Android Security & Malware

ZIP Exploitation: Critical Vulnerabilities Found in Popular Zip Libraries in Swift and Flutter
https://blog.ostorlab.co/zip-packages-exploitation.html

blog.ostorlab.co

Ostorlab: Mobile App Security Testing for Android and iOS

Recent in-depth investigations reveal serious vulnerabilities discovered in widely-used zip packages in Flutter and Swift, posing serious security risks for thousands of developers and applications. Our article delves into the technical aspects of these vulnerabilities…

👍10❤2

13K views13:19

👍 18 👎 3

Android Security & Malware

BLE spam but for adult toys
Using Flipper Zero or nRF Connect app, it is possible to send Bluetooth LE advertisement packets (without being paired) to adult toys in vicinity and make them all vibrate. It is also possible to start Denial of Pleasure by continuously broadcasting the stop packet
https://www.whid.ninja/blog/denial-of-pleasure-attacking-unusual-ble-targets-with-a-flipper-zero

WHID - We Hack In Disguise

Denial of Pleasure: Attacking Unusual BLE Targets with a Flipper Zero

Become familiar with developing applications for Flipper Zero, which will be capable of activating adult toys all at once or completely inhibit their use for those within your range (i.e. Denial of Pleasure Attack).

🤣37😁9👍7🔥1

9.76K views09:12

👍 35 👎

Android Security & Malware

Part 2: Usage of ispw, the Swiss Army Knife for iOS/MacOS security research
https://8ksec.io/ipsw-walkthrough-part-2-the-swiss-army-knife-for-ios-macos-security-research/

👍13

10.2K views10:29

👍 16 👎 1

Android Security & Malware

Fake Android and iOS apps steal SMS and contacts in South Korea
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/fake-android-and-ios-apps-steal-sms-and-contacts-in-south-korea/

McAfee Blog

Fake Android and iOS apps steal SMS and contacts in South Korea | McAfee Blog

Authored by Dexter Shin Most people have smartphones these days which can be used to easily search for various topics of interest on the Internet. These

👍9🤔1

9.39K views14:20

👍 21 👎

Android Security & Malware

Tablet for kids (Dragon Touch KidzPad Y88X) contains malware
https://www.eff.org/deeplinks/2023/11/low-budget-should-not-mean-high-risk-kids-tablet-came-preloaded-sketchyware

Electronic Frontier Foundation

Low Budget Should Not Mean High Risk: Kids' Tablet Came Preloaded with Sketchyware

It’s easy to get Android devices from online vendors like Amazon at different price points. Unfortunately, it is also easy to end up with an Android device with malware at these lower budgets. There

👍10😱5

10K views17:03

👍 18 👎

Android Security & Malware

Palera1n Jailbreak iOS 15.7.7 for Penetration Testing
https://medium.com/@jcngan97/palera1n-jailbreak-ios-15-7-7-for-penetration-testing-7645abd15724

Medium

Palera1n Jailbreak iOS 15.7.7 for Penetration Testing

While performing mobile application penetration testing, the app that you are testing might have a minimum OS version of iOS 15. With…

👍14❤2👎2👏1

14.2K views08:37

👍 31 👎

Android Security & Malware

Social engineering attacks lure Indian users to install Android banking trojans
https://www.microsoft.com/en-us/security/blog/2023/11/20/social-engineering-attacks-lure-indian-users-to-install-android-banking-trojans/

Microsoft Security Blog

Social engineering attacks lure Indian users to install Android banking trojans | Microsoft Security Blog

Mobile banking trojan campaigns targeting users in India impersonate legitimate orgs and steal users’ information for financial fraud scams.

🔥14👍4👏2👎1

10.1K views15:01

👍 26 👎

Android Security & Malware

Nothing Chats app, the Sunbird-based iMessage app, is a privacy nightmare with unencrypted messages and images
https://9to5google.com/2023/11/18/nothing-chats-sunbird-unencrypted-data-privacy-nightmare/

9to5Google

Nothing Chats, the Sunbird-based iMessage app, is a privacy nightmare with unencrypted messages and images

The Nothing Chats app, powered by Sunbird, promises encrypted iMessage for Android, but it's literally a privacy nightmare.

🔥9😁8👍1

10.8K views11:09

👍 17 👎 3

Android Security & Malware

Intercepting Flutter Based Application Traffic Using iptables
https://krushnalipane.medium.com/intercepting-flutter-based-application-traffic-using-iptables-da0f67064944

Medium

Intercepting Flutter Based Application Traffic Using iptables

Flutter, created by Google, has emerged as a popular open-source framework for building natively compiled applications for mobile, web, and desktop from a single codebase. However, with great power…

👍21❤4🔥2

11.1K views07:56

👍 29 👎 3

Android Security & Malware

NetHunter Hacker XI: Bluetooth arsenal
https://www.mobile-hacker.com/2023/11/28/nethunter-hacker-xi-bluetooth-arsenal/

Mobile Hacker

NetHunter Hacker XI: Bluetooth arsenal Mobile Hacker

Bluetooth technology has become an integral part of our daily lives, from connecting our smartphones to our cars and headphones to sharing files between devices. However, as with any wireless technology, Bluetooth is vulnerable to hacking attempts. In this…

👍17

10.2K views09:08

👍 31 👎 3

Android Security & Malware

Unveiling the Persisting Threat: Iranian Mobile Banking Malware Campaign Extends Its Reach
https://www.zimperium.com/blog/unveiling-the-persisting-threat-iranian-mobile-banking-malware-campaign-extends-its-reach

Zimperium

Iranian Mobile Banking Malware Campaign Threat Continues | Zimperium

true

👍13👏1

11.5K views08:33

👍 28 👎

Android Security & Malware

BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses allow certain man-in-the-middle attacks and live injection (CVE-2023-24023)
https://francozappa.github.io/post/2023/bluffs-ccs23/

Daniele Antonioli

BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses | Daniele Antonioli

Breaking and fixing the Bluetooth standard. One More Time.
Paper Slides Toolkit CVE-2023-24023 BT SIG note

👍15

9.07K views10:04

👍 24 👎 1

Android Security & Malware

Frida Labs: Series of challenges to learn Frida for Android
https://github.com/DERE-ad2001/Frida-Labs

GitHub

GitHub - DERE-ad2001/Frida-Labs: The repo contains a series of challenges for learning Frida for Android Exploitation.

The repo contains a series of challenges for learning Frida for Android Exploitation. - DERE-ad2001/Frida-Labs

👍23❤2