SÜDWESTBANK-Banking - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SÜDWESTBANK-Banking published at the 'play' market has multiple vulnerabilities...

Service CU Mobile Banking - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Service CU Mobile Banking published at the 'play' market has multiple vulnerabilities...

Banking PayCenter - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Banking PayCenter published at the 'play' market has multiple vulnerabilities...

Volksbank Mobile Banking - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Volksbank Mobile Banking published at the 'play' market has multiple vulnerabilities...

BBBank-Banking - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application BBBank-Banking published at the 'play' market has multiple vulnerabilities...

1822direkt-Banking App - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application 1822direkt-Banking App published at the 'play' market has multiple vulnerabilities...

PSD Banking - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PSD Banking published at the 'play' market has multiple vulnerabilities...

Commerzbank Tablet Banking - GPL license, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Commerzbank Tablet Banking published at the 'play' market has multiple vulnerabilities...

TARGOBANK Mobile Banking - Corrupted files, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application TARGOBANK Mobile Banking published at the 'play' market has multiple vulnerabilities...

DKB-Banking - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application DKB-Banking published at the 'play' market has multiple vulnerabilities...

Here's How Hackers Stole $80 Million from Bangladesh Bank

The recent cyber attack on Bangladesh's central bank that let hackers stole over $80 Million from the institutes' Federal Reserve bank account was reportedly caused due to the Malware installed on the Bank's computer systems. Few days ago, reports emerged of a group of unknown hackers that broke...

ICBC Mobile Banking(Argentina) - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ICBC Mobile BankingArgentina published at the 'play' market has multiple vulnerabilities...

GM Bot Banking Malware Source Code Leak

Source code for the potent Android malware GM Bot has been leaked to underground forums, according to IBM security experts. The impact, IBM X-Force threat intelligence says, will be an uptick in GM Bot variants and the number of attacks targeting financial applications on Android-based devices...

GM Bot (Android Malware) Source Code Leaked Online

The source code of a recently discovered Android banking Trojan that has the capability to gain administrator access on your smartphone and completely erase your phone's storage has been LEAKED online. The banking Trojan family is known by several names; Security researchers from FireEye dubbed i...

openSUSE Security Update : Chromium (openSUSE-2016-238)

This update to Chromium 48.0.2564.109 fixes the following issues : Security fixes boo965999 : - CVE-2016-1622: Same-origin bypass in Extensions - CVE-2016-1623: Same-origin bypass in DOM - CVE-2016-1624: Buffer overflow in Brotli - CVE-2016-1625: Navigation bypass in Chrome Instant - CVE-2016-162...

openSUSE Security Update : Chromium (openSUSE-2016-221)

This update to Chromium 48.0.2564.109 fixes the following issues : Security fixes boo965999 : - CVE-2016-1622: Same-origin bypass in Extensions - CVE-2016-1623: Same-origin bypass in DOM - CVE-2016-1624: Buffer overflow in Brotli - CVE-2016-1625: Navigation bypass in Chrome Instant - CVE-2016-162...

FLARE Script Series: flare-dbg Plug-ins

Introduction This post continues the FireEye Labs Advanced Reverse Engineering FLARE script series. In this post, we continue to discuss the flare-dbg project. If you haven’t read my first post on using flare-dbg to automate string decoding, be sure to check it out! We created the flare-dbg Pytho...

Hackers behind Dyre Malware Busted in Police Raid

The world's most notorious financial hacking operation disrupted by Russian authorities in November, when they raided the offices associated with a Moscow-based film and production company named 25th Floor. According to the Russian authorities, 25th Floor was allegedly involved in distributing th...

Someone Hijacks Botnet Network & Replaces Malware with an Antivirus

The Dridex banking trojan that is widely being used by cyber criminals to distribute malware onto users’ machines has now been found distributing a security software. A portion of the Dridex banking Trojan botnet may have been hacked or compromised by an unknown Whitehat Hacker, who replaced the...

URLZone Back and Targeting Japanese Banks

After a good two to three years of relative silence, the gang behind the banking Trojan URLZone has become more active over the past few months and taken aim at banks across Europe and beginning last month, Japan. Attackers have begun sending spam emails with poisoned attachments to customers at ...