Resurrection of the Evil Miner

At FireEye Labs, we recently detected the resurgence of a coin mining campaign with a novel and unconventional infection vector in the form of an iFRAME inline frame – an HTML document embedded inside another HTML document on a web page that allows users to get content from another separate sourc...

Escape Game：Coin locker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Escape Game：Coin locker published at the 'play' market has multiple vulnerabilities...

Candy Party: Coin Carnival - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Candy Party: Coin Carnival published at the 'play' market has multiple vulnerabilities...

Chameleon Coin Pusher - Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Chameleon Coin Pusher - Free published at the 'play' market has multiple vulnerabilities...

Coin Stars: Slots Pusher! - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coin Stars: Slots Pusher! published at the 'play' market has multiple vulnerabilities...

Farm Dozer: Coin Carnival - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Farm Dozer: Coin Carnival published at the 'play' market has multiple vulnerabilities...

Coin Dozer Halloween - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coin Dozer Halloween published at the 'play' market has multiple vulnerabilities...

Zombie Party: Coin Mania - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Zombie Party: Coin Mania published at the 'play' market has multiple vulnerabilities...

Coin Pirates - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Coin Pirates published at the 'play' market has multiple vulnerabilities...

Pharaoh's Party: Coin Pusher - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pharaoh's Party: Coin Pusher published at the 'play' market has multiple vulnerabilities...

Coin Dozer: Seasons - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Coin Dozer: Seasons published at the 'play' market has multiple vulnerabilities...

Coin Party: Carnival Pusher - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coin Party: Carnival Pusher published at the 'play' market has multiple vulnerabilities...

Coin Dozer - Free Prizes - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coin Dozer - Free Prizes published at the 'play' market has multiple vulnerabilities...

Kingdom Coins - Dozer of Coin - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Kingdom Coins - Dozer of Coin published at the 'play' market has multiple vulnerabilities...

Coin Counter - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Coin Counter published at the 'play' market has multiple vulnerabilities...

Simple Coin Flip (Phone+Wear) - External URLs, Suspicious files, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Simple Coin Flip Phone+Wear published at the 'play' market has multiple vulnerabilities...

Block.io: Bypassed or command injection

Respected sir, Step1:sign up an account Step2:set secret pin Step3:After that a tick box is asking " I will lose my coins if I forget my Secret PIN and Secret Mnemonic. I know this.".. Step4:If you check the tick box , the button "done" will enable.It is mandatory to check the box. The bug is, I...

phpCOIN 1.2 login.php phpcoinsessid Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13433/info PHPCoin is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

phpCOIN 1.2 Pages Module Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/13433/info PHPCoin is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

Hacking Maytag: Coin-Operated Laudromat Machines

Most Maytag commercial washers and dryers out there use a common controller platform. It dates back to the 80s and is still produced. So almost all Maytag with digital control panel is exploitable in this way. The identifying features are green vacuum florescent display with a four-digit numerica...