My Bank - Customized SSL, External URLs, KeyStore usage vulnerabilities

HackApp vulnerability scanner discovered that application My Bank published at the 'play' market has multiple vulnerabilities...

REINER SCT ONLINEBANKING - Corrupted files, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application REINER SCT ONLINEBANKING published at the 'play' market has multiple vulnerabilities...

SÜDWESTBANK-Banking - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application SÜDWESTBANK-Banking published at the 'play' market has multiple vulnerabilities...

Banking PayCenter - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Banking PayCenter published at the 'play' market has multiple vulnerabilities...

Service CU Mobile Banking - Customized SSL, Redefined SSL Common Names verifier, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Service CU Mobile Banking published at the 'play' market has multiple vulnerabilities...

Volksbank Mobile Banking - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Volksbank Mobile Banking published at the 'play' market has multiple vulnerabilities...

BBBank-Banking - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application BBBank-Banking published at the 'play' market has multiple vulnerabilities...

1822direkt-Banking App - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application 1822direkt-Banking App published at the 'play' market has multiple vulnerabilities...

PSD Banking - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application PSD Banking published at the 'play' market has multiple vulnerabilities...

Commerzbank Tablet Banking - GPL license, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Commerzbank Tablet Banking published at the 'play' market has multiple vulnerabilities...

TARGOBANK Mobile Banking - Corrupted files, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application TARGOBANK Mobile Banking published at the 'play' market has multiple vulnerabilities...

DKB-Banking - Base64 encoded String, Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application DKB-Banking published at the 'play' market has multiple vulnerabilities...

Here's How Hackers Stole $80 Million from Bangladesh Bank

The recent cyber attack on Bangladesh's central bank that let hackers stole over $80 Million from the institutes' Federal Reserve bank account was reportedly caused due to the Malware installed on the Bank's computer systems. Few days ago, reports emerged of a group of unknown hackers that broke...

ICBC Mobile Banking(Argentina) - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application ICBC Mobile BankingArgentina published at the 'play' market has multiple vulnerabilities...

GM Bot Banking Malware Source Code Leak

Source code for the potent Android malware GM Bot has been leaked to underground forums, according to IBM security experts. The impact, IBM X-Force threat intelligence says, will be an uptick in GM Bot variants and the number of attacks targeting financial applications on Android-based devices...

GM Bot (Android Malware) Source Code Leaked Online

The source code of a recently discovered Android banking Trojan that has the capability to gain administrator access on your smartphone and completely erase your phone's storage has been LEAKED online. The banking Trojan family is known by several names; Security researchers from FireEye dubbed i...

openSUSE Security Update : Chromium (openSUSE-2016-238)

This update to Chromium 48.0.2564.109 fixes the following issues : Security fixes boo965999 : - CVE-2016-1622: Same-origin bypass in Extensions - CVE-2016-1623: Same-origin bypass in DOM - CVE-2016-1624: Buffer overflow in Brotli - CVE-2016-1625: Navigation bypass in Chrome Instant - CVE-2016-162...

openSUSE Security Update : Chromium (openSUSE-2016-221)

This update to Chromium 48.0.2564.109 fixes the following issues : Security fixes boo965999 : - CVE-2016-1622: Same-origin bypass in Extensions - CVE-2016-1623: Same-origin bypass in DOM - CVE-2016-1624: Buffer overflow in Brotli - CVE-2016-1625: Navigation bypass in Chrome Instant - CVE-2016-162...

FLARE Script Series: flare-dbg Plug-ins

Introduction This post continues the FireEye Labs Advanced Reverse Engineering FLARE script series. In this post, we continue to discuss the flare-dbg project. If you haven’t read my first post on using flare-dbg to automate string decoding, be sure to check it out! We created the flare-dbg Pytho...

Hackers behind Dyre Malware Busted in Police Raid

The world's most notorious financial hacking operation disrupted by Russian authorities in November, when they raided the offices associated with a Moscow-based film and production company named 25th Floor. According to the Russian authorities, 25th Floor was allegedly involved in distributing th...