Take my money: OCR crypto stealers in Google Play and App Store

Update 07.02.2025: Google removed malicious apps from Google Play. Update 06.02.2025: Apple removed malicious apps from the App Store. In March 2023, researchers at ESET discovered malware implants embedded into various messaging app mods. Some of these scanned users' image galleries in search of...

Exploit for Improper Input Validation in Apple Itunes_U

CVE-2021-30862 In 2021, CodeColorist released his writeups on...

CVE-2024-4130

A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges...

CVE-2024-10254

A potential buffer overflow vulnerability was reported in PC Manager, Lenovo Browser, and Lenovo App Store that could allow a local attacker to cause a system crash...

Lenovo PC Manager、Lenovo Browser和Lenovo App Store 安全漏洞

Lenovo App Store and others are products of Lenovo, a Chinese company.Lenovo App Store is a desktop application.Lenovo Browser is a browser.Lenovo PC Manager is a PC management software. A security vulnerability exists in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store that stems from the...

PT-2025-1584 · Lenovo · Lenovo Pcmanager +2

Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager affected versions not specified Lenovo Browser affected versions not specified Lenovo App Store affected versions not specified Description: A potential buffer overflow issue was reported that could allow a local attacker to...

Lenovo PC Manager、Lenovo Browser和Lenovo App Store 安全漏洞

Lenovo App Store and others are products of Lenovo, a Chinese company.Lenovo App Store is a desktop application.Lenovo Browser is a browser.Lenovo PC Manager is a PC management software. A security vulnerability exists in Lenovo PC Manager, Lenovo Browser, and Lenovo App Store that stems from the...

PT-2025-1583 · Lenovo · Lenovo Pcmanager +2

Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager affected versions not specified Lenovo Browser affected versions not specified Lenovo App Store affected versions not specified Description: A potential TOCTOU vulnerability was reported that could allow a local attacker to...

CVE-2024-4130

A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges...

CVE-2024-4130

A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges...

CVE-2024-4130

CVE-2024-4130 corresponds to a DLL hijack vulnerability in Lenovo App Store that could allow a local attacker to execute code with elevated privileges. The connected documents consistently describe a local-privilege-escalation impact via a DLL hijack in Lenovo App Store, but do not furnish concre...

CVE-2024-4130

A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges...

CVE-2024-4130

A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges...

PT-2024-29350 · Lenovo · Lenovo App Store

Name of the Vulnerable Software and Affected Versions: Lenovo App Store affected versions not specified Description: A DLL hijack vulnerability was reported that could allow a local attacker to execute code with elevated privileges. Recommendations: At the moment, there is no information about a...

Lenovo App Store 安全漏洞

Lenovo App Store is a desktop application from the Chinese company Lenovo Lenovo. A security vulnerability exists in Lenovo App Store. A local attacker could exploit the vulnerability to elevate privileges and execute code...

Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

A large-scale fraud campaign leveraged fake trading apps published on the Apple App Store and Google Play Store, as well as phishing sites, to defraud victims, per findings from Group-IB. The campaign is part of a consumer investment fraud scheme that's also widely known as pig butchering, in whi...

Xiaomi GetApps 安全漏洞

Xiaomi GetApps is a global app store by Chinese company Xiaomi. It is used by developers to publish and distribute their apps to over 200 million users in 59 regions. A security vulnerability exists in Xiaomi GetApps that stems from a bypass of the authentication logic, which could allow an...

Xiaomi GetApps 安全漏洞

Xiaomi GetApps is a global app store by the Chinese company Xiaomi. A code execution vulnerability exists in Xiaomi GetApps, which can be exploited by an attacker to execute arbitrary code...

Xiaomi GetApps 安全漏洞

Xiaomi GetApps is a global app store by Chinese company Xiaomi. It is used by developers to publish and distribute their apps to over 200 million users in 59 regions. A security vulnerability exists in Xiaomi GetApps that stems from authentication logic that can be bypassed...

Telegram Founder Pavel Durov Arrested in France for Content Moderation Failures

Pavel Durov, founder and chief executive of the popular messaging app Telegram, was arrested in France on Saturday, according to French television network TF1. Durov is believed to have been apprehended pursuant to a warrant issued in connection with a preliminary police investigation. TF1 said t...