NEW BOT Телеграм, страница

ProtonVPN is the first VPN provider to open source apps on all platforms (Windows, macOS, Android, and iOS) and undergo an independent security audit
https://github.com/ProtonVPN/android-app

GitHub

GitHub - ProtonVPN/android-app: Official ProtonVPN Android app

Official ProtonVPN Android app. Contribute to ProtonVPN/android-app development by creating an account on GitHub.

3.8K views15:34

Android Security & Malware

Stats of Android.Xiny trojan family

Installing applications without user permission has always been Android.Xiny's principal function. Thus, attackers can profit from pay-per-install referral programmes
https://news.drweb.com/show/?i=13627&lng=en

Dr.Web

Yet another [almost] non-removable trojan for Android

At the end of 2019, system-monitoring routines on some of our customers' smart phones detected changes in the file /system/lib/libc.so.

3.73K views19:36

Android Security & Malware

Forensic analysis of Jeff Bezos hacked #iPhoneX

iPhone was exploited via #WhatsApp vulnerability that probably triggered RCE.
Similar exploit was fixed in October 2019 - CVE-2019-11932(double-free vulnerability) but instead of video it was triggered by GIF.
https://www.documentcloud.org/documents/6668313-FTI-Report-into-Jeff-Bezos-Phone-Hack.html

www.documentcloud.org

FTI Report into Jeff Bezos Phone Hack

4.03K views08:36

Android Security & Malware

Analysis of Opera for Android vulnerability to a sandboxed cross-origin iframe bypass attack (CVE-2019-19788)
https://blog.confiant.com/trending-client-side-innovations-in-malvertising-payloads-914d9f614ed1

Medium

This blog post will cover two techniques that persistent, high volume malvertisers have been leveraging in recent months to maximize the…

6.74K views10:35

Android Security & Malware via @vote

What mobile OS you are using?
anonymous poll

Android – 417
👍👍👍👍👍👍👍 80%

iOS – 78
👍 15%

other – 10
▫️ 2%

Windows Mobile – 9
▫️ 2%

KaiOS – 6
▫️ 1%

👥 520 people voted so far.

3.94K views16:47

Android Security & Malware

United Nations officials will not use #WhatsApp to communicate because it’s not supported as a secure mechanism #JeffBezos
https://www.reuters.com/article/us-un-whatsapp/u-n-says-officials-barred-from-using-whatsapp-since-june-2019-over-security-idUSKBN1ZM32P

Reuters

U.N. says officials barred from using WhatsApp since June 2019 over security

UNITED NATIONS (Reuters) - United Nations officials do not use WhatsApp to communicate because “it’s not supported as a secure mechanism,” a U.N. spokesman said on Thursday, after U.N. experts accused Saudi Arabia of using the online communications platform…

4.4K views18:17

Android Security & Malware

Penetration Testing & Hacking Tools List (30+)

- Penetration Testing Resources
- Exploit Development
- OSINT Resources
- Anonymity Tools
- Social Engineering
- Reverse Engineering Tools
- Operating Systems
- Vulnerability Databases
- Penetration Testing Distributions
- Docker for Penetration Testing
- Multi-paradigm Frameworks
- Vulnerability Scanners
- Static Analyzers
- Web Scanners
- Network Tools
- Wireless Network Hacking Tools
- Transport Layer Security Tools
- Web Exploitation
- Hex Editors
- File Format Analysis Tools
- Defense Evasion Tools
- Hash Cracking
- Windows Utilities
- GNU/Linux Utilities
- macOS Utilities
- Lock Picking Resources
- CTF Tools
- Books
- Security Courses
https://itshackingnews.blogspot.com/2020/01/penetration-testing-hacking-tools.html

5.54K views21:27

Android Security & Malware

Ring doorbell app on Android shares its users personal information with third-party companies

-names, email
-private IP addresses
-mobile network carriers
-persistent identifiers
-sensor data (magnetometer, gyroscope,accelerometer)
-etc.
https://www.eff.org/deeplinks/2020/01/ring-doorbell-app-packed-third-party-trackers

Electronic Frontier Foundation

Ring Doorbell App Packed with Third-Party Trackers

Ring isn't just a product that allows users to surveil their neighbors. The company also uses it to surveil its customers.An investigation by EFF of the Ring doorbell app for Android found it to be

4.25K views07:16

Android Security & Malware

Another New York Times journalist targeted by mobile spyware #Pegasus created by NSO Group
https://citizenlab.ca/2020/01/stopping-the-press-new-york-times-journalist-targeted-by-saudi-linked-pegasus-spyware-operator/

The Citizen Lab

Stopping the Press

New York Times journalist Ben Hubbard was targeted with NSO Group’s Pegasus spyware via a June 2018 SMS message promising details about “Ben Hubbard and the story of the Saudi Royal Family.” The SMS contained a hyperlink to a website used by a Pegasus operator…

4.11K views21:40

Android Security & Malware

Forensics detective says Android phones are now harder to crack than iPhones

"The tool could not extract any social media, internet browsing, or GPS data from devices such as the Google Pixel 2 and Samsung Galaxy S9. In the case of the Huawei P20 Pro, the cracking software literally got nothing."
https://www.androidauthority.com/android-encryption-forensics-1078668/

Android Authority

Forensics detective says Android phones are now harder to crack than iPhones

According to a forensics detective, Android encryption has made it harder to crack Android phones as compared to iPhones. This is a reversal from the norm.

4.05K views15:38

Android Security & Malware

Apple WebKit team aims to improve the security of one-time passcodes sent to users via SMS
https://www.zdnet.com/google-amp/article/apple-wants-to-standardize-the-format-of-sms-otps-one-time-passcodes/

ZDNet

Apple wants to standardize the format of SMS OTPs (one-time passcodes)

WebKit team proposal aims to improve the security of one-time passcodes sent to users via SMS.

3.93K views17:32

Android Security & Malware

mobile-report.pdf