/1201597521560244225
👍1
5.13K views
Android Security & Malware
Exploiting unpatched Android StrandHogg vulnerability demo
https://youtu.be/yI0Xh5Oc0x4
YouTube
Android StrandHogg vulnerability demo | Exploit | PoC | Malware
Android StrandHogg vulnerability

Vulnerability allows malicious app to masquerade as any other app on the device.

If you launch Facebook, malware is executed.
In the video is simple exploitation of the vulnerability.



More info: https://promon.co/security…
4.59K views
Android Security & Malware
Analysis of Android Downloader Trojans
https://securityintelligence.com/posts/the-role-of-evil-downloaders-in-the-android-mobile-malware-kill-chain/
Security Intelligence
The Role of Evil Downloaders in the Android Mobile Malware Kill Chain
Malware on official mobile app stores is a growing concern for all users. Increasingly, malware developers are getting around sophisticated app store controls by using mobile malware downloaders.
4.31K views
Android Security & Malware
[updated] Android App Reverse Engineering 101
https://maddiestone.github.io/AndroidAppRE/
3.74K views
Android Security & Malware
Malicious Android apps observed during Thanksgiving season of 2019
https://securitynews.sonicwall.com/xmlpost/malicious-android-apps-observed-during-thanksgiving-season-of-2019/
3.52K views
Android Security & Malware
Chasing the Joker

Android SMS subnoscription bot distributed over Google Play #slides
https://docs.google.com/presentation/d/1sFGAERaNRuEORaH06MmZKeFRqpJo1ol1xFieUa1X_OA/edit#slide=id.p1
Google Docs
Joker
Chasing the Joker
4.02K views
Android Security & Malware
Android Malware Adventures #slides
https://docs.google.com/presentation/d/1pYB522E71hXrp4m3fL3E3fnAaOIboJKqpbyE5gSsOes/edit#slide=id.p1
Google Docs
deepsec-android-malware-adventures
1 Android Malware Adventures Mert Can Coşkuner Kürşat Oğuzhan Akıncı DeepSec IDSC
4.53K views
Android Security & Malware
DeStroid
Fighting String Encryption in Android Malware
https://github.com/fkie-cad/DeStroid/blob/master/DeStroid_bonus_slides.pdf
GitHub
DeStroid/DeStroid_bonus_slides.pdf at master · fkie-cad/DeStroid
Fighting String Encryption in Android Malware. Contribute to fkie-cad/DeStroid development by creating an account on GitHub.
4.16K viewsedited  
Android Security & Malware
Forwarded from fs0c131y - Official Channel (Elliot Alderson)
Androids Invisible Foreground Services and
How to (Ab)use Them https://i.blackhat.com/eu-19/Thursday/eu-19-Sutter-Simple-Spyware-Androids-Invisible-Foreground-Services-And-How-To-Abuse-Them.pdf
223 views
Android Security & Malware
Venus malware family found on Google Play targets carrier billing and advertising
https://www.evina.fr/evina-security-analyst-found-a-new-trojan-family-on-google-play/
Evina
The Fraud Observer - Evina
Once a month, the most valuable insights and news to fight fraud and grow your business.
3.33K views
Android Security & Malware
SockPuppet: A Walkthrough of a Kernel Exploit for iOS 12.4
https://googleprojectzero.blogspot.com/2019/12/sockpuppet-walkthrough-of-kernel.html
Blogspot
SockPuppet: A Walkthrough of a Kernel Exploit for iOS 12.4
Posted by Ned Williamson, 20% on Project Zero Introduction I have a somewhat unique opportunity in this writeup to highlight my experie...
3.31K views
Android Security & Malware
Doctor Web’s overview of mobile malware detected in November 2019
https://news.drweb.com/show/?i=13558&lng=en
Dr.Web
Doctor Web’s overview of mobile malware detected in November 2019
3.4K views
Android Security & Malware
A detailed walk through of reverse engineering CVE-2019-3568 (WhatsApp 0-day from May)

Slides: https://github.com/maddiestone/ConPresentations/blob/master/Jailbreak2019.WhatsUpWithWhatsApp.pdf
Video: https://thecyberwire.com/stories/Maddie-Stone-Whatsup-with-WhatsApp-A-Detailed-Walk-Through-of-Reverse-Engineering-CVE-2019-3568.html
GitHub
ConPresentations/Jailbreak2019.WhatsUpWithWhatsApp.pdf at master · maddiestone/ConPresentations
Slide decks from my conference presentations. Contribute to maddiestone/ConPresentations development by creating an account on GitHub.
3.7K views
Android Security & Malware
A Deep Dive into Reversing Android Pre-Installed Apps
https://youtu.be/U6qTcpCfuFc
Slides: https://github.com/maddiestone/ConPresentations/blob/master/Blackhat2019.SecuringTheSystem.pdf
YouTube
Securing the System: A Deep Dive into Reversing Android Pre-Installed Apps
This talk will detail the differences in reversing and analyzing pre-installed Android applications compared to the user-space applications that most security research has focused on. This will include things like identifying when a pre-installed application…
3.43K views
Android Security & Malware
AndroidProjectCreator: Open an APK in Android Studio project
https://t.co/4diAmkM3oj?amp=1
3.15K views
Android Security & Malware
Forwarded from fs0c131y - Official Channel (Elliot Alderson)
Frida API Fuzzer to fuzz APIs of Android apps https://github.com/andreafioraldi/frida-fuzzer
GitHub
GitHub - andreafioraldi/frida-fuzzer: This experimetal fuzzer is meant to be used for API in-memory fuzzing.
This experimetal fuzzer is meant to be used for API in-memory fuzzing. - andreafioraldi/frida-fuzzer
279 views
Android Security & Malware
Android Malware Sandbox

Modulable sandbox for quickly sandbox known or unknown families of Android Malware
https://github.com/Areizen/Android-Malware-Sandbox
GitHub
GitHub - Areizen/Android-Malware-Sandbox: Android Malware Sandbox
Android Malware Sandbox. Contribute to Areizen/Android-Malware-Sandbox development by creating an account on GitHub.
3.09K views
Android Security & Malware
Joker found on Google Play had victims in UAE

Android users in the UAE reported charges of more than AED 1000 per year from unwanted subnoscriptions
http://www.dubaichronicle.com/2019/12/14/uae-android-users-alert-scams-associated-with-mobile-apps/
Dubaichronicle
UAE Android Users Alert: Scams Associated With Mobile Apps
Android users in the UAE on the increase in the number of mobile scams and unwanted subnoscriptions on mobile phones.
3K views
Android Security & Malware
Adware on Google Play in apps with more than 16,100,000 installs in total
https://twitter.com/sh1shk0va/status/1205510874250825728?s=19
Twitter
Tatyana Shishkova
#Adware on Google Play in apps with more than 16,100,000 installs in total. Thanks to Igor Golovin https://t.co/cK4uX6oRAj 10,000,000+ installs https://t.co/AssfFxA37Z 5,000,000+ installs https://t.co/pH0qLC0p25 1,000,000+ installs https://t.co/GrjBPpwaMg…
2.9K views
Android Security & Malware
iOS Imgur app - A Realm database example
https://abrignoni.blogspot.com/2019/12/ios-imgur-app-realm-database-example.html
Blogspot
Initialization Vectors
Learning DFIR.
2.82K views
Android Security & Malware
Android banking trojan has been spreading in Brazil 🇧🇷 as Google System apps
[1] https://twitter.com/ThreatFabric/status/1205817445564526592?s=19
[2] https://twitter.com/DbgShell/status/1205949571924398080?s=19
Twitter
ThreatFabric
After 1 year of silence, it looks likethe #CoyBot (alias #BasBanke) banking #Trojan is back on the menu! Targeting 9 different banking apps in Brazil.
3.12K views