How to Reverse Engineer an iOS App and macOS Software
https://www.apriorit.com/dev-blog/363-how-to-reverse-engineer-os-x-and-ios-software
https://www.apriorit.com/dev-blog/363-how-to-reverse-engineer-os-x-and-ios-software
Apriorit
How to Reverse Engineer an iOS App - Apriorit
Learn how to reverse engineer an iOS app, break down its components, and understand functionality without source code access for debugging or maintenance.
Checkrain fake iOS jailbreak leads to click fraud
https://blog.talosintelligence.com/2019/10/checkrain-click-fraud.html
https://blog.talosintelligence.com/2019/10/checkrain-click-fraud.html
Cisco Talos Blog
Checkrain fake iOS jailbreak leads to click fraud
By Warren Mercer and Paul Rascagneres.
Introduction
Attackers are capitalizing on the recent discovery of a new vulnerability that exists across legacy iOS hardware. Cisco Talos recently discovered a malicious actor using a fake website that claims to give…
Introduction
Attackers are capitalizing on the recent discovery of a new vulnerability that exists across legacy iOS hardware. Cisco Talos recently discovered a malicious actor using a fake website that claims to give…
Fake Antivirus on Google Play with 1,000+ installs
https://twitter.com/ReBensk/status/1184830278532882433?s=19
https://twitter.com/ReBensk/status/1184830278532882433?s=19
Twitter
Re-ind
Fake-AV Found on Google Play 1,000+ Installs https://t.co/oqDiHtfhQy
Subscription scams found on Google Play
26 apps with 8,000,000+ installs
https://twitter.com/fs0c131y/status/1184447437781557248?s=19
26 apps with 8,000,000+ installs
https://twitter.com/fs0c131y/status/1184447437781557248?s=19
Twitter
Elliot Alderson
The scammers behind this app have released 26 apps, under 3 different names, with a total of over 8,000,000 downloads. @GooglePlay: It's time to do something! Developer accounts: - https://t.co/xn8ExycwM9 - https://t.co/9IoddRqg6u - https://t.co/YSh1jEKS0y…
Clicker for Android subscribes users to paid services #Joker #Malware
https://news.drweb.com/show/?i=13464&lng=en
https://news.drweb.com/show/?i=13464&lng=en
Dr.Web
Clicker for Android subscribes users to paid services
Doctor Web has detected a clicker trojan that can automatically subscribe users to paid services in the official Android app store.
Hiddad app found on Google Play 100,000+ Installs
https://twitter.com/ReBensk/status/1185065215416623104
https://twitter.com/ReBensk/status/1185065215416623104
Twitter
Re-ind
Hiddad app found on Google Play 100,000+ Installs Display Ads with full screen https://t.co/WFf61QP9Ww
UC Browser downloaded a third-party app store over unsecured channels
https://www.zscaler.com/blogs/research/uc-browser-app-abuses-may-have-exposed-500-million-users
https://www.zscaler.com/blogs/research/uc-browser-app-abuses-may-have-exposed-500-million-users
Zscaler
UC Browser app abuses and exposed 500 million users | Blog
As we began to analyze the UC Browser app, we found requests were being made to download an additional APK over an unsecured channel.
HiddenApp found on Google Play with 500,000+ installs
https://twitter.com/ReBensk/status/1185188429518139392?s=19
https://twitter.com/ReBensk/status/1185188429518139392?s=19
Twitter
Re-ind
Hiddad app Packed with Jiagu packer found on Google Play 500,000+ Installs after install hides it's icon from the App Drawer and running in the background. https://t.co/0cPl31uuhN
Joker Trojan found on Google Play
Three apps with 20,000+ installs
https://twitter.com/ReBensk/status/1186227496460513280
Three apps with 20,000+ installs
https://twitter.com/ReBensk/status/1186227496460513280
Twitter
Re-ind
Three Joker app's found on Google Play: https://t.co/apqhtPsAcp https://t.co/QZgD6Yj6Nt https://t.co/UBXuVj4nW3
More Joker Trojans on Google Play
8 apps with 196,000+ installs
https://twitter.com/m0br3v/status/1186277973923696641
https://twitter.com/sh1shk0va/status/1186291616769814529
8 apps with 196,000+ installs
https://twitter.com/m0br3v/status/1186277973923696641
https://twitter.com/sh1shk0va/status/1186291616769814529
Twitter
I.Zhilyakov
And more #joker samples: com.billiards.wallpapers - October 18, 2019, 10,000+ com.peculiarwallpaper.wpshow - October 15, 2019, 50,000+ com[.de.sourceforge.opencamera - October 16, 2019, 10,000+ com.zima.latest.gamelist - October 15, 2019, 100,000+ #malware…
Remove Snaptube app, based on the research it's adfraud
https://www.upstreamsystems.com/secure-d-uncovers-non-human-clicks-subscriptions-popular-android-app-snaptube/
https://www.upstreamsystems.com/secure-d-uncovers-non-human-clicks-subscriptions-popular-android-app-snaptube/
Upstream
Secure-D uncovers non-human clicks and subscriptions from popular Android app Snaptube - Upstream
Fake Swisscom CSIRT app luring credentials found on Google Play
https://twitter.com/swisscom_csirt/status/1186528018740793344
https://twitter.com/swisscom_csirt/status/1186528018740793344
Twitter
Swisscom CSIRT
Neue Fake Bluewin App ist im Google Play Store aufgetaucht. Bitte nicht installieren und auf keinen Fall Zugangsdaten eingeben. Auftrag zur Entfernung ist bereits unterwegs. #staysafe #bluewin ^Mike
Joker Trojan found on Google Play
Joker misuses notificaiton access to steal received SMS containing verification codes to subscribe for services
Found: 29 apps with 280,000+ installs
https://blog.trendmicro.com/trendlabs-security-intelligence/fake-photo-beautification-apps-on-google-play-can-read-sms-verification-code-to-trigger-wireless-application-protocol-wap-carrier-billing/
Joker misuses notificaiton access to steal received SMS containing verification codes to subscribe for services
Found: 29 apps with 280,000+ installs
https://blog.trendmicro.com/trendlabs-security-intelligence/fake-photo-beautification-apps-on-google-play-can-read-sms-verification-code-to-trigger-wireless-application-protocol-wap-carrier-billing/
Trend Micro
Adware Apps Seen With Optimized Evasion Features
We found 49 new adware apps on the Google Play Store, disguised as games and stylized cameras. Before they were taken down, the total number of downloads for these apps was more than 3 million.
New Android Banking Trojan Family - Gnip
https://twitter.com/sh1shk0va/status/1186968376930897926
https://twitter.com/sh1shk0va/status/1186968376930897926
Twitter
Tatyana Shishkova
New Android banking Trojan family #Ginp targeting Spain 🇪🇸 and UK 🇬🇧. Latest versions imitate Adobe Flash Player and decrypt payload from assets. Abuses Accessibility Service, sets itself as default SMS app, gets phishing injects from C&C server. (1/2)
Tracking down the developer of Android adware affecting millions of users #OSINT
42 Android adware apps on Google Play with 8,000,000+ installs
https://www.welivesecurity.com/2019/10/24/tracking-down-developer-android-adware/
42 Android adware apps on Google Play with 8,000,000+ installs
https://www.welivesecurity.com/2019/10/24/tracking-down-developer-android-adware/
WeLiveSecurity
Tracking down the developer of Android adware affecting millions of users
ESET researchers have uncovered 42 popular adware-laced Android apps in Google Play and tracked down the rogue developer.
Discovered 17 apps on the Apple App Store that are infected with clicker Trojan malware
https://www.wandera.com/mobile-security/ios-trojan-malware/
https://www.wandera.com/mobile-security/ios-trojan-malware/
Jamf
Trojan malware infecting 17 apps on the App Store
Wandera’s threat research team has discovered 17 apps on the Apple App Store that are infected with clicker trojan malware.
NFC Beaming could bypass “install unknown application” prompt to install apps on Android 8 and higher - CVE-2019-2114
https://wwws.nightwatchcybersecurity.com/2019/10/24/nfc-beaming-bypasses-security-controls-in-android-cve-2019-2114/
https://wwws.nightwatchcybersecurity.com/2019/10/24/nfc-beaming-bypasses-security-controls-in-android-cve-2019-2114/
Nightwatch Cybersecurity
NFC Beaming Bypasses Security Controls in Android [CVE-2019-2114]
Summary NFC beaming of applications between devices using Android OS bypasses some security controls (the “install unknown application” prompt). A rogue device like a payment terminal c…
ANDROID HACKING WITH TERMUX
How to setup and install all the necessary tools
https://dotweak.com/2019/10/12/android-hacking-with-termux-QldEN2RLSU9rc2VOZUJjREEzeWlSdz09
How to setup and install all the necessary tools
https://dotweak.com/2019/10/12/android-hacking-with-termux-QldEN2RLSU9rc2VOZUJjREEzeWlSdz09
❤1
Mobile Malware and APT Espionage: Prolific, Pervasive, and Cross-Platform
https://threatvector.cylance.com/en_us/home/mobile-malware-and-apt-espionage-prolific-pervasive-and-cross-platform.html
https://threatvector.cylance.com/en_us/home/mobile-malware-and-apt-espionage-prolific-pervasive-and-cross-platform.html
Four Joker Trojans found on Google Play with 16,000+ installs
https://twitter.com/sh1shk0va/status/1188754354779672576
https://twitter.com/sh1shk0va/status/1188754354779672576
Twitter
Tatyana Shishkova
#Joker Trojans are appearing on Google Play almost every day. More fake apps added on Oct 26 and still available: https://t.co/2QtrVAooXh https://t.co/0WAMRGjy6t https://t.co/rCLbI9vQVA https://t.co/CnwFbokLV7