Android Security & Malware
@androidMalware
43.5K subscribers
134 photos
21 videos
7 files
2.8K links
Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com
Download Telegram
About
Blog
Apps
Platform
Join
Android Security & Malware
43.5K subscribers
Android Security & Malware
The worst mistakes made by the law enforcement and iOS forensic experts
https://blog.elcomsoft.com/2020/01/the-worst-mistakes-in-ios-forensics/
ElcomSoft blog
The Worst Mistakes in iOS Forensics
What can possibly go wrong with that iPhone? I’ll have a look (oh, it’s locked!), then switch it off, eject the SIM card and pass it on to the expert. Well, you’ve just made three of the five most common mistakes making subsequent unlock and extraction attempts…
4.25K views
Android Security & Malware
DeStroid - Fighting String Encryption in Android Malware
https://github.com/fkie-cad/DeStroid
GitHub
GitHub - fkie-cad/DeStroid: Fighting String Encryption in Android Malware
Fighting String Encryption in Android Malware. Contribute to fkie-cad/DeStroid development by creating an account on GitHub.
5.68K views
Android Security & Malware
Now you can root using exploit Galaxy S9, Galaxy S9+ and Galaxy Note 9 if you’re running Android 8.0 or 8.1 Oreo.
https://www.xda-developers.com/samsung-galaxy-s9-galaxy-note-9-snapdragon-root/
XDA Developers
Developers have exploited the Samsung Galaxy S9 and Note 9 to get root access on the Snapdragon models
Developers have figured out how to root the Snapdragon models of the Samsung Galaxy S9 and Galaxy Note 9 thanks to an exploit, but there's a catch.
6.6K views
Android Security & Malware
Analysis of native react Android applications
https://blog.assetnote.io/bug-bounty/2020/02/01/expanding-attack-surface-react-native/
69.5K views
Android Security & Malware
Android Malware Targets Diabetic Patients
https://www.fortinet.com/blog/threat-research/android-malware-targets-diabetic-patients.html
Fortinet Blog
Android Malware Targets Diabetic Patients
Read FortiGuard Labs' analysis of a recent android malware targeting diabetic patients.…
6.28K views
Android Security & Malware
Fugu - is the first open source jailbreak tool based on the checkm8 exploit #iOS
https://github.com/LinusHenze/Fugu
GitHub
GitHub - LinusHenze/Fugu: Fugu is the first open source jailbreak based on the checkm8 exploit
Fugu is the first open source jailbreak based on the checkm8 exploit - LinusHenze/Fugu
3.9K views
Android Security & Malware
Exploiting Insecure Firebase Database in Android apps
https://blog.securitybreached.org/2020/02/04/exploiting-insecure-firebase-database-bugbounty/
Security Breached Blog
Exploiting Insecure Firebase Database! - Security Breached Blog
this blog post is about Exploiting Insecure Firebase Databases, due to Improper set security rules one can write data to the database in certain conditions here’s a Short POC tutorial of the issue.
3.93K views
Android Security & Malware
In the case you prefer Android InfoSec news rather on Facebook, we are there.
It is better for posting visuals and videos.
Feel free to like us https://facebook.com/AndroidInfoSec/
3.64K views
Android Security & Malware
Android Banking Malware #slides
https://maxkersten.nl/wp-content/uploads/2020/02/SecureID_AndroidBankingMalware_ENG.pdf
3.69K views
Android Security & Malware
Analyzing iOS WhatsApp Calls
Analysis of the network traffic + binary files + runtime behavior
https://link.medium.com/yi4uD2Q1P3
Medium
Analyzing WhatsApp Calls
How I revealed parts of the VoIP protocol with Wireshark, radare2 and Frida.
8.12K views
Android Security & Malware
Overview of mobile malware detected in December 2019 by Doctor Web
https://news.drweb.com/show/review/?i=13641&lng=en
Dr.Web
Dr.Web — Doctor Web’s overview of malware detected on mobile devices in December 2019
Find out on Doctor Web’s site about the latest virus threats and information security issues.
3.54K views
Android Security & Malware
MadDroid: Detecting Devious Ad Contents for Android Apps
https://arxiv.org/pdf/2002.01656.pdf
3.48K views
Android Security & Malware
Android Apps on Google Play Communicate with Trojans that Install Malware, Perform Mobile Ad Fraud
https://blog.trendmicro.com/trendlabs-security-intelligence/malicious-apps-on-google-play-communicate-with-trojans-install-malware-perform-mobile-ad-fraud/
Trend Micro
Fake Android Apps Communicate For Malware, Ad Fraud
We found several malicious optimizer, booster, and utility apps capable of accessing remote ad configuration servers that can be used for malicious purposes, perform mobile ad fraud, and download as many as 3,000 malware variants or payloads.
3.77K views
Android Security & Malware
Anubis Banking Trojan still spreads via email as fake invoice
https://cofense.com/infostealer-keylogger-ransomware-one-anubis-targets-250-android-applications/
Cofense
Anubis Targets 250 Android Apps with Ransomware | Cofense
Infostealer keylogger/ransomware, OneAnubis, targets 250 Android applications - Stay informed about Android app vulnerabilities and OneAnubis malware.
3.73K views
Android Security & Malware
Bluetooth Vulnerability in Android (CVE-2020-0022)

Bug allows an attacker to execute arbitrary code with the privileges of the Bluetooth daemon
https://insinuator.net/2020/02/critical-bluetooth-vulnerability-in-android-cve-2020-0022/
4.41K views
Android Security & Malware
Forwarded from The Bug Bounty Hunter
Android: How to Bypass Root Check and Certificate Pinning
https://medium.com/@cintainfinita/android-how-to-bypass-root-check-and-certificate-pinning-36f74842d3be
Medium
Android: How to Bypass Root Check and Certificate Pinning
Recently I needed to pentest an Android application. When I installed the app in my virtual device (Android Emulator), a pop up…
👍1
481 views
Android Security & Malware
iOS exploit development series:

Part 1: Heap Exploit Development:
https://azeria-labs.com/heap-exploit-development-part-1/

Part 2: Heap Overflows and the iOS Kernel Heap
https://azeria-labs.com/heap-overflows-and-the-ios-kernel-heap/

Part 3: Grooming the iOS Kernel Heap
https://azeria-labs.com/grooming-the-ios-kernel-heap/
Azeria-Labs
Heap Exploit Development
6.52K views
Android Security & Malware
Elector app leaked personal information – ID, full name, address, and phone – of almost 6.5 million Israelis with voting rights
https://securityaffairs.co/wordpress/97603/data-breach/elector-app-israel-data-leak.html
Security Affairs
Netanyahu's party Elector app exposes data on over 6.5M Israelis
A misconfiguration in an election day app developed by Likud, the Netanyahu's party might have exposed data on over 6.5 million Israelis.
3.62K views
Android Security & Malware
Infographic Security: Mobile App Pentest
6.63K views
Android Security & Malware
rvi_capture
A utility to create packet capture dumps from iOS devices (for debugging network activity via Wireshark)
https://github.com/gh2o/rvi_capture
GitHub
GitHub - gh2o/rvi_capture: rvictl for Linux and Windows: capture packets sent/received by iOS devices
rvictl for Linux and Windows: capture packets sent/received by iOS devices - gh2o/rvi_capture
3.49K views