Android Security & Malware

Introducing the new Mobile App Security Weakness Enumeration (MASWE).
This brand new OWASP MAS resource bridges the gap between MASVS high-level controls and MASTG low-level testing, using a similar approach to CWEs.
https://mas.owasp.org/news/2024/07/30/new-maswe/

👍5🌚3

8.14K views19:04

👍 21 👎

New Fileless Malware Framework "GhostHook" Targets Android Devices
https://iverify.io/post/new-fileless-malware-framework-ghosthook-targets-android-devices

iverify.io

New Fileless Malware Framework "GhostHook" Targets Android Devices

iVerify have detected a new fileless malware spreading framework, GhostHook, being shared across cybercrime forums and networks.

👍8🌚3👻3🔥2❤1

8.52K views05:52

👍 15 👎 2

Android Security & Malware

BlankBot - a new Android banking trojan with screen recording, keylogging and remote control capabilities
https://intel471.com/blog/blankbot-a-new-android-banking-trojan-with-screen-recording-keylogging-and-remote-control-capabilities

👍10❤3👏3

9.07K views16:50

👍 21 👎 1

Android Security & Malware

Heap overflow in JPEG loading in Samsung's Little Kernel in bootloader allows a privileged attacker to execute persistent arbitrary code (it survives reboots and factory reset) CVE-2024-20832
Paper: https://www.sstic.org/media/SSTIC2024/SSTIC-actes/when_vendor1_meets_vendor2_the_story_of_a_small_bu/SSTIC2024-Article-when_vendor1_meets_vendor2_the_story_of_a_small_bug_chain-rossi-bellom_neveu.pdf
Slides: https://www.sstic.org/media/SSTIC2024/SSTIC-actes/when_vendor1_meets_vendor2_the_story_of_a_small_bu/SSTIC2024-Slides-when_vendor1_meets_vendor2_the_story_of_a_small_bug_chain-rossi-bellom_neveu.pdf

🗿9🌚3👍2❤1

9.41K views10:47

👍 18 👎 5

Android Security & Malware

LianSpy: new Android spyware targeting Russian users
https://securelist.com/lianspy-android-spyware/113253/

Securelist

LianSpy: Android spyware leveraging Yandex Disk as C2

Previously unknown spyware LianSpy targets Android devices by exploiting root privileges to steal data and leveraging Yandex Disk cloud service as C2.

💩8🌚5👍3🥱3

10.2K views13:38

👍 14 👎 1

Android Security & Malware

Google fixed Kernel RCE vulnerability in Android (CVE-2024-36971) that was most-likely used for targeted exploitation
https://source.android.com/docs/security/bulletin/2024-08-01

🤡13🌚4❤1

9.84K views07:31

👍 23 👎 2

Android Security & Malware

5GBaseChecker: a security analysis framework that helps to hunt for 5G vulnerabilities
https://github.com/SyNSec-den/5GBaseChecker

GitHub

GitHub - SyNSec-den/5GBaseChecker

Contribute to SyNSec-den/5GBaseChecker development by creating an account on GitHub.

👍10👌3❤2👏2🌚1

9.92K views07:09

👍 10 👎

Android Security & Malware

The Way to Android Root: Exploiting Your GPU On Smartphone (CVE-2024-23380)
[slides] https://i.blackhat.com/BH-US-24/Presentations/REVISED_US24-Gong-The-Way-to-Android-Root-Wednesday.pdf

👍11😱2🔥1👏1🌚1

10.6K views08:18

👍 13 👎

Android Security & Malware

Dynamic Analysis Technique of Android Malware by Injecting Smali Gadgets
Patch APK with logcat output as alternative to using Frida
https://blogs.jpcert.or.jp/en/2024/08/smaligadget.html

JPCERT/CC Eyes

Dynamic Analysis Technique of Android Malware by Injecting Smali Gadgets - JPCERT/CC Eyes

When dynamically analyzing Android malware, it is currently difficult to follow its code using debuggers unlike Windows malware. Although there is a technique [1] to hook a method dynamically by Frida [2], obtaining the in-progress state of the method is...

🤡11🤣9❤8👍6💩6🌚2

11.9K views11:15

👍 25 👎 4

Android Security & Malware

Android Game Hacking: Increase money in Dude Theft Wars Shooting
https://8ksec.io/hacking-android-games/

8kSec - 8kSec is a cybersecurity research & training company. We provide high-quality training & consulting services.

Hacking Android Games - 8kSec

Learn the process involved in hacking Android games and learn how to distinguish between app hacking and game hacking within the Android ecosystem.

🔥17👍2