This articles discusses a recent Android sample from January 2021. It was first scanned on the 11th, but according to its certificate…

In a single update, a popular barcode scanner app that had been on Google Play for years turned into malware.

Before we get started, we need to have the apk which can be extracted from the device by installing the application through the play store…

Overview Despite the reveal of “Domestic Kitten” by Check Point in 2018, APT-C-50 has not stopped conducting extensive surveillance operations against Iranian citizens that could pose a threat to the stability of the Iranian regime, including internal dissidents…

Contribute to ModernPwner/cicuta_virosa development by creating an account on GitHub.

A blog from the world class Intelligence Group, Talos, Cisco's Intelligence Group

The Lookout Threat Intelligence team has discovered two novel Android surveillanceware – Hornbill and SunBird. We believe with high confidence that these surveillance tools are used by the advanced persistent threat group (APT) Confucius, which first appeared…

Web-based installer for GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.

We discovered vulnerabilities in the SHAREit application. The vulns can be abused to leak a user’s sensitive data, execute arbitrary code, and possibly lead to remote code execution. The app has over 1 billion downloads.

Stealing Facebook access token from SHAREit using 3rd party app (not fixed yet)I created this quick PoC based on @TrendMicroRSRCH discovery.This and couple m...

polict's 2020 journey in researching the lottie animation format, its integration in mobile apps and the vulnerabilities triggerable by a remote attacker against any Telegram user.

Clubhouse (이하 “클럽하우스”)는 2020년 Alpha Exploration Co 사에서 개발한 오디오 채팅 형태의 소셜 네트워킹 앱입니다. 최근 한국에서도 인기를 더하며 초대장이 당근마켓에서 판매되거나 클럽하우스를 사용해보기 위해 중고 아이폰을 구매하는 사람들도 생길 정도였는데요. Elon Musk나 노홍철님과 같은 유명인사들도 가입해서 적극적으로 활동하면서 더 조명을 받은 것 같습니다. 이런 엄청난 인기 덕분에 얼마전 1조원 이상의 기업가치를…

This blog post is about the mechanics of a long tail iframe sandbox bypass found in a payload belonging to the persistent malvertising…

Raw and uncut tutorial on how to MITM Android apps with Objection and Burp.Social:Twitter: https://twitter.com/b3nac​Website: https://b3nac.com​Twitch: https...

Clubhouse is an application that has recently gained popularity in numerous countries for its ability to bring people together and have their voices and opinions heard.  From my perspective, this type of platform is a new paradigm in social media and influence.…

This repo contains a proof-of-concept for 📱🚀👑⚡, a deserialization vuln for local escalation of privilege to system_server in Android 10. This proof-of-concept only activates a privileged intent. - ...

Using Frida to find hooks in an Android application