Android Security & Malware

Android: vold's incremental-fs APIs trust paths from system_server for mounting (CVE-2022-20002)
https://bugs.chromium.org/p/project-zero/issues/detail?id=2221

7.67K views09:01

👍 11 👎💬

Android Security & Malware

Analysis of request forgery using Android deep link in CafeBazaar app
https://securityflow.io/impact-of-an-insecure-deep-link/

9.1K views10:18

👍 23 👎 2 💬

Android Security & Malware

Popular Android malware threats discovered in November, 2021
Full list - https://sk3ptre.github.io/Malware-Timeline-2021/
Download samples - https://github.com/sk3ptre/AndroidMalware_2021

sk3ptre

Android Malware Timeline 2021

Popular Android malware seen in 2021, I have uploaded APK files for all the entries that I could on my Github repository

January:
New Android spyware targets users in Pakistan
Going Rogue- a Mastermind behind Android Malware Returns with a New RAT
Imitation…

👍1

9.61K views08:52

👍 28 👎 1 💬

Android Security & Malware

Mobile banking fraud: BRATA strikes again
https://www.cleafy.com/cleafy-labs/mobile-banking-fraud-brata-strikes-again

Cleafy

Mobile banking fraud: BRATA strikes again | Cleafy Labs

The mobile banking malware BRATA strikes again, and it is slowly spreading all over Europe. Read here the new Technical Report, which explains in detail how it works and how to prevent it.

9.83K views08:38

👍 24 👎 2 💬

Android Security & Malware

Vulnerability found in Android/Linux kernel leads to use-after-free (CVE-2021-1048)
https://googleprojectzero.github.io/0days-in-the-wild/0day-RCAs/2021/CVE-2021-1048.html

9.9K views15:38

👍 23 👎 1 💬

Android Security & Malware

Mobile espionage in Palestine Region by APT-C-23 group
https://raw.githubusercontent.com/T-SecLab/APT-C-23/main/cyber%20espionage%20in%20palestine%20region%20.pdf

9.94K views10:26

👍 16 👎💬

Android Security & Malware

How a bug in Android and Microsoft Teams could have caused this user’s 911 call to fail
https://medium.com/@mmrahman123/how-a-bug-in-android-and-microsoft-teams-could-have-caused-this-users-911-call-to-fail-6525f9ba5e63

Medium

How a bug in Android and Microsoft Teams could have caused this user’s 911 call to fail

Written by Mishaal Rahman (@MishaalRahman) and edited by @linuxct, Kuba Wojciechowski (@Za_Raczke), and Al Sutton (@alsutton).

9.71K views15:32

👍 29 👎💬

Android Security & Malware

Use cryptography in mobile apps the right way
https://blog.oversecured.com/Use-cryptography-in-mobile-apps-the-right-way/

News, Techniques & Guides

Use cryptography in mobile apps the right way

At Oversecured, we scan thousands of apps every month. We observe that some vulnerabilities now come up much less frequently than they did a few years ago.

👍1

8.69K views09:01

👍 13 👎 1 💬

Android Security & Malware

A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution
https://googleprojectzero.blogspot.com/2021/12/a-deep-dive-into-nso-zero-click.html

projectzero.google

A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution

Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen Lab ...

9.88K views09:17

👍 40 👎💬

Android Security & Malware

Pegasus vs. Predator Dissident’s Doubly-Infected iPhone Reveals Cytrox Mercenary Spyware
https://citizenlab.ca/2021/12/pegasus-vs-predator-dissidents-doubly-infected-iphone-reveals-cytrox-mercenary-spyware/

The Citizen Lab

Pegasus vs. Predator

Two Egyptians—exiled politician Ayman Nour and the host of a popular news program (who wishes to remain anonymous)—were hacked with Predator spyware, built and sold by the previously little-known mercenary spyware developer Cytrox. The phone of Ayman Nour…

👍2

10.3K views13:25

👍 38 👎💬

Android Security & Malware

Android Application Testing Using Windows 11 and Windows Subsystem for Android
https://sensepost.com/blog/2021/android-application-testing-using-windows-11-and-windows-subsystem-for-android/

9.14K views10:37

👍 29 👎💬

Android Security & Malware

A simple frida script for iOS apps that spits out API request URLs, headers and body even if SSL pinning is enabled
https://github.com/bhavukjain1/frida_helper/blob/7eb165d23980c84eb9aab5b975738bee296b6ac2/spit_ios.js

GitHub

frida_helper/spit_ios.js at 7eb165d23980c84eb9aab5b975738bee296b6ac2 · bhavukjain1/frida_helper

Contribute to bhavukjain1/frida_helper development by creating an account on GitHub.

👍2

9.3K views09:30

👍 30 👎 1 💬

Android Security & Malware

Bluetooth-using home COVID test was cracked to fake results
https://labs.f-secure.com/blog/faking-a-positive-covid-test

9.4K views15:36

👍 23 👎 1 💬

Android Security & Malware

IP address leak (Android), and denial of service (DoS) dubbed Message of Death (Android) found in Android Microsoft Teams app https://positive.security/blog/ms-teams-1-feature-4-vulns

positive.security

MS Teams: 1 feature, 4 vulnerabilities | Positive Security

Microsoft Team's link preview feature is susceptible to spoofing and vulnerable to Server-Side Request Forgery. Team's Android users can be DoS'ed and, in the past, their IP address could be leaked.

👍1

10.5K views12:52

👍 41 👎 2 💬

Android Security & Malware

Malicious App Targets Major Brazilian Bank Itaú Unibanco
https://blog.cyble.com/2021/12/23/malicious-app-targets-major-brazilian-bank-itau-unibanco/

Cyble

Malicious App Targets Major Brazilian Bank Itaú Unibanco

Cyble's research on an Android Malware that has been targeting a major banking company in Brazil.

👍2