Android Security & Malware

Spyware vendors use 0-days and n-days against Android and iOS
https://blog.google/threat-analysis-group/spyware-vendors-use-0-days-and-n-days-against-popular-platforms/

Google

Spyware vendors use 0-days and n-days against popular platforms

Google’s Threat Analysis Group (TAG) tracks actors involved in information operations (IO), government backed attacks and financially motivated abuse. For years, TAG has…

👍8🤔2👏1

8.33K views13:39

👍 28 👎 2

Android Security & Malware

Android GoatRAT Banker Attacks Automated Payment Systems
https://labs.k7computing.com/index.php/goatrat-attacks-automated-payment-systems/

K7 Labs

GoatRAT Attacks Automated Payment Systems

Recently, we came across a detection in our telemetry report named “com.goatmw” which gained our attention. We decided to investigate […]

👍9❤2😁2

8.46K views15:02

👍 22 👎 2

Android Security & Malware

MacStealer: Wi-Fi Client Isolation Bypass
MacStealer can test Wi-Fi networks for client isolation bypasses (CVE-2022-47522) to intercept (steal) traffic toward other clients at the MAC layer
https://github.com/vanhoefm/macstealer

GitHub

GitHub - vanhoefm/macstealer: MacStealer: Wi-Fi Client Isolation Bypass

MacStealer: Wi-Fi Client Isolation Bypass. Contribute to vanhoefm/macstealer development by creating an account on GitHub.

👍12❤3🔥2

8.81K views08:58

👍 19 👎 1

Android Security & Malware

Mobile Pentesting 101 – How to set up your Android Environment
https://securitycafe.ro/2023/04/03/mobile-pentesting-101-how-to-set-up-your-android-environment/

Security Café

Mobile Pentesting 101 – How to set up your Android Environment

This article gives an idea about how your Android pentesting environment should look like. What tools should I use? Do I really need a physical device? Do I need a rooted device to pentest an appli…

👍16❤1👎1

12.1K views07:21

👍 35 👎 2

Android Security & Malware

Android Parcels: Introducing Android's Safer Parcel
https://youtu.be/qIzMKfOmIAA

YouTube

Android Parcels: The Bad, the Good and the Better - Introducing Android's Safer Parcel

Parcel is the serialization mechanism in Android and is behind almost every OS cross-process interaction. Parcelable implementations have been the source of vulnerabilities in Android for ~8 years, often rated high severity and weaponized by malware authors…

👍13❤1

6.56K views06:18

👍 10 👎 1

Android Security & Malware

Set Up an Android Hacking Lab for $0
https://www.trustedsec.com/blog/set-up-an-android-hacking-lab-for-0/

TrustedSec

Set Up an Android Hacking Lab for $0

Prerequisites: Python3 - https://www.python.org/downloads/ Android Studio - https://developer.android.com/studio Android Platform-Tools -…

👍22

10.9K views11:52

Android Security & Malware

Moqhao (Shaoye aka XLoader) malware operated by Yanbian group can bypass text-based CAPTCHAs #RoamingMantis
This feature is used in combination with brute-force attacks on wireless router’s web interfaces to compromise routers and perform DNS hijacking attacks.
https://www.telekom.com/en/blog/group/article/moqhao-masters-new-tricks-1031484

Telekom

Moqhao masters new tricks

News from the Moqhao malware family. It attacks Android smartphones and has now even learned to overcome CAPTCHA.

👍12😨2🤔1

6.53K views12:46

👍 14 👎 1

Android Security & Malware

How to intercept network trafic on Android
https://github.com/LabCIF-Tutorials/Tutorial-AndroidNetworkInterception

GitHub

GitHub - LabCIF-Tutorials/Tutorial-AndroidNetworkInterception: How to intercept network trafic on Android

How to intercept network trafic on Android. Contribute to LabCIF-Tutorials/Tutorial-AndroidNetworkInterception development by creating an account on GitHub.

👍19