Android Security & Malware
@androidMalware
44.5K subscribers
136 photos
22 videos
7 files
2.9K links
Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com
Download Telegram
About
Blog
Apps
Platform
Join
Android Security & Malware
44.5K subscribers
Android Security & Malware
Analysis of Cerberus banking Trojan distributed over phishing websites (Amazon and NetBank)
https://labs.k7computing.com/?p=20468
K7 Labs
Mal Campaign Targets Android users - K7 Labs
Covid-19 pandemic has changed people’s behaviour significantly. Be it maintaining social distance, washing their hands more frequently, more of online […]
3.48K views
👍 9👎 1💬
Android Security & Malware
Analysis of Android Medical Malware, by Cryptax
https://youtu.be/n4YPM53igdw
YouTube
(EN) Medical Malware on Android analysis, by Cryptax - SecSea 2020
(Links and docs below) Last but not least, Cryptax introduce us a full analysis of a medical malware on Android, with a step by step retroengineering and examination of an app!

This is the last conference we have for you this year... but do not be sad. We'll…
3.88K views
👍 9👎 1💬
Android Security & Malware
BitterAPT Revisited: the Untold Evolution of an Android Espionage Tool
https://www.bitdefender.com/files/News/CaseStudies/study/352/Bitdefender-PR-Whitepaper-BitterAPT-creat4571-en-EN-GenericUse.pdf
4.18K views
👍 7👎💬
Android Security & Malware
FridaLoader: Auto-downloads the Frida server based off the architecture of the device/emulator
https://github.com/dineshshetty/FridaLoader
GitHub
GitHub - dineshshetty/FridaLoader: A quick and dirty app to download and launch Frida on Genymotion and rooted Physical Android…
A quick and dirty app to download and launch Frida on Genymotion and rooted Physical Android Devices - dineshshetty/FridaLoader
👍1
4.66K views
👍 17👎 2💬
Android Security & Malware
COVIDSafe-CVE-2020-12856: A silent pairing issue in bluetooth-based contact tracing apps
https://github.com/alwentiu/COVIDSafe-CVE-2020-12856
GitHub
GitHub - alwentiu/COVIDSafe-CVE-2020-12856: A bluetooth-related vulnerability in some contact tracing apps
A bluetooth-related vulnerability in some contact tracing apps - alwentiu/COVIDSafe-CVE-2020-12856
4.03K views
👍 14👎💬
Android Security & Malware
Forwarded from The Bug Bounty Hunter
Reverse Engineering Snapchat (Part II): Debofuscating the Undeobfuscatable

https://hot3eed.github.io/2020/06/22/snap_p2_deobfuscation.html
786 views
Android Security & Malware
Collection of writeups, cheatsheets, videos, related to Android Pentesting
https://github.com/jdonsec/AllThingsAndroid
GitHub
GitHub - jdonsec/AllThingsAndroid: A Collection of Android Pentest Learning Materials
A Collection of Android Pentest Learning Materials - jdonsec/AllThingsAndroid
4.34K views
👍 17👎💬
Android Security & Malware
Moroccan Journalist Targeted With Network Injection Attacks Using NSO Group’s Tools #iPhone
https://www.amnesty.org/en/latest/research/2020/06/moroccan-journalist-targeted-with-network-injection-attacks-using-nso-groups-tools/
Amnesty International
Moroccan Journalist Targeted With Network Injection Attacks Using NSO Group’s Tools
In October 2019 Amnesty International published a first report on the use of spyware produced by Israeli company NSO Group against Moroccan human rights defenders Maati Monjib and Abdessadak El Bouchattaoui. Through our continued investigation, Amnesty International’s…
3.9K views
👍 7👎💬
Android Security & Malware
Let's Reverse Engineer an Android App!
Beginners guide
https://yasoob.me/posts/reverse-engineering-android-apps-apktool/
yasoob.me
Let's Reverse Engineer an Android App! - Yasoob Khalid
I had always wanted to learn how to reverse engineer Android apps. There were people out there who knew how to navigate and modify the internals of an APK file and I wasn’t one of them. This had to be changed but it took a long time for that to happen. In…
9.23K views
👍 17👎💬
Android Security & Malware
Reversing “V-Alert COVID-19” - Part 2
https://medium.com/@cryptax/reversing-v-alert-covid-19-part-2-b6c21065e74f
Medium
Reversing “V-Alert COVID-19” — part 2
This corresponds to the reverse engineering of the malware we unpacked in Part 1. Please also see the video at SecSea 2k20.
3.89K views
👍 8👎💬
Android Security & Malware
HiddenAds up to no good again and spreading via Android gaming apps
https://decoded.avast.io/jakubvavra/hiddenads-up-to-no-good-again-and-spreading-via-android-gaming-apps/
Avast Threat Labs
HiddenAds up to no good again and spreading via Android gaming apps - Avast Threat Labs
I recently discovered a large campaign of HiddenAds on the Google Play Store, spreading via gaming apps. The initial discovery was made through an apklab.io automated detection that was based on similar features of a previous HiddenAds campaign that was present…
3.71K views
👍 3👎 1💬
Android Security & Malware
Forwarded from The Bug Bounty Hunter
The Top 5 Most Common Mobile App Security Flaws

https://www.allysonomalley.com/2020/06/23/the-top-5-most-common-mobile-app-security-flaws/
allysonomalley.com
The Top 5 Most Common Mobile App Security Flaws
Whether you’re a pentester looking to gain some experience in mobile hacking or a developer aiming to build secure apps, familiarizing yourself with some of the common security mistakes developers …
751 views
Android Security & Malware
New Android ransomware family identified + decryption tool created (because of the security issue in the code) #CryCryptor
https://www.welivesecurity.com/2020/06/24/new-ransomware-uses-covid19-tracing-guise-target-canada-eset-decryptor/
WeLiveSecurity
New ransomware posing as COVID‑19 tracing app targets Canada; ESET offers decryptor
ESET researchers dissect an Android app that masquerades as an official COVID-19 contact-tracing app and encrypts files on the victim's device.
3.94K views
👍 7👎💬
Android Security & Malware
France’s COVID-19 tracing app has been downloaded and activated 1.8M times on Android and iOS since launch on 2 June... but then uninstalled 460,000 times.
Src: https://twitter.com/gcluley/status/1275720504092102656
Twitter
Graham Cluley
France’s COVID-19 tracing app has been downloaded and activated 1.8m times on Android and iOS since launch on 2 June... but then uninstalled 460,000 times.
4.25K views
👍 9👎💬
Android Security & Malware
The #RoamingMantis group targets Android and iOS devices (phishing Apple ID) in Europe #FakeCop
https://medium.com/csis-techblog/the-roamingmantis-groups-expansion-to-european-apple-accounts-and-android-devices-e6381723c681
Medium
The RoamingMantis Group’s Expansion to European Apple Accounts and Android Devices
Background
4.38K views
👍 8👎 1💬
Android Security & Malware
iOS/MacOS wifi proximity kernel double free in AWDL BSS Steering
https://bugs.chromium.org/p/project-zero/issues/detail?id=2012
4.51K views
👍 7👎 2💬
Android Security & Malware
TikTok Secretly Spying On Clipboard of Millions iPhone Users
https://www.forbes.com/sites/zakdoffman/2020/06/26/warning-apple-suddenly-catches-tiktok-secretly-spying-on-millions-of-iphone-users/amp/
Forbes
Warning—Apple Suddenly Catches TikTok Secretly Spying On Millions Of iPhone Users
If you are a TikTok user, you should be worried—here's what you need to know.
4.61K views
👍 27👎 3💬
Android Security & Malware
Android malware detection based on image-based features and machine learning techniques
https://link.springer.com/article/10.1007/s42452-020-3132-2
SpringerLink
Android malware detection based on image-based features and machine learning techniques
SN Applied Sciences - In this paper, a malware classification model has been proposed for detecting malware samples in the Android environment. The proposed model is based on converting some files...
3.59K views
👍 9👎💬
Android Security & Malware
Debugging the Samsung Android Kernel
Part 1: https://blog.pucarasec.com/2020/06/09/debugging-the-samsung-android-kernel-part-1/
Part 2: https://blog.pucarasec.com/2020/06/16/debugging-the-samsung-android-kernel-part-2/
Part 3: https://blog.pucarasec.com/2020/06/23/debugging-the-samsung-android-kernel-part-3/
Posts by Pucara Information Security Team
Debugging the Samsung Android Kernel part 1:
Compiling a custom Samsung Android Kernel, and living to tell the tale. Many security enthusiasts and sysadmins are familiar with the process in which one custom compiles a Linux Kernel and th…
3.93K views
👍 21👎💬
Android Security & Malware
Forwarded from The Bug Bounty Hunter
Android App Source code Extraction and Bypassing Root and SSL Pinning checks

https://vj0shii.github.io/android-app-testing-initial-steps/
vj0shii.github.io
Android App Source code Extraction and Bypassing Root and SSL Pinning checks
In this blog I will be describing the pre-requesty steps I followed for one of the android application penetration testing
948 views