androidqf

androidqf androidqf（Android 快速取证）是一款便携式工具，用于简化从 Android 设备中获取相关取证数据的过程。 androidqf 旨在提供一种简单便携的跨平台工具，以便快速从 Android 设备中获取数据。其在功能上与 mvt-android 类似。但与 MVT 不同，androidqf 设计为即使是非技术用户也能轻松运行。通过 androidqf 提取的数据可使用 MVT 进行分析。 本仓库是 androidqf 的一个分支，由 国际特赦组织安全实验室 维护。androidqf 工具最初由 Claudio Guarnieri 开发。 下载...

inside-pegasus

Inside Pegasus: documentos clave de WhatsApp v. NSO Group Una selección de documentos internos del Grupo NSO, materiales de producto y testimonios jurados que entraron en el registro público en WhatsApp Inc. and Meta Platforms, Inc. v. NSO Group Technologies Limited and Q Cyber Technologies Limit...

mvt

移动设备验证工具包（Mobile Verification Toolkit） !IMPORTANT 我们最近合并了“v3”分支。这引入了破坏性变更。如果您在其他脚本中依赖 mvt 的输出，它们可能已失效。更多详情：https://github.com/mvt-project/mvt/issues/757 移动设备验证工具包（Mobile Verification Toolkit，MVT）是一组实用工具，用于简化和自动化收集取证痕迹的过程，以帮助识别 Android 和 iOS 设备可能遭受的入侵。 该工具由大赦国际安全实验室于 2021 年 7...

investigations

调查 本仓库包含从国际特赦组织针对人权捍卫者遭受定向威胁的部分技术调查中提取的危害指标。 这些指标根据 CC-BY 许可协议共享。...

Amnesty International Warns That World Cup Fans Face Potential Human Rights Violations

The organization claims that the FIFA tournament could have impacts on the rights of local people and visiting soccer fans in all three host countries...

Android Adds Intrusion Logging for Sophisticated Spyware Forensics

Google on Tuesday unveiled a new opt-in Android feature called Intrusion Logging for storing forensic logs to better analyze sophisticated spyware attacks. Intrusion Logging, available as part of Advanced Protection Mode, enables "persistent and privacy-preserving forensics logging to allow for...

Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits

Qualcomm has rolled out security updates to address nearly two dozen flaws spanning proprietary and open-source components, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2024-43047 CVSS score: 7.8, has been described as a...

Analysis of Intellexa’s Predator Spyware

Amnesty International has published a comprehensive analysis of the Predator government spyware products. These technologies used to be the exclusive purview of organizations like the NSA. Now theyre available to every country on the planet--democratic, nondemocratic, authoritarian, whatever--for...

Experts Warn of SandStrike Android Spyware Infecting Devices via Malicious VPN App

A previously undocumented Android spyware campaign has been found striking Persian-speaking individuals by masquerading as a seemingly harmless VPN application. Russian cybersecurity firm Kaspersky is tracking the campaign under the moniker SandStrike. It has not been attributed to any particular...

DoNot Team Hackers Updated its Malware Toolkit with Improved Capabilities

The Donot Team threat actor has updated its Jaca Windows malware toolkit with improved capabilities, including a revamped stealer module designed to plunder information from Google Chrome and Mozilla Firefox browsers. The improvements also include a new infection chain that incorporates previousl...

NSO Group’s Pegasus Spyware Used against Thailand Pro-Democracy Activists and Leaders

Yet another basic human rights violation, courtesy of NSO Group: Citizen Lab has the details: Key Findings We discovered an extensive espionage campaign targeting Thai pro-democracy protesters, and activists calling for reforms to the monarchy. We forensically confirmed that at least 30 individua...

Apple Lawsuit Amps Up Pressure on Pegasus Spyware-Maker

In the wake of a zero-click zero-day exploit that was deployed against iPhone users, Apple has filed a lawsuit against NSO Group. The complaint alleges that the maker of the infamous Pegasus mobile spyware is responsible for the illegal surveillance of Apple users. The computing giant is looking...

amnesty-tub.de Improper Access Control vulnerability OBB-2182422

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amnesty-asperg.de Improper Access Control vulnerability OBB-2172681

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amnesty-passau.de Improper Access Control vulnerability OBB-2172685

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amnesty-papenburg.de Improper Access Control vulnerability OBB-2172683

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Amnesty Intl. accuses Indian cyber security firm of spyware attacks

By Waqas According to Amnesty International, it found evidence that attackers testing the spyware were using the IP address of Indian cyber security firm Innefu Labs. This is a post from HackRead.com Read the original post: Amnesty Intl. accuses Indian cyber security firm of spyware attacks...

amnesty.dk Improper Access Control vulnerability OBB-2157861

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Beware of Fake Amnesty International Antivirus for Pegasus that Hacks PCs with Malware

In yet another indicator of how hacking groups are quick to capitalize on world events and improvise their attack campaigns for maximum impact, threat actors have been discovered impersonating Amnesty International to distribute malware that purports to be security software designed to safeguard...

A wolf in sheep's clothing: Actors spread malware by leveraging trust in Amnesty International and fear of Pegasus

By Vitor Ventura and Arnaud Zobec. Threat actors are impersonating the group Amnesty International and promising to protect against the Pegasus spyware as part of a scheme to deliver malware. Amnesty International recently made international headlines when it released a groundbreaking report on...