Android Security & Malware

Malicious proxy malware was found in 28 apps available on Google Play Store. These trojanized apps were overall installed over 3,240,000 times
https://www.humansecurity.com/learn/blog/satori-threat-intelligence-alert-proxylib-and-lumiapps-transform-mobile-devices-into-proxy-nodes

Humansecurity

Satori Threat Intelligence Alert: PROXYLIB and LumiApps Transform Mobile Devices into Proxy Nodes - HUMAN Security

HUMAN's Satori Threat Intelligence team uncovered a group of 28 apps that turned user devices into residential proxy nodes.

👍4😱3🥱3👎2🔥2❤1👏1

8.96K views10:50

👍 19 👎 1

Android Security & Malware

A Year in Review of Zero-Days Exploited In-the-Wild in 2023
-In 2023, there were 97 zero-day vulnerabilities exploited, a significant rise of over 50% compared to 2022 (62 vulnerabilities)
-Espionage was the primary motive behind 48 out of 58 zero-day vulnerabilities analyzed
-Most of the zero-day vulnerabilities found last year were in phones, operating systems, and web browsers
https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/Year_in_Review_of_ZeroDays.pdf

👍8❤1

9.64K views16:19

👍 17 👎 1

Android Security & Malware

Demonstration of using BlueDucky to exploit 0-click Bluetooth vulnerability of unpatched Android smartphone (CVE-2023-45866)
Exploit was triggered by Raspberry Pi 4 and then by Android running NetHunter
https://youtu.be/GOGW7U1f2RA

YouTube

Using BlueDucky to test 0-click Bluetooth vulnerability

#nethunter #kali #kalilinux #smartphone #tech #howto #bluetooth #bl...

👍12❤1

9.65K views05:58

👍 19 👎

Android Security & Malware

After almost 7 years, new version of drozer compatible with Python 3 and modern Java was released.
If you don't know, drozer was a very popular security testing framework for Android
https://github.com/WithSecureLabs/drozer

👍22

10.9K views11:02

👍 50 👎 2

Android Security & Malware

Technical analysis of Android malware Vultur
https://research.nccgroup.com/2024/03/28/android-malware-vultur-expands-its-wingspan/

Nccgroup

Cyber Security Research

Cutting-edge cyber security research from NCC Group. Find public reports, technical advisories, analyses, & other novel insights from our global experts.

😎8👍6❤2🥱2

11.9K views12:32

👍 29 👎 2

Android Security & Malware

Google fixed 2 Pixel vulnerabilities which are being actively exploited in the wild by forensic companies
CVE-2024-29745 refers to a vulnerability in the fastboot firmware used to support unlocking/flashing/locking. Forensic companies are rebooting devices in After First Unlock state into fastboot mode on Pixels and other devices to exploit vulnerabilities there and then dump memory.
CVE-2024-29748 refers to a vulnerability providing the ability to interrupt a factory reset triggered by a device admin app. It appears they've implemented a partial solution in firmware.
https://discuss.grapheneos.org/d/11860-vulnerabilities-exploited-in-the-wild-fixed-based-on-grapheneos-reports

GrapheneOS Discussion Forum

Vulnerabilities exploited in the wild fixed based on GrapheneOS reports - GrapheneOS Discussion Forum

❤17👍1

11.9K views07:32

👍 31 👎 1

Android Security & Malware

How charging your phone can compromise your data using three types of Juice Jacking attack
https://www.mobile-hacker.com/2024/04/04/how-charging-your-phone-can-compromise-your-data-using-juice-jacking-attack/

👍19😨4⚡2

11.4K views12:48

👍 47 👎 5

Android Security & Malware

Hornet dating app with over 10 million installs had vulnerabilities, allowing precise location determination of their users, even with distance display being disabled
https://research.checkpoint.com/2024/the-illusion-of-privacy-geolocation-risks-in-modern-dating-apps/

Check Point Research

The Illusion of Privacy: Geolocation Risks in Modern Dating Apps - Check Point Research

Key takeaways Introduction Dating apps traditionally utilize location data, offering the opportunity to connect with people nearby, and enhancing the chances of real-life meetings. Some apps can also display the distance of the user to other users. This feature…

👍16❤2🤷‍♂1🤔1

21.6K views09:25

👍 19 👎 3

Android Security & Malware

Bypassing anti-reversing defences in iOS applications
https://twelvesec.com/2023/10/10/bypassing-anti-reversing-defences-in-ios-applications/

Twelvesec

Bypassing anti-reversing defences in iOS applications - Twelvesec

A walktrough on dynamically bypassing anti-debugging and anti-reversing defences in iOS applications.

👍9❤3

9.59K views18:47

👍 38 👎 2

Android Security & Malware

Threat actor "Starry Addax" targets human rights defenders in North Africa with new Android malware
https://blog.talosintelligence.com/starry-addax/

Cisco Talos

Starry Addax targets human rights defenders in North Africa with new malware

Cisco Talos is disclosing a new threat actor we deemed “Starry Addax” targeting mostly human rights activists, associated with the Sahrawi Arab Democratic Republic (SADR) cause with a novel mobile malware.

👍11

10.1K views08:32

👍 17 👎

Android Security & Malware

Active Android espionage campaign targeting users mainly in India and Pakistan with apps bundled with the XploitSPY malware posing mostly as messaging services - even available on Google Play Store
https://www.welivesecurity.com/en/eset-research/exotic-visit-campaign-tracing-footprints-virtual-invaders/

🔥7👍5⚡1

9.9K views09:59

👍 14 👎 2

Android Security & Malware

ANDROID SUPPLY CHAIN VALIDATION CHEAT SHEET
This cheat sheet is based on the work performed on Android TV devices (we documented our steps in the post Android TV Devices: Pre-0wned Supply Chain Security Threats)
https://eclypsium.com/blog/android-supply-chain-validation-cheat-sheet/

Eclypsium | Supply Chain Security for the Modern Enterprise

Android Supply Chain Validation Cheat Sheet

Several different tools and techniques are available for Android to enumerate software and configurations, allowing you to begin to validate the software on devices. This cheat sheet is based on the work performed on Android TV devices (we documented our…

👍14❤2

11.5K views05:05

👍 25 👎

Android Security & Malware

iOS LightSpy Returns: Renewed Espionage Campaign Targets Southern Asia, Possibly India
https://blogs.blackberry.com/en/2024/04/lightspy-returns-renewed-espionage-campaign-targets-southern-asia-possibly-india

👍8🔥2

9.31K views15:29

👍 14 👎 1

Android Security & Malware