Moqhao (Shaoye aka XLoader) malware operated by Yanbian group can bypass text-based CAPTCHAs #RoamingMantis
This feature is used in combination with brute-force attacks on wireless router’s web interfaces to compromise routers and perform DNS hijacking attacks.
https://www.telekom.com/en/blog/group/article/moqhao-masters-new-tricks-1031484
This feature is used in combination with brute-force attacks on wireless router’s web interfaces to compromise routers and perform DNS hijacking attacks.
https://www.telekom.com/en/blog/group/article/moqhao-masters-new-tricks-1031484
Telekom
Moqhao masters new tricks
News from the Moqhao malware family. It attacks Android smartphones and has now even learned to overcome CAPTCHA.
👍12😨2🤔1
How to intercept network trafic on Android
https://github.com/LabCIF-Tutorials/Tutorial-AndroidNetworkInterception
https://github.com/LabCIF-Tutorials/Tutorial-AndroidNetworkInterception
GitHub
GitHub - LabCIF-Tutorials/Tutorial-AndroidNetworkInterception: How to intercept network trafic on Android
How to intercept network trafic on Android. Contribute to LabCIF-Tutorials/Tutorial-AndroidNetworkInterception development by creating an account on GitHub.
👍19
Configuring an Android Phone for Pentesting
https://www.blackhillsinfosec.com/start-to-finish-configuring-an-android-phone-for-pentesting/
https://www.blackhillsinfosec.com/start-to-finish-configuring-an-android-phone-for-pentesting/
Black Hills Information Security, Inc.
Start to Finish: Configuring an Android Phone for Pentesting - Black Hills Information Security, Inc.
Jeff Barbi // *Guest Post Background Unless you’re pentesting mobile apps consistently, it’s easy for your methodologies to fall out of date. Each new version of Android brings with it […]
👍16
Pwning Pixel 6 with a leftover patch
https://github.blog/2023-04-06-pwning-pixel-6-with-a-leftover-patch/
https://github.blog/2023-04-06-pwning-pixel-6-with-a-leftover-patch/
The GitHub Blog
Pwning Pixel 6 with a leftover patch
In this post, I’ll look at a security-related change in version r40p0 of the Arm Mali driver that was AWOL in the January update of the Pixel bulletin, where other patches from r40p0 was applied, and how these two lines of changes can be exploited to gain…
👍7😁3❤1
iOS Penetration Testing Cheat Sheet
https://github.com/ivan-sincek/ios-penetration-testing-cheat-sheet
https://github.com/ivan-sincek/ios-penetration-testing-cheat-sheet
GitHub
GitHub - ivan-sincek/ios-penetration-testing-cheat-sheet: Work in progress...
Work in progress... Contribute to ivan-sincek/ios-penetration-testing-cheat-sheet development by creating an account on GitHub.
👍13❤4
Android Penetration Testing Cheat Sheet
https://github.com/ivan-sincek/android-penetration-testing-cheat-sheet
https://github.com/ivan-sincek/android-penetration-testing-cheat-sheet
GitHub
GitHub - ivan-sincek/android-penetration-testing-cheat-sheet: Work in progress...
Work in progress... Contribute to ivan-sincek/android-penetration-testing-cheat-sheet development by creating an account on GitHub.
👍14🥰2
How does an Android app phishes Facebook credentials of an user?
https://medium.com/@themalwarebug/how-does-an-android-app-phish-facebook-credentials-of-an-user-2533f9ef2738
https://medium.com/@themalwarebug/how-does-an-android-app-phish-facebook-credentials-of-an-user-2533f9ef2738
Medium
How does an android app phish Facebook credentials of an user?
Hey guys,I am back with another malware this time which was named Facestealer malware which targets Facebook users exfiltrating their…
👍12❤1👎1🤔1
Extensive look at the hardware, software and security implemented by the new Xiaomi scooter
https://robocoffee.de/?p=436
https://robocoffee.de/?p=436
👍8
PoC for CVE-2023-28206 where an iOS app may be able to execute arbitrary code with kernel privileges
https://support.apple.com/en-il/HT213720
https://support.apple.com/en-il/HT213720
Apple Support
About the security content of iOS 16.4.1 and iPadOS 16.4.1
This document describes the security content of iOS 16.4.1 and iPadOS 16.4.1.
👍10
Overview of Google Play threats sold on the dark web
https://securelist.com/google-play-threats-on-the-dark-web/109452/
https://securelist.com/google-play-threats-on-the-dark-web/109452/
Securelist
Google Play threat market: overview of the dark web offers
Kaspersky research into dark web offers related to Android malware and its distribution via Google Play: hacked app developer accounts, malicious loaders, etc.
👍14🤔3❤2
Goldoson: Privacy-invasive and Clicker Android Adware found in popular apps in South Korea
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/goldoson-privacy-invasive-and-clicker-android-adware-found-in-popular-apps-in-south-korea/
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/goldoson-privacy-invasive-and-clicker-android-adware-found-in-popular-apps-in-south-korea/
McAfee Blog
Goldoson: Privacy-invasive and Clicker Android Adware found in popular apps in South Korea | McAfee Blog
Authored by SangRyol Ryu McAfee’s Mobile Research Team discovered a software library we’ve named Goldoson, which collects lists of applications installed,
👍8👎1
Chameleon: A New Android Malware Spotted In The Wild
https://blog.cyble.com/2023/04/13/chameleon-a-new-android-malware-spotted-in-the-wild/
https://blog.cyble.com/2023/04/13/chameleon-a-new-android-malware-spotted-in-the-wild/
👍12🤔1
Kyocera Android printing app is vulnerable to improper intent handling and can be abused to drop malware (CVE-2023-25954)
https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2023-04-11.html
https://www.kyoceradocumentsolutions.com/en/our-business/security/information/2023-04-11.html
Kyoceradocumentsolutions
KYOCERA Mobile Print for Android Security Vulnerability | KYOCERA Document Solutions
Security information of Kyocera Document Solutions Inc.
👍9
Android Malware Analysis of Chameleon banking trojan
Part 1: https://n0psn0ps.github.io/2023/03/02/android-malware-analysis-series-ato.apk-part-3.1/
Part 2: https://n0psn0ps.github.io/2023/04/13/android-malware-analysis-series-ato.apk-part-3.2/
Part 1: https://n0psn0ps.github.io/2023/03/02/android-malware-analysis-series-ato.apk-part-3.1/
Part 2: https://n0psn0ps.github.io/2023/04/13/android-malware-analysis-series-ato.apk-part-3.2/
n0ps
Android Malware Analysis Series - ATO.apk - Part 3.1
Permanent dark(er) theme for Poole
👍16
Uncovering Security Vulnerabilities in Smart Ray-Ban Sunglasses
https://code-byter.com/2023/04/16/rayban-hacking.html
https://code-byter.com/2023/04/16/rayban-hacking.html
👍9
Getting root on an Android 12 emulated device with Google Services
https://markuta.com/rooted-android-12-emulator/
https://markuta.com/rooted-android-12-emulator/
Markuta
Getting root on an Android 12 emulated device with Google Services
A short blog on how to get root on an emulated device running Android 12 with rootAVD.
👍8❤3💯2🔥1
Mobile Exploitation, the past, present, and future [slides]
https://github.com/externalist/presentations/blob/master/2023%20Zer0con/Mobile%20Exploitation%2C%20the%20past%2C%20present%2C%20and%20future.pdf
https://github.com/externalist/presentations/blob/master/2023%20Zer0con/Mobile%20Exploitation%2C%20the%20past%2C%20present%2C%20and%20future.pdf
GitHub
presentations/2023 Zer0con/Mobile Exploitation, the past, present, and future.pdf at master · externalist/presentations
Some presentations I did in the past. Contribute to externalist/presentations development by creating an account on GitHub.
👍8
A Nexi phishing campaign spread malicious app via official Google Play Store
https://www.d3lab.net/a-nexi-phishing-campaign-spread-malicious-app-via-official-google-play-store/
https://www.d3lab.net/a-nexi-phishing-campaign-spread-malicious-app-via-official-google-play-store/
D3Lab
A Nexi phishing campaign spread malicious App via official Google Play Store
A malicious application present in the official Google Play Store was spread through a Italian Nexi Phishing campaign. The intent was to capture 2FA tokens.
👍10🔥2🤔2❤1
Attacking McAfee VPN Android App
https://blog.scrt.ch/2023/03/29/attacking-android-antivirus-applications/
https://blog.scrt.ch/2023/03/29/attacking-android-antivirus-applications/
👍7
How to unpack protected Android APK with Frida
Tutorial: https://youtu.be/PLX8_z0EmGw
Scripts: https://github.com/fatalSec/unpacking-APK
Tutorial: https://youtu.be/PLX8_z0EmGw
Scripts: https://github.com/fatalSec/unpacking-APK
YouTube
How to Unpack Protected Android APK with Frida
#androidpentest #dexdump #frida #apkunpacking #memdump
In this video we unpacked an APK file named AntiSplit-G2. All the classes in this application are protected using some kind of protector and the classes gets extracted into the memory as a de file by…
In this video we unpacked an APK file named AntiSplit-G2. All the classes in this application are protected using some kind of protector and the classes gets extracted into the memory as a de file by…
👍12❤4