Android Security & Malware

Popular Android malware threats - Jun, 2020
Full list: http://skptr.me/malware_timeline_2020.html
Download samples: https://github.com/sk3ptre/AndroidMalware_2020

GitHub

GitHub - sk3ptre/AndroidMalware_2020: Popular Android malware seen in 2020

3.5K views07:14

👍 11 👎 1 💬

Android Security & Malware

LinkedIn iOS app is copying the contents every clipboard keystroke. IOS 14 allows users to see each paste notification
https://www.zdnet.com/article/linkedin-says-ios-clipboard-snooping-after-every-key-press-is-a-bug-will-fix/

ZDNet

LinkedIn says iOS clipboard snooping after every key press is a bug, will fix

The new clipboard access detection and warning feature in iOS 14 exposes another app.

3.62K views10:45

👍 7 👎 1 💬

Android Security & Malware

Android Keylogger Injector demo
Be aware of such techniques when downloading any app, because free tutorial how to create keylogger injector is available on underground forums
https://youtu.be/jpmUUuNUIfo

3.8K views13:22

👍 21 👎💬

Android Security & Malware

Forwarded from The Bug Bounty Hunter

Insecure iOS Storage - DVIAv2 Part 1

https://philkeeble.com/ios/Insecure-iOS-Storage/

Offensive Research

Insecure iOS Storage - DVIAv2 Part 1

A guide on how to abuse insecure iOS storage configurations.

904 views14:27

Android Security & Malware

MobOk Malware found on Google Play

Functionality:
-Switching from Wi-Fi to Data Connection
-Subscribing to premium mobile services
-Solving Image-based CAPTCHA using an external image recognition service
-Stealing SMS used for 2FA
-Using the accessibility services to carry-on malicious activities on the screen
https://blog.zimperium.com/zimperium-discovers-mobok-malware-left-undetected-by-mobile-av-industry-for-months/

Zimperium

Zimperium Discovers MobOk Malware Left Undetected by AV Industry for Months - Zimperium

zLabs researchers have uncovered a new variant of the MobOk campaign. The samples found evaded detection by AV vendors for months. Zimperium worked with

3.62K views09:32

👍 14 👎 2 💬

Android Security & Malware

Police cracked encryption in EncroChat to read messages between drug criminals, hitmen and murder orders
https://www.nytimes.com/2020/07/02/world/europe/encrypted-network-arrests-europe.html

NY Times

When Police Are Hackers: Hundreds Charged as Encrypted Network Is Broken

The authorities said that by hacking into EncroChat, they were able to monitor criminal activity in real time, allowing them to stop drug deals and even murder.

4.08K views18:52

👍 20 👎 1 💬

Android Security & Malware

How to use #Frida and #BurpSuite to quickly identify mobile app functionality
https://youtu.be/07K5DZXMvB4

5.21K views11:07

👍 25 👎💬

Android Security & Malware

Repairing your smartphone or installing a ROM now will be a crime in Mexico
https://www.xataka.com.mx/legislacion-y-derechos/reparar-tu-smartphone-instalarle-rom-sera-delito-mexico-nueva-ley-que-proteje-candados-digitales-explicada

Xataka México

Reparar tu smartphone o instalarle una ROM será delito en México: la nueva ley que protege los candados digitales, explicada

Instalar una ROM personalizada, descargar y usar software que no provenga del mismo proveedor, y hasta reparar un teléfono, pasa por romper un candado digital...

3.96K views11:41

👍 6 👎 12 💬

Android Security & Malware

DroneSploit - A pentesting console framework dedicated to drones
https://hakin9.org/dronesploit-a-pentesting-console-framework-dedicated-to-drones/

3.98K views07:10

👍 13 👎 3 💬

Android Security & Malware

Analysis of EventBot: Android banking Trojan
Here is available patched EventBot payload that displays debug logs while being executed on device to helps understand its malicious functionality
https://youtu.be/qqwOrLR2rgU

YouTube

Dynamic analysis of patched EventBot allows us read its detailed debug logs while running | Trojan

Malware analysis of Android banking Trojan - EventBot

Its encrypted payload has lots of detailed debug logs for almost every executed functionality, however not activated.
So, I patched encrypted payload. It should help malware analyst to understand how…

3.62K views10:56

👍 14 👎 1 💬

Android Security & Malware

[Virtual] Android Security Symposium 2020 starts now

Program: https://android.ins.jku.at/symposium/program/
Live stream: https://youtu.be/zxkbyyl-9b8

YouTube

Android Security Symposium 2020 Live (Monday)

Live stream of Android Security Symposium 2020
https://android.ins.jku.at/symposium/

The third Android Security Symposium takes place as an online (virtual) conference from 6–7 July 2020, and is co-hosted with ACM WiSec 2020. The event is organized by Johannes…

3.84K views12:11

👍 14 👎 1 💬

Android Security & Malware

Collection of smartphone adware
https://securelist.com/pig-in-a-poke-smartphone-adware/97607/

Securelist

Pig in a poke: smartphone adware

Our support team continues to receive more and more requests from users complaining about intrusive ads on their smartphones from unknown sources. In some cases, the solution is quite simple. In others, the task is far harder: the adware plants

3.6K views22:25

👍 11 👎 2 💬

Android Security & Malware

Cerberus Analysis
Untold story of Cerberus discovery and communication with the malware operators.
Talks includes malicious functionality analysis and distribution with over 9,000+ website clicks in 24 hours
https://youtu.be/79fQmmK5RT4

YouTube

Story of the new Android banking Trojan-Cerberus at DefCamp 2019

DefCamp is the most important conference on Hacking & Information Security in Central and Eastern Europe, bringing hands-on talks about the latest research and practices from the INFOSEC field. Since 2011 it has been gathering decision makers, security specialists…

3.8K views09:24

👍 12 👎 1 💬

Android Security & Malware

Reversing DexGuard
Code Obfuscation & RASP: https://www.pnfsoftware.com/blog/reversing-dexguard/
Assets and Code Encryption: https://www.pnfsoftware.com/blog/reversing-dexguard-encryption/

3.73K views21:01

👍 13 👎💬

Android Security & Malware

Banking Trojan Cerberus Made it onto the Google Play Store
https://blog.avast.com/avast-finds-banking-trojan-cerberus-on-google-play-avast?utm_campaign

Avast

Banking Trojan Cerberus Made it onto the Google Play Store

Avast Reports Banking Trojan, Cerberus, to Google

3.75K views07:29

👍 9 👎💬

Android Security & Malware

Review of the Bahrain mobile application on both iOS and Android with a focus on the process transparency, security, privacy, tracing capabilities, and accessibility
https://blog.ostorlab.co/covid19-how-to-carry-nation-scale-mobile-devices-compromise.html

blog.ostorlab.co

Ostorlab: Mobile App Security Testing for Android and iOS

Mobile security testing of Covid-19 Contact Tracing Application BeAware

3.82K views08:47

👍 7 👎💬

Android Security & Malware

Malware found pre-installed on US smartphones
https://blog.malwarebytes.com/android/2020/07/we-found-yet-another-phone-with-pre-installed-malware-via-the-lifeline-assistance-program/

Malwarebytes

We found yet another phone with pre-installed malware via the Lifeline Assistance program

We discovered yet another phone model with pre-installed malware provided from the Lifeline Assistance program via Assurance Wireless by Virgin Mobile.

3.54K views06:39

👍 9 👎💬