Android Security & Malware – Telegram

Android Security & Malware

@androidMalware

43.4K subscribers

134 photos

20 videos

7 files

2.77K links

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: [email protected]

Download Telegram

About

Blog

Apps

Platform

Android Security & Malware

43.4K subscribers

Android Security & Malware

Lucy’s Back: Ransomware Goes Mobile
https://research.checkpoint.com/2020/lucys-back-ransomware-goes-mobile/

Check Point Research

Lucy’s Back: Ransomware Goes Mobile - Check Point Research

Research by: Ohad Mana, Aviran Hazum, Bogdan Melnykov, Liav Kuperman Overview Ransomware attacks have been a part of the security landscape for a long time. We are familiar with infamous malware such as CryptoLocker, WannaCry and Ryuk, all of which have caused…

👍1

3.7K views14:55

Android Security & Malware

PhantomLance campaign analysis
https://securelist.com/apt-phantomlance/96772/

Hiding in plain sight: PhantomLance walks into a market

In July 2019, a sophisticated backdoor trojan in Google Play was reported. We conducted an inquiry of our own, discovering a long-term campaign, which we dubbed “PhantomLance”.

3.99K views16:15

Android Security & Malware

How to hook Android Native methods with Frida (Noob Friendly)
https://erev0s.com/blog/how-hook-android-native-methods-frida-noob-friendly/

How to hook Android Native methods with Frida (Noob Friendly)

Hooking C/C++ code in Android application using Frida with introduction and explainations in every step - noob friendly

4.24K views21:50

Android Security & Malware

Android IPC: Part 1 - Introduction
https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=46

3.97K views07:04

Android Security & Malware

Android IPC: Part 2 - Binder and Service Manager Perspective
https://blog.hacktivesecurity.com/index.php?controller=post&action=view&id_post=48

4.12K views07:04

Android Security & Malware

Cerberus distributed over company's MDM server
https://research.checkpoint.com/2020/first-seen-in-the-wild-mobile-as-attack-vector-using-mdm/

3.96K views06:40

Android Security & Malware

EventBot: A Android Banking Trojan analysis
https://www.cybereason.com/blog/eventbot-a-new-mobile-banking-trojan-is-born

EventBot: A New Mobile Banking Trojan is Born

The Cybereason Nocturnus team is investigating EventBot, a new type of Android mobile malware. EventBot abuses accessibility features to steal user data from financial applications, read user SMS messages, and steal SMS messages to allow the malware to bypass…

4.52K views07:51

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Stealing your SMS messages with iOS 0day

https://wojciechregula.blog/post/stealing-your-sms-messages-with-ios-0day/

wojciechregula.blog

Stealing your SMS messages with iOS 0day

This is a special post because I fully based on another researcher, s1guza’s 0day. All of this story began from the following tweet:
Siguza told us that his 0day was patched in the iOS 13.5 beta3. So this is actually a sandbox escape 0day for the newest,…

422 views12:49

Android Security & Malware

Popular Android malware threats - April, 2020
https://skptr.me/malware_timeline_2020.html
Samples: https://github.com/sk3ptre/AndroidMalware_2020

GitHub - sk3ptre/AndroidMalware_2020: Popular Android malware seen in 2020

Popular Android malware seen in 2020. Contribute to sk3ptre/AndroidMalware_2020 development by creating an account on GitHub.

3.85K views21:24

Android Security & Malware

Xiaomi Recording Millions Of People’s ‘Private’ Web And Phone Use
https://www.forbes.com/sites/thomasbrewster/2020/04/30/exclusive-warning-over-chinese-mobile-giant-xiaomi-recording-millions-of-peoples-private-web-and-phone-use

Exclusive: Warning Over Chinese Mobile Giant Xiaomi Recording Millions Of People’s ‘Private’ Web And Phone Use

Xiaomi is collecting users’ browser habits and phone usage, raising red flags for privacy researchers.

4.46K views10:42

Android Security & Malware

Forwarded from The Bug Bounty Hunter

AndroPyTool
A framework for automated extraction of static and dynamic features from Android applications

https://github.com/alexMyG/AndroPyTool#how-to-install

GitHub - alexMyG/AndroPyTool: A framework for automated extraction of static and dynamic features from Android applications

A framework for automated extraction of static and dynamic features from Android applications - alexMyG/AndroPyTool

460 views16:32

Android Security & Malware

Reverse engineering Flutter apps
Build process of Flutter applications and explain in detail how to reverse engineer the code
https://blog.tst.sh/reverse-engineering-flutter-apps-part-1/

Reverse engineering Flutter apps (Part 1)

Chapter 1: Down the rabbit hole

To start this journey I'll cover some backstory on the Flutter stack and how it works.

What you probably already know: Flutter was built from the ground up with its own render pipeline and widget library, allowing it to…

4.74K views16:49

Android Security & Malware

List of iOS applications related to COVID-19 with capabilities and permissions they request
https://github.com/ivRodriguezCA/Covid19-Mobile-Apps

GitHub - ivRodriguezCA/Covid19-Mobile-Apps: List of the most popular COVID10 mobile applications and the permissions they request.

List of the most popular COVID10 mobile applications and the permissions they request. - GitHub - ivRodriguezCA/Covid19-Mobile-Apps: List of the most popular COVID10 mobile applications and the per...

4.04K views08:09

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Android Application Penetration Testing / Bug Bounty Checklist

https://blog.softwaroid.com/2020/05/02/android-application-penetration-testing-bug-bounty-checklist/

457 views17:13

Android Security & Malware

Passionfruit NG: Runtime Application Instruments for iOS
https://github.com/ChiChou/Grapefruit

GitHub - ChiChou/grapefruit: (WIP) Runtime Mobile Application Pentest Tool for iOS and Android. Previously Passionfruit

(WIP) Runtime Mobile Application Pentest Tool for iOS and Android. Previously Passionfruit - ChiChou/grapefruit

7.97K views08:40

Android Security & Malware

Hacking/OSCP cheatsheet
https://ceso.github.io/posts/2020/04/hacking/oscp-cheatsheet/

4.85K views12:04

Android Security & Malware

30 Reverse Engineering Tips & Tricks
https://blog.vastart.dev/2020/04/guys-30-reverse-engineering-tips-tricks.html

👍1

4.2K views13:28

Android Security & Malware

Cheatsheets for all vulnerabilities
https://github.com/OWASP/CheatSheetSeries/tree/master/cheatsheets

CheatSheetSeries/cheatsheets at master · OWASP/CheatSheetSeries

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics. - OWASP/CheatSheetSeries

4.16K views06:12

Android Security & Malware

Android SLocker uses Coronavirus scare to lock smartphones
https://labs.bitdefender.com/2020/05/android-slocker-variant-uses-coronavirus-scare-to-take-android-hostage/

Bitdefender Labs

Android SLocker Variant Uses Coronavirus Scare to Take Android Hostage

The coronavirus pandemic is an opportunity for criminals who try to take advantage of people’s thirst for information. Unfortunately, Android users can fall prey to... #android #covid19 #ransomware

3.88K views06:30

Android Security & Malware

PENETRATION TESTING PRACTICE LAB - VULNERABLE APPS / SYSTEMS
https://www.amanhardikar.com/mindmaps/Practice.html

3.98K views07:57

Android Security & Malware

Reverse Engineering the Australian Government’s Coronavirus iOS app
https://medium.com/@wabz/reverse-engineering-the-australian-governments-coronavirus-ios-application-c08790e895e9

Reverse Engineering the Australian Government’s Coronavirus iOS application

On the 29th of March, the Australian Government launched an iOS application on the AppStore. It’s a pretty neat little app with lots of…

4.19K views10:45