Collaborate Disseminate
Google’s Android smartphone platform is under fire again. Hundreds of “legitimate” apps have been infected with malicious third-party libraries—and not for the first time. These apps account for more than 320 million downloads. The so-called SimBad an… Continue reading Android Security is a Hot Mess (yet Again)
A security researcher has discovered yet another cryptocurrency-stealing malware on the official Google Play Store that was designed to secretly steal bitcoin and cryptocurrency from unwitting users.
The malware, described as a “Clipper,” masqueraded … Continue reading First Android Clipboard Hijacking Crypto Malware Found On Google Play Store
In August 2018, Bitdefender researchers stumbled across an Android malware framework, dubbed Triout, which packed massive surveillance capabilities. Bundled with a legitimate application ripped from the official Google Play marketplace, the spyware fra… Continue reading Triout Android Spyware Framework Makes a Comeback, Abusing App with 50 Million Downloads
Just because an app is available on Google Play Store doesn’t mean that it is a legitimate app. Despite so many efforts by Google, some fake and malicious apps do sneak in and land millions of unaware users on the hunting ground of scammers and hackers… Continue reading Several Popular Beauty Camera Apps Caught Stealing Users’ Photos
Even after so many efforts by Google for preventing its Play Store from malware, shady apps somehow managed to fool its anti-malware protections and get into its service to infect Android users with malware.
Two such Android apps have recently been sp… Continue reading New Android Malware Apps Use Motion Sensor to Evade Detection
Attackers managed to pass Google’s defenses and place 22 Android apps on Google Play that engaged in sophisticated advertising click fraud when installed on users’ phones. The majority of the apps were created after June 2018 and were coll… Continue reading Two Dozen Click Fraud Apps Found in Google Play
Cheetah Mobile—a prominent Chinese app company, known for its popular utility apps like Clean Master and Battery Doctor—and one of its subsidiary Kika Tech have allegedly been caught up in an Android ad fraud scheme that stole millions of dollars from … Continue reading 8 Popular Android Apps Caught Up In Million-Dollar Ad Fraud Scheme
Google Play’s policy prohibits apps or SDKs that download executable code, such as dex files or native code, from a source other than Google Play Continue reading Malware-Laced App Lurked on Google Play For a Year
A new attack campaign has been found to carry the newly discovered TimpDoor Android malware. It is distributed using phishing email messages and one of its main goals is to infiltrate the internal networks. Due to the fact that it…Read more
The post … Continue reading TimpDoor Android Malware Silently Infiltrates Networks in Coordinated Attacks
Cisco Systems patched a serious privilege escalation vulnerability in the Webex Meetings Desktop App and the Webex Productivity Tools that could be exploited remotely on local networks. The flaw has been dubbed WebExec and was found during a penetrati… Continue reading Webex Vulnerability Can Enable Remote Code Execution