Android Security & Malware – Telegram

Android Security & Malware

@androidMalware

43.8K subscribers

134 photos

20 videos

7 files

2.73K links

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: [email protected]

Download Telegram

About

Blog

Apps

Platform

Android Security & Malware

43.8K subscribers

Android Security & Malware

SiriSpy - iOS bug allowed apps to eavesdrop on your conversations with Siri (CVE-2022-32946 - $7000 bounty)
"Any app with access to Bluetooth could record your conversations with Siri and audio from the iOS keyboard dictation feature when using AirPods or Beats headsets."
https://rambo.codes/posts/2022-10-25-sirispy-ios-bug-allowed-apps-to-eavesdrop

SiriSpy - iOS bug allowed apps to eavesdrop on your conversations with Siri | Rambo Codes

Gui Rambo writes about his coding and reverse engineering adventures.

👍11❤1

6.18K views11:09

Android Security & Malware

In Android Authority poll, 19.72% out of 3,300 voters stated their Android is rooted
https://www.androidauthority.com/android-phone-rooted-poll-results-3225345/

Android Authority

We asked, you told us: Your Android phone definitely isn't rooted

There are many reasons to root your Android phone, but it turns out that most polled readers don't have a rooted daily driver.

👍6🥰3

6.67K views12:03

Android Security & Malware

Is your Android smartphone rooted?

Anonymous Poll

🤡49👌8👍2

1.06K voters7.03K views12:09

Android Security & Malware

Analysis of ERMAC 2.0: Evades MFA to Steal Banking Credentials of Over 400 Android Apps
https://quointelligence.eu/2022/10/new-ermac-2-0/

QuoIntelligence

ERMAC 2.0 Evades MFA to Steal Banking Credentials of Over 400 Android Apps

New ERMAC (2.0) Evades MFA to Steal Banking Credentials of Over 400 Android Apps, Android trojans continue to proliferate and evolve.

👍11👌4❤1

7.45K views10:13

Android Security & Malware

Malware wars: the attack of the droppers (Sharkbot, Vultur)
https://www.threatfabric.com/blogs/the-attack-of-the-droppers.html

Malware wars: the attack of the droppers

ThreatFabric’s analysts discovered multiple new droppers on Google Play Store distributing banking Trojans.

👍10🕊5

7.92K views07:40

Android Security & Malware

A TECHNICAL ANALYSIS OF PEGASUS FOR ANDROID – PART 3
https://cybergeeks.tech/a-technical-analysis-of-pegasus-for-android-part-3/

👍8

6.91K views20:31

Android Security & Malware

A vulnerability in the Galaxy Store allows attackers through an XSS to cause the store to install and launch an application
https://ssd-disclosure.com/ssd-advisory-galaxy-store-applications-installation-launching-without-user-interaction/

SSD Secure Disclosure

SSD Advisory – Galaxy Store Applications Installation/Launching without User Interaction - SSD Secure Disclosure

A vulnerability in the Galaxy Store allows attackers through an XSS to cause the store to install and/or launch an application, allowing remote attackers to trigger a remote command execution in the phone.

👍18

6.32K views21:08

Android Security & Malware

Drinik Android Malware Returns With Advanced Capabilities Targeting Indian Taxpayers
https://blog.cyble.com/2022/10/27/drinik-malware-returns-with-advanced-capabilities-targeting-indian-taxpayers/

👍9🔥3

6.09K views08:01

Android Security & Malware

New SandStrike spyware infects Android devices via malicious VPN app
https://www.bleepingcomputer.com/news/security/new-sandstrike-spyware-infects-android-devices-via-malicious-vpn-app/

BleepingComputer

New SandStrike spyware infects Android devices via malicious VPN app

Threat actors are using a newly discovered spyware known as SandStrike and delivered via a malicious VPN application to target Persian-speaking Android users.

👍11😢3

6.98K views08:51

Android Security & Malware

Malware on the Google Play store leads to harmful phishing sites
https://www.malwarebytes.com/blog/news/2022/11/malware-on-the-google-play-store-leads-to-harmful-phishing-sites

Malware on the Google Play store leads to harmful phishing sites

A family of malicious apps from developer Mobile apps Group are on Google Play infected with HiddenAds.

👍17

7.56K views12:03

Android Security & Malware

Pixel 6 bootloader: Emulation, ROP (part 2)
https://eshard.com/posts/pixel6bootloader-2

👍10😁1

7.78K views17:36

Android Security & Malware

Analysis of SOVA Android Banking Trojan
https://kratikal.com/blog/sova-a-new-android-banking-trojan/

👍11👎1

8.33K views22:15

Android Security & Malware

A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain
https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html

projectzero.google

A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain - Project Zero

Posted by Maddie Stone, Project Zero Note: The three vulnerabilities discussed in this blog were all fixed in Samsung’s March 2021 release. They were...

❤18👍4

8.29K views19:15

Android Security & Malware

Massive Phishing Campaigns Target India Banks’ Clients
https://www.trendmicro.com/en_us/research/22/k/massive-phishing-campaigns-target-india-banks-clients.html

Massive Phishing Campaigns Target India Banks’ Clients

👍11

6.62K views16:22

Android Security & Malware

Vulnerability affecting seemingly all Google Pixel phones allows to bypass lock screen protection (Bounty: $70K, CVE-2022-20465)
https://bugs.xdavidhu.me/google/2022/11/10/accidental-70k-google-pixel-lock-screen-bypass/

bugs.xdavidhu.me

Accidental $70k Google Pixel Lock Screen Bypass

David Schütz's bug bounty writeups

👍21🤯7😐7

7.06K views17:55

Android Security & Malware

Lookout Discovers Long-running Surveillance Campaigns Targeting Uyghurs
https://www.lookout.com/blog/uyghur-surveillance-campaign-badbazaar-moonshine

Lookout Discovers Surveillance Campaigns Targeting Uyghurs | Threat Intel

Researchers from Lookout have uncovered two new surveillance campaigns, BadBazaar and MOONSHINE, targeting Uyghurs in the People’s Republic of China and abroad.

😐8👍4😢4🌭1

6.64K views07:54

Android Security & Malware

Discovering vendor-specific vulnerabilities in Android
https://blog.oversecured.com/Discovering-vendor-specific-vulnerabilities-in-Android/

News, Techniques & Guides

Discovering vendor-specific vulnerabilities in Android

For several years, Oversecured has been the best way to discover vulnerabilities in Android and iOS mobile apps.

👍13

11.5K views09:26

Android Security & Malware

Appshark - static analysis platform to scan vulnerabilities in an Android app
https://github.com/bytedance/appshark

GitHub - bytedance/appshark: Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app. - bytedance/appshark

👍16

6.57K views08:24

Android Security & Malware

Can you exploit the app? New Android uncrackable challenge
https://github.com/Ch0pin/uncrackable

GitHub - Ch0pin/uncrackable: A list of bizarre crackmes

A list of bizarre crackmes. Contribute to Ch0pin/uncrackable development by creating an account on GitHub.

👍12

11K views10:26

Android Security & Malware

Xenomorph Android banking malware found on Google Play with over 1,000 installs
https://www.zscaler.com/blogs/security-research/rise-banking-trojan-dropper-google-play-0

Rise of Banking Trojan Dropper in Google Play | Zscaler

The Zscaler ThreatLabz team has recently discovered the Xenomorph banking trojan embedded in a Lifestyle app in the Google Play store. Read more.

👍8🤯1

6.93K views11:15

Android Security & Malware

Phishing Campaign Targeting Indonesian BRI Bank Using SMS Stealer
https://blog.cyble.com/2022/11/15/phishing-campaign-targeting-indonesian-bri-bank-using-sms-stealer

SMS Stealer Phishing Campaign Hits Indonesia's BRI Bank

Cyble Research & Intelligence Labs analyzes an active phishing campaign targeting Indonesian BRI bank using Android SMS Stealer.

👍13😱1

8.3K views11:59