SecureList

MARCH 20, 2024

Among the mobile platforms, Android remains the most popular target operating system for cybercriminals. Last month, we wrote a total of four private crimeware reports on Android malware, three of which are summarized below. Tambir Tambir is an Android backdoor that targets users in Turkey.

Malware 85

Malware Mobile Firmware Spyware 85

Bleeping Computer

APRIL 17, 2024

A new Android banking malware named 'SoumniBot' is using a less common obfuscation approach by exploiting weaknesses in the Android manifest extraction and parsing procedure. [.]

Malware 122

Malware Banking Mobile 122

Bleeping Computer

MAY 18, 2024

The Android banking trojan "Grandoreiro" is spreading in a large-scale phishing campaign in over 60 countries, targeting customer accounts of roughly 1,500 banks. [.]

Banking 79

Banking Malware Phishing Accountability 79

Tech Republic Security

JANUARY 17, 2024

Explore the best VPNs for Android devices. Find out which VPN offers the best security, speed and features for your Android device.

VPN 143

VPN 143

Google Security

MAY 13, 2024

Google and Apple have worked together to create an industry specification – Detecting Unwanted Location Trackers – for Bluetooth tracking devices that makes it possible to alert users across both Android and iOS if such a device is unknowingly being used to track them. Google is now launching this capability on Android 6.0+

Manufacturing 106

Manufacturing Engineering Internet Internet 106

The Hacker News

MAY 10, 2024

Malicious Android apps masquerading as Google, Instagram, Snapchat, WhatsApp, and X (formerly Twitter) have been observed to steal users' credentials from compromised devices.

Malware 117

Malware 117

Penetration Testing

MARCH 28, 2024

drozer drozer is a security testing framework for Android. drozer allows you to search for security vulnerabilities in apps and devices by assuming the role of an app and interacting with the Android Runtime,... The post drozer: A security testing framework for Android appeared first on Penetration Testing.

Penetration Testing 104

Penetration Testing 104

Bleeping Computer

MAY 2, 2024

Bitwarden, the creator of the popular open-source password manager, has just launched a new authenticator app called Bitwarden Authenticator, which is available for iOS and Android devices. [.]

Authentication 129

Authentication Password Management Passwords Software 129

Bleeping Computer

APRIL 25, 2024

Security researchers have discovered a new Android banking trojan they named Brokewell that can capture every event on the device, from touches and information displayed to text input and the applications the user launches. [.]

Banking 139

Banking Malware Mobile 139

Quick Heal Antivirus

MARCH 21, 2024

Lately, we’ve spotted sneaky malware on Android. The post Beware: Malicious Android Malware Disguised as Government Alerts. In our high-tech world, sneaky cyber threats can pop up anywhere. appeared first on Quick Heal Blog.

Government 116

Government Malware Cyber threats Social Engineering 116

Penetration Testing

FEBRUARY 5, 2024

Google, a titan in the digital realm, has once again demonstrated its commitment to user security with the release of its February 2024 security updates for Android. This latest security bulletin brings to the... The post CVE-2024-0031: Critical Android Remote Code Execution Vulnerability appeared first on Penetration Testing.

Penetration Testing 145

Penetration Testing 145

Malwarebytes

FEBRUARY 27, 2024

For the most popular operating system in the world—which is Android and it isn’t even a contest —there’s a sneaky cyberthreat that can empty out a person’s bank accounts to fill the illicit coffers of cybercriminals. What are Android banking trojans? Take the SharkBot banking trojan, which Malwarebytes detects and stops.

Banking 142

Banking Passwords Accountability Malware 142

Bleeping Computer

MAY 3, 2024

A Mullvad VPN user has discovered that Android devices leak DNS queries when switching VPN servers even though the "Always-on VPN" feature was enabled with the "Block connections without VPN" option. [.]

DNS 139

DNS VPN 139

Malwarebytes

APRIL 1, 2024

The researchers at HUMAN found 28 apps on Google Play that turned unsuspecting Android devices into proxies for criminals. Protection and removal Android users are now automatically protected from the PROXYLIB attack by Google Play Protect, which is on by default on Android devices with Google Play Services.

VPN 129

VPN Mobile Advertising Marketing 129

Malwarebytes

APRIL 3, 2024

In April’s update for the Android operating system (OS) , Google has patched 28 vulnerabilities, one of which is rated critical for Android devices equipped with Qualcomm chips. You can find your device’s Android version number, security update level, and Google Play system level in your Settings app.

Firmware 109

Firmware Software Mobile Risk 109

Bleeping Computer

MAY 14, 2024

On Monday, Apple and Google jointly announced a new privacy feature that warns Android and iOS users when an unknown Bluetooth tracking device travels with them. [.]

Mobile 109

Mobile 109

Bleeping Computer

MAY 2, 2024

Microsoft has highlighted a novel attack dubbed "Dirty Stream," which could allow malicious Android apps to overwrite files in another application's home directory, potentially leading to arbitrary code execution and secrets theft. [.]

Mobile 114

Mobile 114

The Hacker News

MAY 1, 2024

Cybersecurity researchers have discovered a previously undocumented malware targeting Android devices that uses compromised WordPress sites as relays for its actual command-and-control (C2) servers for detection evasion. Wpeeper is a typical backdoor Trojan for Android

Malware 113

Malware Cybersecurity 113

Penetration Testing

APRIL 29, 2024

A sophisticated new Android malware threat is making the rounds, and its methods are alarmingly effective.

Penetration Testing 108

Penetration Testing Malware 108

Security Affairs

FEBRUARY 6, 2024

Google released Android ’s February 2024 security patches to address 46 vulnerabilities, including a critical remote code execution issue. Google released Android February 2024 security patches to address 46 vulnerabilities, including a critical remote code execution flaw tracked as CVE-2024-0031.

Hacking 119

Hacking Software Mobile Information Security 119

The Hacker News

APRIL 18, 2024

A new Android trojan called SoumniBot has been detected in the wild targeting users in South Korea by leveraging weaknesses in the manifest extraction and parsing procedure.

Malware 108

Malware 108

Security Affairs

MAY 3, 2024

Microsoft devised an attack technique, dubbed ‘Dirty Stream,’ impacting widely used Android applications, billions of installations are at risk. Microsoft is warning Android users about a new attack technique, named Dirty Stream, that can allow threat actors to take control of apps and steal sensitive data.

Risk 94

Risk Accountability Hacking Mobile 94

Penetration Testing

APRIL 30, 2024

A sophisticated Android backdoor known as “Wpeeper” has abruptly ceased activity after a short but potent campaign, sparking alarm within the cybersecurity community.

Penetration Testing 101

Penetration Testing Cybersecurity Malware 101

Penetration Testing

DECEMBER 22, 2023

In the ever-evolving world of cyber threats, a new player has emerged in the Android ecosystem, known as “Android/Xamalicious.”

Penetration Testing 88

Penetration Testing Malware Cyber threats Mobile 88

Security Affairs

APRIL 27, 2024

ThreatFabric researchers identified a new Android malware called Brokewell, which implements a wide range of device takeover capabilities. The repository contained the source code for a ‘Brokewell Android Loader,’ Brokewell and the loader were both developed by a threat actor called Baron Samedit.

Malware 107

Malware Spyware Authentication Mobile 107

Bleeping Computer

MAY 15, 2024

Today, Google announced new security features coming to Android 15 and Google Play that will help block scams, fraud, and malware apps on users' devices. [.]

Malware 96

Malware Scams Mobile 96

Bleeping Computer

MARCH 30, 2024

Security researchers found a new version of the Vultur banking trojan for Android that includes more advanced remote control capabilities and an improved evasion mechanism. [.]

Banking 139

Banking Malware Mobile 139

SecureBlitz

FEBRUARY 22, 2024

Google has issued a crucial security update for Android patches, addressing critical vulnerabilities that could expose millions of devices to cyberattacks. Millions of Android users worldwide are vulnerable to attack after Google revealed critical security flaws affecting many devices.

Data breaches 92

Data breaches Risk Cybersecurity 92

Tech Republic Security

NOVEMBER 8, 2023

A new malware is bypassing an Android 13 security measure that restricts permissions to apps downloaded out of the legitimate Google Play Store.

Malware 175

Malware Phishing Software Mobile 175

Google Security

OCTOBER 9, 2023

Posted by Andrew Walbran, Android Rust Team Last year we wrote about how moving native code in Android from C++ to Rust has resulted in fewer security vulnerabilities. Many security-critical components of an Android system run in a “bare-metal” environment, outside of the Linux kernel, and these are historically written in C.

Firmware 138

Firmware Architecture Engineering 138

Tech Republic Security

APRIL 4, 2024

Explore the best password managers for Android devices that offer secure storage and easy access to your passwords. Find out which one suits your needs best.

Password Management 104

Password Management Passwords 104

Penetration Testing

MARCH 4, 2024

On Monday, Google unveiled a comprehensive update addressing a total of 38 vulnerabilities within the Android ecosystem, spotlighting a particularly critical bug (CVE-2024-0039) that could allow malicious actors to execute code remotely on a... The post CVE-2024-0039: Critical Android Remote Code Execution Vulnerability appeared first on (..)

Penetration Testing 108

Penetration Testing 108

The Hacker News

APRIL 26, 2024

Fake browser updates are being used to push a previously undocumented Android malware called Brokewell. Brokewell is a typical modern banking malware equipped with both data-stealing and remote-control capabilities built into the malware," Dutch security firm ThreatFabric said in an analysis published Thursday.

Malware 116

Malware Banking 116

Bleeping Computer

JANUARY 14, 2024

GrapheneOS, a privacy and security-focused Android-based operating system, has posted a series of tweets on X suggesting that Android should introduce frequent auto-reboots to make it harder for forensic software vendors to exploit firmware flaws and spy on the users. [.]

Firmware 127

Firmware Software Mobile 127

Bleeping Computer

APRIL 30, 2024

Google has increased rewards for reporting remote code execution vulnerabilities within select Android apps by ten times, from $30,000 to $300,000, with the maximum reward reaching $450,000 for exceptional quality reports. [.]

126

126

Bleeping Computer

MARCH 26, 2024

Over 15 free VPN apps on Google Play were found using a malicious software development kit that turned Android devices into unwitting residential proxies, likely used for cybercrime and shopping bots. [.]

VPN 142

VPN Cybercrime Software Mobile 142

The Hacker News

MAY 2, 2024

Several popular Android applications available in Google Play Store are susceptible to a path traversal-affiliated vulnerability that could be exploited by a malicious app to overwrite arbitrary files in the vulnerable app's home directory.

124

124