[Dexter] A Free Tool for Mobile (Android) Malware Analysis

Bluebox Labs just released Dexter, a free tool which wants to help information security professionals and malware analysts to analyze Android mobile applications in order to find malware and vulnerabilities. .png Dexter combines manual and automatic static program analysis to provide a better...

Android SwiftKey Keyboard turned into a Keylogger app

One of the best 3rd party Android Mobile Keyboard called 'SwiftKey' turned into a Keylogger Trojan by an Android developer to show the possible security threat of using pirated cracked apps from from non-official App Stores, "anyone pirating Swiftkey is taking a serious risk" developer said to 'T...

Android SwiftKey Keyboard turned into a Keylogger app

One of the best 3rd party Android Mobile Keyboard called 'SwiftKey' turned into a Keylogger Trojan by an Android developer to show the possible security threat of using pirated cracked apps from from non-official App Stores, "anyone pirating Swiftkey is taking a serious risk" developer said to 'T...

Reverse engineering, Malware and Goodware analysis of Android applications: Androguard

Androguard is a full python tool to play with Android files. DEX, ODEX APK Android’s binary xml Android resources Disassemble DEX/ODEX bytecodes Decompiler for DEX/ODEX files You can either use the cli or graphical frontend for androguard, or use androguard purely as a library for your own tools...

Android Play Market 3.9.16 with a Built-In Malware Scanner

AndroidPolice reports that Google is actively working on a built-in malware scanner for the Play Store. A new version of the Play Store app has been released and it is starting to roll out to Android owners. Google Play Store 3.9.16 includes the ability to remove apps from the All Apps list. Ther...

PT-2011-2806

Name of the Vulnerable Software and Affected Versions Android SDK versions prior to 2.3 Description The issue is related to the dexdump tool in the Android SDK, which does not properly perform structural verification. This allows user-assisted remote attackers to cause a denial of service,...

CVE-2011-1001: Improper Input Validation

dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assisted remote attackers to cause a denial of service dexdump crash and possibly execute arbitrary code via a malformed APK or dex file that calls a method using more arguments than the number ...

New Android Trojan Surfaces in China

Lookout Mobile Security discovered a new Android based Trojan called HongTouTou aka ADRD Trojan that is packaging itself in popular Android apps and delivering itself through app markets and Chinese forums. This piece of malware is requesting additional permissions from users and may also be...

CVE-2003-0650

Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. dot dot sequences in filenames in a .APK Zip file...