Android Security & Malware

NetHunter Hacker XIII: Overall guide to MITM framework
New blog covers methods that attackers may employ to intercept network communication like in a video that demonstrates using SSLStrip+ and DNS change to intercept HTTPS and bypass HSTS via MITMf
https://www.mobile-hacker.com/2024/02/13/nethunter-hacker-xiii-overall-guide-to-mitm-framework/

Mobile Hacker

NetHunter Hacker XIII: Overall guide to MITM framework Mobile Hacker

I will cover the several methods that attackers may employ to intercept network communication to execute ARP poisoning, HTTP and HTTPS traffic interception, and DNS spoofing. In the video below is a demonstration of using SSLstrip and DNS change to intercept…

👍13⚡2❤1

9.31K views08:51

👍 27 👎

Android Security & Malware

SIM Hijacking
https://sensepost.com/blog/2022/sim-hijacking/

👍15⚡1

8.13K views09:58

👍 22 👎 1

Android Security & Malware

Mobile Threat Landscape Report for 2023
Report includes review of Android and iOS vulnerabilities and malware in 2023
https://www.lookout.com/threat-intelligence/report/mobile-landscape-threat-report

Lookout

Mobile Landscape Threat Report

Based on an analysis of Lookout’s security dataset of more than 300 million mobile apps, 220 million mobile devices, and billions of web items, Lookout has authored the Mobile Threat Landscape Report.

👍10❤2

8.7K views10:56

👍 16 👎 1

Android Security & Malware

iOS and Android Trojan harvesting facial recognition data used for unauthorized access to bank accounts
https://www.group-ib.com/blog/goldfactory-ios-trojan/

Group-IB

Face Off: Group-IB identifies first iOS trojan stealing facial recognition data

Group-IB uncovers the first iOS Trojan harvesting facial recognition data used for unauthorized access to bank accounts. The GoldDigger family grows

👍13🔥7

9.34K views12:16

👍 26 👎 1

Android Security & Malware

Dusting Off Old Fingerprints: NSO Group’s Unknown MMS Hack
https://www.enea.com/insights/dusting-off-old-fingerprints-nso-groups-unknown-mms-hack/

Enea

Dusting off Old Fingerprints: NSO Group's Unknown MMS Hack

👍13❤3🔥1

9.37K views20:45

👍 19 👎

Android Security & Malware

Android SpyNote RAT Moves to Crypto Currencies
https://www.fortinet.com/blog/threat-research/android-spynote-moves-to-crypto-currencies

Fortinet Blog

Android/SpyNote Moves to Crypto Currencies

FortiGuard investigates a hot new sample of Android/SpyNote, which shows the malware authors stealing crypto currencies from crypto wallets.…

❤11👍6

8.82K views11:22

👍 14 👎

Android Security & Malware

New WiFi authentication vulnerabilities discovered affecting Android, ChromeOS and Linux devices
CVE-2023-52160 (“Phase-2 bypass”): This vulnerability can be exploited by an attacker to deceive the victim into connecting to a fake Wi-Fi network set up by the adversary. Once connected, the attacker can intercept and monitor the victim’s network traffic
CVE-2023-52161 (“4-way bypass”): It allows an adversary to gain full access to an existing protected WiFi network, exposing existing users and devices
PoC exploit is not available.
https://www.top10vpn.com/research/wifi-vulnerabilities/

Top10Vpn

New WiFi Authentication Vulnerabilities Discovered

Two new WiFi vulnerabilities allow hackers to trick you into connecting to fake hotspots and steal your data, and join secure networks without the password.

❤13👏5👍4🔥2

9.82K views15:48

👍 27 👎 2

Android Security & Malware

Ghost files in the shared preferences
https://valsamaras.medium.com/ghost-files-in-the-shared-preferences-8d75226c23c0

Medium

Ghost files in the shared preferences

Have you ever encountered an exceptionally clever bug, only to be thwarted by an unforeseen obstacle just moments before exploiting it…

👍13

8.16K views06:42

👍 20 👎 2

Android Security & Malware

Anatsa (TeaBot) Android Trojan Returns: Targeting Europe and Expanding Its Reach
Trojan reached on Google Play 10,000 installs, impersonating Phone Cleaner app.
The current campaign involves five droppers with over 100,000 total installations
https://www.threatfabric.com/blogs/anatsa-trojan-returns-targeting-europe-and-expanding-its-reach

ThreatFabric

Anatsa Trojan Returns: Targeting Europe and Expanding Its Reach

The Anatsa trojan returns, targeting Europe while expanding its reach.

🔥8👍3❤2🥱2😁1🤔1

8.54K views11:40

👍 16 👎 2

Android Security & Malware

Android file wiper implemented in native library as part of malware campaign
https://harfanglab.io/en/insidethelab/samecoin-malware-hamas/

🥱9❤1👍1🔥1

8.44K views21:08

👍 21 👎 1

Android Security & Malware

Auto DNS poisoning
While charging Android smartphone via computer it is possible to perform automated and even remotely controlled DNS poisoning without any user interaction
Blog and video explains how it works, when it doesn't work and how to prevent it
https://www.mobile-hacker.com/2024/02/20/automated-dns-poisoning-using-android-while-charging-via-computer/

Mobile Hacker

Automated local DNS cache poisoning using Android while charging via computer Mobile Hacker

I will delve into using Android smartphone while charging from computer to perform automated DNS poisoning attack without any user interaction. I go through its results, downsides and effective prevention tips.

👍14❤4🤯4

9.98K views09:17

👍 30 👎

Android Security & Malware

Analysis of Android HookBot malware
HookBot analysis: https://cebrf.knf.gov.pl/komunikaty/artykuly-csirt-knf/362-ostrzezenia/858-hookbot-a-new-mobile-malware
HookBot full report: https://cebrf.knf.gov.pl/images/HOOKBOT_CSIRT_KNF_ENG.pdf
HookBuilder analysis: https://cebrf.knf.gov.pl/images/Hookbot_Builder_-_Analyze_CSIRT_KNF.pdf

👍9

10.6K views12:03

👍 24 👎

Android Security & Malware

Android Deep Links & WebViews Exploitations Part II
https://medium.com/@justmobilesec/deep-links-webviews-exploitations-part-ii-5c0b118ec6f1

Medium

Deep Links & WebViews Exploitations Part II

TLDR: This post is the second of a two-part series covering Deep Links & WebViews Exploitations. This article focuses on Deep Links. It…

👍15

10.8K views07:52

👍 36 👎 2

Android Security & Malware

NetHunter Hacker XIV: Find exploits using SearchSploit and setup Wi-Fi Pineapple connector
https://www.mobile-hacker.com/2024/02/27/nethunter-hacker-xiv-find-exploits-using-searchsploit-and-setup-wi-fi-pineapple-connector/

Mobile Hacker

NetHunter Hacker XIV: Find exploits using SearchSploit and setup Wi-Fi Pineapple connector Mobile Hacker

SearchSploit is a powerful command-line tool that is part of the NetHunter system, developed by Offensive Security. It is designed to help security professionals and penetration testers search for known vulnerabilities in software by leveraging a comprehensive…

👍14❤6🥰1

9.65K views11:10

👍 39 👎 1

Android Security & Malware

NetHunter Hacker XV: Use Nmap for network scanning
Nmap can also reveal open ports of file manager apps that are running local file sharing servers to allow local attacker to access files on device (video)
https://www.mobile-hacker.com/2024/03/01/nethunter-hacker-xv-use-nmap-for-network-scanning/

Mobile Hacker

NetHunter Hacker XV: Use Nmap for network scanning

Besides explaining NetHunter’s nmap user interface and its usage, we will take one extra step further to actually demonstrate its functionality on our router to search for open ports and known vulnerabilities.

👍21🤓2❤1

9.9K views09:32

👍 35 👎 1

Android Security & Malware

Unveiling iOS Vulnerabilities: A Deep Dive into Attacking iOS system
https://blog.devsecopsguides.com/attacking-ios

Devsecopsguides

Attacking IOS

In this comprehensive guide, we delve into the world of iOS security from an offensive perspective, shedding light on the various techniques and methodologies used by attackers to compromise iOS devices and infiltrate their sensitive data.

👍12❤2🤓2