In this blog, we will see how we can exploit a deeplink to achieve an RCE

POC writeup to exploit sandbox escape in itunesstored & bookassetd

Check Point researchers uncover a large-scale Android adware campaign that silently drains resources and disrupts normal phone use through persistent %

The Android malware-as-a-service (MaaS) ecosystem continues to evolve with increasingly sophisticated threats designed to evade security measures while maintaining operational simplicity for would-be attackers.

On the surface, the Superbox media streaming devices for sale at retailers like BestBuy and Walmart may seem like a steal: They offer unlimited access to more than 2,200 pay-per-view and streaming services like Netflix, ESPN and Hulu, all for…

In this blog, I’ll walk you through: If you’re a tech‑savvy security enthusiast who loves practical, low‑cost hardening tips, this one’s for you. Pi‑hole 101: A DNS “sinkhole” for ads, trackers and junk Pi‑hole is a network‑level ad and tracker blocker. Instead…

CRIL uncovers RelayNFC, a malware leveraging Near-Field Communication (NFC) to intercept and relay contactless payment data.

A complete walkthrough of the 8ksec "FridaInTheMiddle" challenge: bypassing Frida detection, hooking Swift functions, and intercepting arguments on a jailbroken iPhone.

Hunting potential C2 commands in Android malware via Smali string comparison and control flow

Presented at the VB2025 conference in Berlin, 24 - 26 September 2025.
↓ Slides: https://www.virusbulletin.com/uploads/pdf/conference/vb2025/slides/Slides-Hunting…

An in-depth Bug Bounty guide to performing reconnaissance on Android apps – from extracting APKs to mapping endpoints, secrets and vulnerable components.

Here we go again! Today we will be talking about SSL Pinning Bypass in Android. Due the recent cybersecurity congress that I have assisted...

Albiriox is a newly identified Android malware family offered as a Malware-as-a-Service, and enabling TAs to perform On-Device Fraud through remote control, screen manipulation, and real-time interaction with the infected device. Read more in this report.

Command-line tool that allows searching and downloading app packages (known as ipa files) from the iOS App Store - majd/ipatool

Evil Crow Cable Wind is a stealthy tool for red teamers who like to keep things simple and sneaky. If you saw it on a desk, you’d think it was just a regular USB charging cable. But the Evil Crow Cable Wind is anything but ordinary. It’s a tiny hacking implant…

A journey of learning C and reverse engineering to be more efficiently lazy

Complete Android application security testing guide: Static & dynamic testing, root detection bypass, SSL pinning, and common vuln…

A deep dive into GoldFactory’s evolving mobile fraud campaigns across APAC, including modified banking apps, new malware variants such as Gigaflower, shared criminal infrastructure, and insights from the Group-IB Fraud Matrix, with recommendations for organizations…

EXECUTIVE SUMMARY At Cyfirma, we are committed to providing up-to-date insights into current threats and the tactics used by malicious...