CVE-2022-20191

Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/A...

CVE-2022-20170

Product: AndroidVersions: Android kernelAndroid ID: A-209421931References: N/A...

International Authorities Take Down Flubot Malware Network

International law enforcement has taken down the infrastructure behind Flubot, a nasty piece of malware which had been spreading with unprecedented speed across Android devices globally since December 2020. Europol revealed Wednesday that a collaboration between law enforcement in 11 countries le...

Latest Mobile Malware Report Suggests On-Device Fraud is on the Rise

An analysis of the mobile threat landscape in 2022 shows that Spain and Turkey are the most targeted countries for malware campaigns, even as a mix of new and existing banking trojans are increasingly targeting Android devices to conduct on-device fraud ODF. Other frequently targeted countries...

EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS Vulnerabilities

A nascent Linux-based botnet named Enemybot has expanded its capabilities to include recently disclosed security vulnerabilities in its arsenal to target web servers, Android devices, and content management systems CMS. "The malware is rapidly adopting one-day vulnerabilities as part of its...

GSD-2022-1002518 CWE-158: Improper Neutralization of Null Byte or NUL Character in iPhone, iPad version ALL

In Apple iPhone, iPad version ALL a CWE-158: Improper Neutralization of Null Byte or NUL Character exists in the QR/Barcode Scanner that can be attacked via Phishing, Social engineering resulting in As other scanners checked, such as on various Android devices, escape or strip the QR with embedde...

Another Set of Joker Trojan-Laced Android Apps Resurfaces on Google Play Store

A new set of trojanized apps spread via the Google Play Store has been observed distributing the notorious Joker malware on compromised Android devices. Joker, a repeat offender, refers to a class of harmful apps that are used for billing and SMS fraud, while also performing a number of actions o...

CVE-2021-25266

An insecure data storage vulnerability allows a physical attacker with root privileges to retrieve TOTP secret keys from unlocked phones in Sophos Authenticator for Android version 3.4 and older, and Intercept X for Mobile Android before version 9.7.3495...

Samsung Accessibility安全漏洞

Samsung Accessibility is a Samsung accessibility feature from Samsung, South Korea. It is used to control Android devices. A security vulnerability exists in Samsung Accessibility, which stems from the use of PendingEvent in Accessibility, and is exploited by an attacker to access files with syst...

Android Security Bulletin—April 2022Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2022-04-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

PT-2022-10943

Name of the Vulnerable Software and Affected Versions Android SoC versions affected versions not specified Description The ismsEx service, an extension of the SMS system service in Unisoc equipment, fails to check the permissions of the caller, resulting in permission leaks. This allows third-par...

PT-2022-1682 · Microsoft · Teams

Name of the Vulnerable Software and Affected Versions: Microsoft Teams affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Teams for Android and iOS operating systems. It may allow a remote attacker to cause a denial of service...

Roaming Mantis reaches Europe

Roaming Mantis is a malicious campaign that targets Android devices and spreads mobile malware via smishing. We have been tracking Roaming Mantis since 2018, and published five blog posts about this campaign: Roaming Mantis uses DNS hijacking to infect Android smartphones Roaming Mantis dabbles i...

Widespread FluBot and TeaBot Malware Campaigns Targeting Android Devices

Researchers from the Bitdefender Mobile Threats team said they have intercepted more than 100,000 malicious SMS messages attempting to distribute Flubot malware since the beginning of December. "Findings indicate attackers are modifying their subject lines and using older yet proven scams to enti...

‘Dark Herring’ Billing Malware Swims onto 105M Android Devices

Nearly 500 malicious apps lurking on the Google Play Store have successfully installed Dark Herring malware — a cash-stealer intended to add sneaky charges onto mobile carrier bills — on more than 100 million Android devices across the globe. That’s quite a school of fish. Dark Herring malware wa...

Microsoft Intune NAC check in Citrix SSO app not working for newly enrolled Andorid devices

Intune NAC check in Citrix SSO app is not working with Citrix Gateway on Android 9.0+ devices...

CVE-2021-39645

Product: AndroidVersions: Android kernelAndroid ID: A-199805112References: N/A...

Android devices fail to enroll into XenMobile after upgrading Netscaler

The following symptoms are seen: Android devices fail to enrollinto XenMobile The error"Security policy does not allow you to connect" is seen in Secure Hub Android devices enrolling with Device Administrator mode legacy are the ones that see this adverse behavior the most but a smaller group of...

FAQ: Citrix Secure Web and Proxy Support

This article answers the frequently asked questions on Secure Web and Web proxy support. For more information about Secure Web and proxy support, refer to Citrix Documentation - Citrix Secure Web. The support for PAC file inMDX application is removed as of September 2021. This means Citrix has...

XenMobile Android Enterprise & iOS devices failed to enroll after ADC upgrade to 13.0-82.41+ or 12.1-62.23+

In a deployment of Citrix ADC Gateway + XenMobile Server on-premise. When Citrix ADC upgrade to 13.0-82.41+ or12.1-62.23+ version or XenMobile Android Enterprise and iOS device enrollment will fail...