Android Security & Malware

Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system
https://github.com/lautarovculic/frida-ipa-extract

GitHub

GitHub - lautarovculic/frida-ipa-extract: Robust Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports…

Robust Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system. - lautarovculic/frida-ipa-extract

👍17❤8🎃4🤣1

7.84K views02:07

👍 18 👎

Android Security & Malware

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari
https://github.com/zeroxjf/WebKit-UAF-ANGLE-OOB-Analysis

👍11❤6🎃2

7.72K views04:35

👍 14 👎

Android Security & Malware

Firebase APK Security Scanner
Scan Android APKs for Firebase security misconfigurations including open databases, exposed storage buckets, and authentication bypasses
https://github.com/trailofbits/skills/tree/main/plugins/firebase-apk-scanner

GitHub

skills/plugins/firebase-apk-scanner at main · trailofbits/skills

Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows - trailofbits/skills

❤18🎃4👍3

8.4K views06:37

👍 24 👎 3

Android Security & Malware

Android.Phantom trojans are bundled with modded games and popular apps to infiltrate smartphones. They use machine learning and video broadcasts to engage in click fraud
https://news.drweb.com/show/?i=15110&lng=en

❤16👍5🎃5

7.87K views06:17

👍 22 👎 1

Android Security & Malware

Samsung S23 Ultra: The Ultimate NetHunter Setup(Android 14 Fix)
https://medium.com/@JanCSG/samsung-s23-ultra-the-ultimate-nethunter-setup-31c1105201d9

Medium

Samsung S23 Ultra: The Ultimate NetHunter Setup(Android 14 Fix)

I’ve spent the last couple of days trying to turn my S23 Ultra into the ultimate mobile hacking machine.

❤23👍8🤡8🗿3🥰2🎃1

9.07K views12:10

Android Security & Malware

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications
https://github.com/TheQmaks/soSaver

GitHub

GitHub - TheQmaks/soSaver: A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications. - TheQmaks/soSaver

❤17👍5🔥3

8.04K views13:50

👍 28 👎

Android Security & Malware

Android and authentication: The Evolution of FIDO Experiences on Android
https://bughunters.google.com/blog/fido

👍14❤2

6.67K views14:25

👍 14 👎 1

Android Security & Malware

Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation
https://www.welivesecurity.com/en/eset-research/love-actually-fake-dating-app-used-lure-targeted-spyware-campaign-pakistan/

Welivesecurity

Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan

ESET researchers discover an Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation.

👍13❤4

6.8K views19:07

👍 17 👎 2

Android Security & Malware

NFCShare (SuperCard X) Android Trojan: NFC card data theft via malicious APK
https://www.d3lab.net/nfcshare-android-trojan-nfc-card-data-theft-via-malicious-apk/

D3Lab

NFCShare Android Trojan: NFC card data theft via malicious APK

An Android trojan distributed via a Deutsche Bank phishing campaign pretends to be “Support Nexi,” prompts victims to tap their payment card and enter the PIN, then exfiltrates NFC data over a WebSocket. We attribute this cluster as NFCShare and provide technical…

👍12❤4

6.38K views12:24

👍 13 👎 1

Android Security & Malware

Disrupting the World's Largest Residential Proxy Network
https://cloud.google.com/blog/topics/threat-intelligence/disrupting-largest-residential-proxy-network

Google Cloud Blog

Disrupting the World's Largest Residential Proxy Network | Google Cloud Blog

IPIDEA’s proxy infrastructure is a component of the digital ecosystem leveraged by a wide array of bad actors.

👍15

6.36K views13:16

Android Security & Malware

The Rise of Android Arsink Rat
https://zimperium.com/blog/the-rise-of-arsink-rat

Zimperium

The Rise of Arsink Rat

true

👏13👍4

6.63K views16:29

👍 18 👎

Android Security & Malware

Android Trojan Campaign Uses Hugging Face Hosting for RAT Payload Delivery
https://www.bitdefender.com/en-us/blog/labs/android-trojan-campaign-hugging-face-hosting-rat-payload

Bitdefender

Android Trojan Campaign Uses Hugging Face Hosting for RAT Payload Delivery

Bitdefender researchers discovered an Android RAT campaign that combines social engineering, the resources of Hugging Face and permission abuse

👍10⚡4😁2🤣2

6.3K views06:54

👍 14 👎

Android Security & Malware

Modern iOS Security Features – A Deep Dive
into SPTM, TXM, and Exclaves
https://arxiv.org/pdf/2510.09272

👍15❤6

7K views08:43

👍 18 👎 1

Android Security & Malware

Carbonara: The MediaTek exploit nobody served
https://shomy.is-a.dev/blog/article/serving-carbonara
Penumbra is a tool for interacting with Mediatek devices.
It provides flashing and readback capabilities, as well as bootloader unlocking and relocking on vulnerable devices: https://github.com/shomykohai/penumbra

❤13👍6

6.96K views09:58

👍 20 👎 1

Android Security & Malware

Analysing a Pegasus 0-click Exploit for iOS
Recreated the "Blastpass" iOS exploit in a faked target process, to understand the heap shaping strategy first-hand
https://youtu.be/0JFcDCW3Sis

YouTube

Analysing a Pegasus 0-click Exploit for iOS

Are you a security researcher or reverse engineer?

For 50% off IDA Products use promo code BILLY50, https://hex-rays.com/pricing *
For 30% off IDA Training use promo code BILLY30, https://hex-rays.com/training **

*License discounts are only valid for individuals…

👍17❤10

8.38K views20:19

👍 25 👎

Android Security & Malware

Deep-C: Android Deep Link misconfiguration detector and exploitation tool
https://github.com/KishorBal/deep-C

🔥17❤9👍4🎃2

7.05K views22:41

👍 32 👎 1

Android Security & Malware