NEW BOT Телеграм, страница

Android Security & Malware

BlackRock - new Android banking Trojan
https://www.threatfabric.com/blogs/blackrock_the_trojan_that_wanted_to_get_them_all.html

4.51K views07:29

👍 21 👎💬

Android Security & Malware

Android Hacking with NMAP
-Exploit open ports and vulnerabilities in Android apps
-Search for unpatched ES File Explorer app and exploit it (CVE-2019-6447)
https://youtu.be/HXTl_V8UwYs

5.55K views23:01

👍 21 👎💬

Android Security & Malware

0-click RCE via MMS exploit for Samsung's Android OS versions O(8.x), P(9.0) and Q(10.0) #Fuzzing CVE-2020-8899
https://googleprojectzero.blogspot.com/2020/07/mms-exploit-part-1-introduction-to-qmage.html
Demo: https://youtu.be/ZQnb8kRMkHg

Blogspot

MMS Exploit Part 1: Introduction to the Samsung Qmage Codec and Remote Attack Surface

Posted by Mateusz Jurczyk, Project Zero This post is the first of a multi-part series capturing my journey from discovering a vulnerable...

4.96K views07:53

👍 23 👎💬

Android Security & Malware

Demo of bug in Firefox for Android that allows camera and microphone to stream if device is locked
▪️ it will be fixed in October 2020
▪️ it might be misused as Stalkerware
▪️ tips how to prevent being spied on until October 2020
https://youtu.be/FlthUOKdoKw

YouTube

Bug in Firefox for Android allows camera and microphone live stream if device is locked

I demonstrated a bug in Firefox for Android reported in 2019 that lets device camera and microphone active even though the app is not used (in the background) or device is locked.

In my test, when I killed running Firefox, the stream was disconnected after…

6.75K views07:58

👍 27 👎💬

Android Security & Malware

ADMA v2.0 - Android Mobile Device Hardening tool
Now includes malwares detection based on permissions (more than 500 malwares analysis) with some new updates!
https://github.com/SecTheTech/AMDH

GitHub

GitHub - A-YATTA/AMDH: Android Mobile Device Hardening

Android Mobile Device Hardening. Contribute to A-YATTA/AMDH development by creating an account on GitHub.

6.25K views11:55

👍 21 👎💬

Android Security & Malware

iOS on QEMU
The goal of this project is to boot a fully functional iOS system on QEMU
https://github.com/alephsecurity/xnu-qemu-arm64

GitHub

GitHub - alephsecurity/xnu-qemu-arm64

Contribute to alephsecurity/xnu-qemu-arm64 development by creating an account on GitHub.

6.06K views20:04

👍 26 👎💬

Android Security & Malware

Writing an iOS Kernel Exploit from Scratch
https://secfault-security.com/blog/chain3.html

5.18K views19:50

👍 27 👎💬

Android Security & Malware

How to identify if someone spies on your WhatsApp messages
https://youtu.be/qjoApedppbw

5.03K views05:37

👍 18 👎 19 💬

Android Security & Malware

Apple Security Research Device Program
https://developer.apple.com/programs/security-research-device/

Security Research Device - Apple Security Research

Get an iPhone dedicated to security research through the Apple Security Research Device program. Learn how to apply.

5.59K views19:43

👍 11 👎💬

Android Security & Malware

MMS Exploit Part 2: Effective Fuzzing of the Qmage Codec
https://googleprojectzero.blogspot.com/2020/07/mms-exploit-part-2-effective-fuzzing-qmage.html

Blogspot

MMS Exploit Part 2: Effective Fuzzing of the Qmage Codec

Posted by Mateusz Jurczyk, Project Zero This post is the second of a multi-part series capturing my journey from discovering a vulnerabl...

9.53K views19:40

👍 11 👎💬

Android Security & Malware

DJI GO 4 Android application security analysis (app to control drones)
https://www.synacktiv.com/en/publications/dji-android-go-4-application-security-analysis.html

Synacktiv

DJI Android GO 4 application security analysis

4.71K views07:04

👍 14 👎 2 💬

Android Security & Malware

Source code of Cerberus (Android Malware) is for sale - $100,000
https://www.bleepingcomputer.com/news/security/cerberus-android-malware-source-code-offered-for-sale-for-100-000/

BleepingComputer

Cerberus Android malware source code offered for sale for $100,000

The maintainer of Cerberus banking trojan for Android is auctioning the entire project for a price starting at $50,000 or close the deal for double the money.

5.19K views14:04

👍 27 👎 2 💬 2

Android Security & Malware

AndroidProjectCreator: v1.4-stable has been released
You can now install precompiled versions of all dependencies, shortening the installation to mere seconds! The full patch notes are given here:
https://maxkersten.nl/2020/07/28/androidprojectcreator-1-4-stable-release/

4.39K views18:12

👍 10 👎 1 💬

Android Security & Malware

Medusa - new framework for dynamic analysis of Android apps
It offers different categories and modules to active during the dynamic analysis. It generates Frida noscripts based on the picked modules
https://github.com/Ch0pin/medusa

GitHub

GitHub - Ch0pin/medusa: Mobile Edge-Dynamic Unified Security Analysis

Mobile Edge-Dynamic Unified Security Analysis. Contribute to Ch0pin/medusa development by creating an account on GitHub.

9.2K viewsedited 06:12

👍 17 👎💬

Android Security & Malware

Review of Medusa Framework
Tool for dynamic analysis of Android apps
In review is hooked database module in Instagram app #BugBounty #Pentest #MalwareAnalysis
https://www.facebook.com/AndroidInfoSec/posts/3285627958127349

4.4K views08:07

👍 8 👎💬

Android Security & Malware

MMS Exploit Part 3: Constructing the Memory Corruption Primitives
https://googleprojectzero.blogspot.com/2020/07/mms-exploit-part-3-constructing-primitives.html

Blogspot

MMS Exploit Part 3: Constructing the Memory Corruption Primitives

Posted by Mateusz Jurczyk, Project Zero This post is the third of a multi-part series capturing my journey from discovering a vulnerable...

4.5K views08:59

👍 6 👎💬

Android Security & Malware

Android Worm Malware spreads via SMS in India as TikTok Pro [malware demo]
https://youtu.be/mzkDxBjshI4

YouTube

Android worm malware spreads via SMS in India as TikTok Pro | Android Malware | Fake TikTok Pro

TikTok app was recently banned in India

Malware developers have promptly misused the situation to distribute Android SMS worm disguised as Tiktok Pro.
Once user installs the app, it send SMS to all the contacts with a link to the malicious app.
After the…

5.33K views07:06

👍 13 👎 1 💬

Android Security & Malware

Google has removed 29 apps from the Play Store which were found filled with adware. These Android apps had over 3.5 million downloads on the Play Store.
https://www.whiteops.com/blog/bringing-blur-apps-into-focus

HUMAN

Bringing Blur Apps Into Focus

The White Ops Threat Intelligence and Research Team uncovered an operation dubbed 'ChartreuseBlur', a collection of blur apps committing ad fraud.

5.02K views07:42

👍 13 👎💬

Android Security & Malware

Setting Up An Android VM For Analyzing Mobile Applications
https://github.com/1d8/Android-Analysis

GitHub

GitHub - 1d8/Android-Analysis: Getting Genymotion & Burpsuite setup for Android Mobile App Analysis

Getting Genymotion & Burpsuite setup for Android Mobile App Analysis - 1d8/Android-Analysis

9.63K views08:56

👍 29 👎 1 💬