Microsoft Team's link preview feature is susceptible to spoofing and vulnerable to Server-Side Request Forgery. Team's Android users can be DoS'ed and, in the past, their IP address could be leaked.

Cyble's research on an Android Malware that has been targeting a major banking company in Brazil.

Potentially fake 'Showbox' movie piracy apps trigger a Play Protect warning, and an investigation indicates they could download malware

Learning DFIR.

In this blog, I usually share articles about the mobile security, ctf solutions, web application security area and any subject that interests me.

Happy New Year!🥳

docs about ReDroid projects. Contribute to remote-android/redroid-doc development by creating an account on GitHub.

In Facebook android activity "com.facebook.katana.activity.iap.LaunchFromIAP" is exported with "com.facebook.katana.activity.iap" action intent filter and

Mobile Attacker’s Mindset Series – Part II Evaluating how attackers operate when there are no rules leads to discoveries of advanced detection and response mechanisms. ZecOps is proudly researching scenarios of attacks and sharing the information publicly…

A deconstruction of FluBot 5.0’s new communication protocol and other capabilities FluBot uses to hide, making it difficult for researchers and security solutions to detect.

Intro

Beforehand, i'm sorry for my english writing. I'm in practice for improve it.

Confirming that Amnesty International has independently confirmed that Pegasus spyware was used to hack Polish senator, Krzysztof Brejza, when he was running the opposition’s 2019 parliamentary election campaign, Amnesty International Poland’s Director Anna…

Journalists and members of civil society had their phones successfully infected with NSO’s Pegasus spyware between July 2020 - November 2021.

# Summary While testing Adobe Acrobat reader app , the app has a feature which allows user to open pdfs directly from http/https url. This feature was vulnerable to path traversal vulnerability. Abode reader was also using Google play core library for dynamic…

This article explains how to unpack sample sha256 5b9049c392eaf83b12b98419f14ece1b00042592b003a17e4e6f0fb466281368 which was served from…

In the previous article, we discussed the packing mechanism of a Bian Lian sample, and how to unpack. This article reverse engineers the…

AERoot is a command line tool that allows you to give root privileges on-the-fly to any process running on the Android emulator with Google Play flavors AVDs. - GitHub - quarkslab/AERoot: AERoot is...