InfoSec Oasis - Free VR (Optional) InfoSec Conference April 18th
Hey, NetSec! Excuse the formatting, (Not a Reddit power user). I have been working on creating a free online conference scheduled for April 18th. The goal is to try to bring us all together virtually to learn and mingle in a time where we can't physically be together. The conference is free, the platform is free, and again, you don't need VR to join in. We hope this will bring some excitement to everyone who is stuck at home during this rough time.

If you are planning on coming, please take the time to RSVP so that we have an accurate count for the AltSpace/Microsoft people. We have a great speaker lineup so far (including Lesley Carhart, Dave Kennedy, Alyssa Miller, Neil "Grifter" Wyler, Jayson Street, and Frank "The Tank" Diaz), and will be releasing the second track soon. Hope to see you all there! More details at the website: https://infosecoasis.com/
🗣TheActualRapture


🎖@malwr

Sandboxie Open Source Code is available for download
🗣Im_Special

https://github.com/DavidXanatos/Sandboxie
👤meepiquitous

Good on them for releasing the source code before discontinuing it
👤momobozo

Great! You have to sign the driver though
👤Holnapra


🎖@malwr

[PDF Building Secure and Reliable Systems by Google](https://landing.google.com/sre/static/pdf/SRS.pdf)
🗣digicat


🎖@malwr

[PDF Report: Decade of the RATs Novel Cross-Platform APT Attacks Targeting Linux, Windows and Android](https://www.blackberry.com/content/dam/blackberry-com/asset/enterprise/pdf/direct/report-bb-decade-of-the-rats.pdf)
🗣digicat


🎖@malwr

Android Stalkerware Tear Down
I spent a weekend recently decompiling and analyzing a piece of Stalkerware called "Mobile Tracker Free".

One thing I've always found interesting about Stalkerware and mobile malware is the way they obtain access to messages stored on the device. Grabbing the WhatsApp messagestore.db isn't an easy feat for a mobile app on a non-rooted Android device. It was interesting to analyze the code (some included in the screenshot) to see how they did it. It was even more interesting to watch them chmod 777 the messagestore.db before sending it back to their servers.

If you're interested, my full write up is in the link below:

https://traced.app/2020/02/22/in-the-wild-stalkerware-analysis-mobile-tracker-free/

Any questions, please just ask. :)
🗣Mattboddy47


🎖@malwr

Exploiting CVE-2020-0041 - Part 2: Escalating to root
🗣cyberg0100

Part 1⃣: https://labs.bluefrostsecurity.de/blog/2020/03/31/cve-2020-0041-part-1-sandbox-escape/


🎖@malwr