Android Security & Malware

👍9

6.89K views08:45

Business model with fake Android smartphones on Aliexpress https://blog.zecops.com/research/fake-droids-your-new-android-device-is-actually-an-old-android-6/

ZecOps Blog

Fake Droids: Your New Android Device is Actually an Old Android 6 - ZecOps Blog

During a Digital Forensics investigation, ZecOps made an interesting finding: a cheap burner device that purported to be an Android 10 was actually an old Android 6. In the first part of the series, we presented how attackers can ‘fake’ the shutdown screen…

👍15🤬5😁2⚡1

6.56K views10:23

Android Security & Malware

Bugdrop: the first malware trying to circumvent Google's security Controls
https://www.threatfabric.com/blogs/bugdrop-new-dropper-bypassing-google-security-measures.html

Threatfabric

BugDrop: the first malware trying to circumvent Google's security Controls

Analysis of the group behind Xenomorph and Gymdrop

👍14🔥2😁2❤1

6.74K views08:20

Android Security & Malware

InAppBrowsers - see what JavaScript commands get injected through an in-app browser
TikTok, when opening any website in their app, injects tracking code that can monitor all keystrokes, including passwords, and all taps
https://krausefx.com/blog/announcing-inappbrowsercom-see-what-javascript-commands-get-executed-in-an-in-app-browser

🤮15👍8😁2

6.38K views07:24

Android Security & Malware

Exported component Vulnerability found in Ring Android App That Could Expose Users’ Camera Recordings
https://checkmarx.com/blog/amazon-quickly-fixed-a-vulnerability-in-ring-android-app-that-could-expose-users-camera-recordings/

Checkmarx.com

Amazon Quickly Fixed a Vulnerability in Ring Android App That Could Expose Users’ Camera Recordings

Researchers at Checkmarx found that the Ring Android app could have allowed a malicious application installed on the user’s phone to expose their personal data, geolocation, and camera recordings.

👍13👏1

6.62K views11:02

Android Security & Malware

Malicious apps on Google Play: 35 applications found snuck into the Play Store, totaling over two million downloads
https://www.bitdefender.com/blog/labs/real-time-behavior-based-detection-on-android-reveal-dozens-of-malicious-apps-on-google-play-store/

Bitdefender Labs

Real-Time Behavior-Based Detection on Android Reveals Dozens of Malicious Apps on Google Play Store

Note: all applications mentioned in this research have been taken down and are
no longer accessible.

👍17🔥5😁1

6.94K views12:23

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Intercept Flutter traffic on iOS and Android (HTTP/HTTPS/Dio Pinning)

https://blog.nviso.eu/2022/08/18/intercept-flutter-traffic-on-ios-and-android-http-https-dio-pinning/

NVISO Labs

Intercept Flutter traffic on iOS and Android (HTTP/HTTPS/Dio Pinning)

This post explains how to bypass TLS verification on Flutter apps, including bypassing Dio Pinning.

👍20🔥2👎1🥰1

5.94K views17:20

Android Security & Malware

Technical analysis of the MoqHao (a.k.a RoamingMantis) Android malware and its phishing campaign
https://www.xanhacks.xyz/p/moqhao-malware-analysis/

xanhacks' infosec blog

MoqHao Android malware analysis and phishing campaign

Technical analysis of the MoqHao (a.k.a RoamingMantis) Android malware and phishing campaign

👍13

6.39K views06:30

Android Security & Malware

If you want to give Android malware RE a start, here is a list of diverse (not boring) Android malware samples
https://maldroid.github.io/android-malware-samples/

android-malware-samples

Not so boring Android malware

A collection of interesting and diverse Android malware samples

👍23🥰2

6.86K views07:17

Android Security & Malware

Android backdoors discovered in the system partition of budget Android device models that are counterfeit versions of famous brand-name models (P48pro, radmi note 8, Note30u, Mate40)
https://news.drweb.com/show/?i=14542&lng=en

Dr.Web

Doctor Web identifies attack on WhatsApp and WhatsApp Business messengers installed on counterfeit Android devices

Doctor Web reports that it has discovered backdoors in the system partition of budget Android device models that are counterfeit versions of famous brand-name models. These trojans target arbitrary code execution in the WhatsApp and WhatsApp Business messaging…

👍13😁2

6.87K views15:05

Android Security & Malware

apk-yara-checker - a CLI tool to check Yara rules against a folder of APK files
https://github.com/segura2010/apk-yara-checker

GitHub

GitHub - segura2010/apk-yara-checker: 'apk-yara-checker' is a little CLI tool written in Rust to check Yara rules against a folder…

'apk-yara-checker' is a little CLI tool written in Rust to check Yara rules against a folder of APK files. - segura2010/apk-yara-checker

👍11❤2🔥1

7.54K views06:37