Android Security & Malware

How to root an Android device for analysis and vulnerability assessment
https://www.pentestpartners.com/security-blog/how-to-root-an-android-device-for-analysis-and-vulnerability-assessment/

Pen Test Partners

How to root an Android device for analysis and vulnerability assessment | Pen Test Partners

TL;DR Introduction For mobile testing, be it for apps or hardware, having complete control over the device is essential for analysis and vulnerability assessment. Rooting an Android device allows us to gain root privileges, giving us full access to the OS…

🔥13👍8🤡4

15.8K views08:57

👍 20 👎 4

Android Security & Malware

Intercepting iHealth app traffic with Caido and Frida
iHealth Nexus Pro Body Composition Scale only communicates via Bluetooth Low Energy (BLE) to a iHealth mobile app
Blog: https://brownfinesecurity.com/blog/intercepting-mobile-traffic-with-caido-and-frida/
Video: https://youtu.be/GvRi7chKMPI

Brownfinesecurity

Intercepting Mobile Application Traffic with Caido and Frida - Brown Fine Security

🔥10👍4

10.6K views14:45

👍 18 👎 4

Android Security & Malware

Critical Zip Slip Vulnerability Discovered in Mobile Security Framework (MobSF) could allow malicious actors to execute code remotely on servers running MobSF (CVE-2024-43399)
https://securityonline.info/cve-2024-43399-critical-zip-slip-vulnerability-discovered-in-mobile-security-framework-mobsf

Daily CyberSecurity

CVE-2024-43399: Critical Zip Slip Vulnerability Discovered in Mobile Security Framework (MobSF)

Discover the critical vulnerability in MobSF - CVE-2024-43399. Find out how this flaw could lead to remote code execution and the potential impact on app security.

🔥25👍3❤2

11K views06:58

👍 35 👎

Android Security & Malware

Rocinante: Analysis of new Android banking trojan
https://www.threatfabric.com/blogs/the-trojan-horse-that-wanted-to-fly-rocinante

ThreatFabric

Rocinante: The trojan horse that wanted to fly

New DTO malware appears in Brazil, posing as security updates and banking applications.

👍11🌚3❤1

10.2K views13:30

👍 28 👎 2

Android Security & Malware

Reverse Engineering Obfuscated Flutter App
https://youtu.be/0uUSwMg2suk

YouTube

Reverse Engineering Obfuscated Flutter App

#flutterobfuscatedapp #mobilesecurity #dartdecompilation #dartobjectpool #reverse-engineering

Hello everyone and welcome to another video on Flutter by FatalSec. In this video we are gonna learn how to deal with an obfuscated flutter application by resolving…

👍24❤1

13.9K views10:09

👍 36 👎 3

Android Security & Malware

New Phishing Campaign Spreads EagleSpy Android Malware
https://www-d3lab-net.translate.goog/nuova-campagna-di-phishing-diffonde-malware-android-eaglespy/?_x_tr_sl=auto&_x_tr_tl=en&_x_tr_hl=en

D3Lab

Nuova Campagna di Phishing diffonde malware Android EagleSpy

Una recente campagna di phishing sta diffondendo il malware Android EagleSpy, un potente RAT in grado di rubare dati sensibili attraverso false app bancarie. Analizziamo le somiglianze tecniche con SpyNote e CraxsRAT, rivelando le sofisticate tecniche di…

🌚8👍3

9.05K views12:26

👍 25 👎 1

Android Security & Malware

GPUAF Using a general GPU exploit tech to attack Pixel 8
We developed an advanced exploit technique capable of transforming a conventional out-of-bounds (OOB) bug into a more potent exploit primitive, specifically a page Use-After-Free (UAF). Utilizing this technique, we successfully exploited a vulnerability in the Pixel series, achieving Kernel Code Execution.
https://www.youtube.com/watch?v=Mw6iCqjOV9Q

YouTube

Off-By-One 2024 Day 1 - GPUAF Using a general GPU exploit tech to attack Pixel8

Abstract

Last year, we developed an advanced exploit technique capable of transforming a conventional out-of-bounds (OOB) bug into a more potent exploit primitive, specifically a page Use-After-Free (UAF). Utilizing this technique, we successfully exploited…

🔥14🌚3

9.08K views06:33

👍 19 👎

Android Security & Malware

New Android SpyAgent Campaign Steals Crypto Credentials via Image Recognition
https://www.mcafee.com/blogs/other-blogs/mcafee-labs/new-android-spyagent-campaign-steals-crypto-credentials-via-image-recognition/

McAfee Blog

New Android SpyAgent Campaign Steals Crypto Credentials via Image Recognition | McAfee Blog

Authored by SangRyol Ryu Recently, McAfee’s Mobile Research Team uncovered a new type of mobile malware that targets mnemonic keys by scanning for images

🔥6🌚1

8.95K views10:10

👍 13 👎

Android Security & Malware

Attempted cyberattacks on Ukrainian military systems using mobile malware
https://cert.gov.ua/article/6280563

cert.gov.ua

CERT-UA

Урядова команда реагування на комп’ютерні надзвичайні події України, яка функціонує в складі Державної служби спеціального зв’язку та захисту інформації України.

🔥10👍3🥰2🌚2😢1

8.5K views12:05

👍 11 👎 2

Android Security & Malware

How to intercepting Android at runtime on non-rooted devices using frida-gadget
https://dispatchersdotplayground.hashnode.dev/intercepting-android-at-runtime-on-non-rooted-devices

🔥10👍2🌚2

8.77K views06:36

👍 17 👎 4

Android Security & Malware

[$12000] How I found 3 Critical 0-click TikTok Account Takeover Vulnerabilities, 2FA bypass & more security issues in TikTok’s system
https://vojtechcekal.medium.com/12000-3-critical-0-click-tiktok-account-takeover-vulnerabilities-2fa-bypass-more-security-78554827cfc3

👍20🌚7

14K views07:09

👍 40 👎 5

Android Security & Malware

Unburdened By What Has Been: Exploiting New Attack Surfaces in Radio Layer 2 for Baseband RCE on Samsung Exynos
https://labs.taszk.io/articles/post/there_will_be_bugs/

labs.taszk.io

Unburdened By What Has Been: Exploiting New Attack Surfaces in Radio Layer 2 for Baseband RCE on Samsung Exynos

Samsung Baseband RCE with Layer 2 Vulnerabilities

😱8🔥2🥴1

7.41K views12:14

👍 15 👎 1

Android Security & Malware

A new TrickMo saga: from Banking Trojan to Victim's Data Leak
https://www.cleafy.com/cleafy-labs/a-new-trickmo-saga-from-banking-trojan-to-victims-data-leak

Cleafy

A new TrickMo saga: from Banking Trojan to Victim's Data Leak | Cleafy Labs

Explore Cleafy's analysis of a newly discovered TrickMo variant, revealing enhanced malware capabilities and critical endpoints used for storing stolen credentials and data from victims. Here is the latest threat analyst report.

❤‍🔥7👨‍💻3👍1

7.82K views15:35

👍 14 👎

Android Security & Malware

Exploiting JavaScript Interface for Unauthorized Access in a Kucoin cryptocurrency exchange Android app
https://hulkvision.github.io/blog/javascript-interface/exploiting-javascript-interface/

hulkvision.github.io

Exploiting JavaScript Interface for Unauthorized Access in a 'global' cryptocurrency exchange android app

Intro
Webview in Android Ecosystem is an extension of Android’s view class that lets you display web pages as a part of your application activity layout. You can call it as a web browser built into your application but it doesn’t include the features of a…

👍8❤3🤯3🌚2👏1

13.4K views12:10

👍 13 👎 1

Android Security & Malware

Android banking trojan - Ajina - attacks Central Asia: Story of an Uzbek Android Pandemic
https://www.group-ib.com/blog/ajina-malware

Group-IB

Story of an Uzbek Android Pandemic | Group-IB Blog

Discovered by Group-IB in May 2024, the Ajina.Banker malware is a major cyber threat in the Central Asia region, disguising itself as legitimate apps to steal banking information and intercept 2FA messages.

🔥6🤯2❤1🥴1

7.63K views09:42

👍 14 👎

Android Security & Malware

Android Vo1d malware infected over a million Android TV boxes
It is a backdoor that puts its components in the system storage and, when commanded by attackers, is capable of secretly downloading and installing third-party software
https://news.drweb.com/show/?i=14900&lng=en

Dr.Web

Void captures over a million Android TV boxes

Doctor Web experts have uncovered yet another case of an Android-based TV box infection. The malware, dubbed <a href="https://vms.drweb.com/search/?q=Android.Vo1d&lng=en"><b>Android.Vo1d</b></a>, has infected nearly 1.3 million devices belonging to users…

👍8🌚3👏1

8.41K views12:15

👍 17 👎

Android Security & Malware

Diving into ADB protocol internals (1/2)
https://www.synacktiv.com/publications/diving-into-adb-protocol-internals-12

Synacktiv

Diving into ADB protocol internals (1/2)

🔥11🌚3👍1🤡1🥱1

7.81K views15:52

👍 23 👎

Android Security & Malware

Wild vulnerabilities discovered in mobile dating app - Feeld with 1 Million installs on Google Play
-Disclosure of profile information to non-premium users
-Read other people’s messages
-access to other people’s photos & videos from their chats
-delete, recover and edit other people’s messages
-Update someone else’s profile information
-Send messages in other people’s chat
-Get a ‘Like’ from any user profile
https://fortbridge.co.uk/research/feeld-dating-app-nudes-data-publicly-available/

Cyber Security Services - London

Feeld dating app - Your nudes and data were publicly available

Discover critical Feeld app vulnerabilities from our pentest. See how flaws in security controls expose personal data and learn key fixes.

🔥9🌚5🤣5👍4❤1🤮1

9.01K views07:52

👍 15 👎 1

Android Security & Malware

Android Bytecode Exploitation
Introduction (Part 1): https://lolcads.github.io/posts/2024/09/bytecode_exploitation_0/
Fundamentals (Part 2): https://lolcads.github.io/posts/2024/09/bytecode_exploitation_1/
Bytecode Injection (Part 3): https://lolcads.github.io/posts/2024/09/bytecode_exploitation_2/
Bytecode Reuse Attack (Part 4): https://lolcads.github.io/posts/2024/09/bytecode_exploitation_3/

lolcads tech blog

Introduction to Android Bytecode Exploitation (Part 1)

Introduction to Android Bytecode Exploitation (Part 1) Android resides among the most popular operating systems for mobile devices, which causes Android to also be among the most popular targets for exploitation. While Android is frequently updated to fix…

🔥21👍2🌚2