Uncover the intricate web of the Konfety ad fraud operation spreading through 'evil twin' apps, exposing malicious tactics and deceptive practices in the mobile advertising realm.

Our data shows a pattern of APK malware bundled as BadPack files. We discuss how this technique is used to garble malicious Android files, creating challenges for analysts.

ESET researchers discovered a zero-day Telegram for Android exploit that allows sending malicious files disguised as videos.

Injecting and Exploiting Synthetic Remote Vulnerabilities to explore Signal-iOS and WebRTC

It’s another average Friday morning and my iPhone shows 705 unread Signal messages. Signal has not completely supplanted my use of iMessage, but it does dominate communications…

Exploiting this trick can easily mislead non-tech-savvy users into installing a malicious app that impersonates a PDF document. The trick lies in manipulating the file extension within the WhatsApp Messenger using API interface.

ESET research reveals how the success of Hamster Kombats has attracted malicious actors trying to abuse interest in the game for monetary gain.

In previous series of blogs I focused on installation of Kali NetHunter on older model of TicWatch Pro 2018 (catfish) which might be for some of you a good choice if you already have them forgotten in your drawer or you can get them cheap to play around.…

true

Mandrake spyware threat actors resume attacks with new functionality targeting Android devices while being publicly available on Google Play

Group-IB's investigation on a malware sample targeting a Malaysia-based financial organization's clients in the Asia-Pacific region.

BlueStacks privilege escalation through VM backdooring - mmiszczyk/CVE-2024-33352

Contribute to GhidraEnjoyr/iOS-Reverse-Engineering development by creating an account on GitHub.

### Impact
_What kind of vulnerability is it? Who is impacted?_

An open redirect vulnerability exist in MobSF authentication view.

PoC
1. Go to https://127.0.0.1:8000/login/?next=//afine.co...

Discover the new android RAT BingoMod, identified by the Cleafy TIR team in May 2024. BingoMod targets money transfers via Account Takeover and On-Device Fraud, bypassing bank security measures. It exploits permissions to steal credentials, conduct overlay…

iVerify have detected a new fileless malware spreading framework, GhostHook, being shared across cybercrime forums and networks.

Previously unknown spyware LianSpy targets Android devices by exploiting root privileges to steal data and leveraging Yandex Disk cloud service as C2.