Android Security & Malware

2021-02-17 12:48:27 Stealing Facebook access token and WebView cookies from SHAREit using 3rd party app (not fixed)


Open / Comment

2021-02-17 12:46:38 SHAREit Flaw Could Lead to Remote Code Execution
https://www.trendmicro.com/en_us/research/21/b/shareit-flaw-could-lead-to-remote-code-execution.html Open / Comment

2021-02-15 13:27:41 Flash GrapheneOS ROM through a web browser
https://grapheneos.org/install/web Open / Comment

2021-02-12 11:09:50 Discovered Confucius APT Android Spyware Linked to India-Pakistan Conflict
https://blog.lookout.com/lookout-discovers-novel-confucius-apt-android-spyware-linked-to-india-pakistan-conflict Open / Comment

2021-02-12 01:42:09 Kasablanka Group's LodaRAT improves espionage capabilities on Android and Windows
https://blog.talosintelligence.com/2021/02/kasablanka-lodarat.html Open / Comment

2021-02-10 18:42:08 iOS 14.3 kernel LPE for ALL devices
https://github.com/ModernPwner/cicuta_virosa Open / Comment

2021-02-10 17:30:06 Couple of bugs disclosed for Huawei, Motorola, OPPO, Mediatek, Vivo, Meizu, ZTE, K-Touch, Transsion, Digitime devices
Issues: ADB private key leak, a cloud services key leak, and permissions bypass for system APIs
https://bugs.chromium.org/p/apvi/issues/list?q=&can=1 Open / Comment

2021-02-08 16:27:43 Domestic Kitten (APT-C-50) – An Inside Look at the Iranian Surveillance Operations
https://research.checkpoint.com/2021/domestic-kitten-an-inside-look-at-the-iranian-surveillance-operations/ Open / Comment

2021-02-08 13:20:27 Insecure Data Storage: Clear Text Storage of Sensitive Information (Hard-coded strings, credentials, tokens & keys)
https://medium.com/mobis3c/insecure-data-storage-clear-text-storage-of-sensitive-information-hard-coded-strings-fb7b056c0d0 Open / Comment

2021-02-07 12:57:24 Barcode Scanner app on Google Play infects 10 million users with one update
https://blog.malwarebytes.com/android/2021/02/barcode-scanner-app-on-google-play-infects-10-million-users-with-one-update/ Open / Comment