76 matches found
This iPhone Malware infecting Jailbroken Devices Stole 225,000 Apple Accounts
Jailbreakers Beware! Some shady tweaks that you installed on their jailbroken devices are looking to steal your iCloud login credentials, a report said. The iCloud account details, including email addresses and passwords, of nearly 220,000 jailbreak users have been breached, an online Chinese...
Hacking Team Couldn't Hack Your iPhone
More than 36 hours after the huge cache of data from Hacking Teamâs corporate network was dumped online, researchers are continuing to find surprising bits and pieces in the documents. Among them is evidence that the company had an enterprise developer certificate from Apple, allowing it to devel...
WhatsSpy - Trace the moves of a WhatsApp user
WhatsSpy Public is an web-oriented application that tracks every move of whoever you like to follow. This application is setup as an Proof of Concept that Whatsapp is broken in terms of privacy. Once you've setup this application you can track users that you want to follow on Whatsapp. Once it's...
Espionage Campaign targets iOS devices with Malware apps
A malware campaign has been found targeting iOS devices linked to a wide range of entities, including European defense organizations, governments, and media sectors with dangerous espionage spyware capable of breaching non-jailbroken devices, a recent report claims. The spyware campaign, dubbed...
Yik Yak Patches Privacy Flaw in iOS App
Yik Yak, an application that allows users to share purportedly anonymous status updates with others near them, has fixed a critical vulnerability in its iOS app that could have de-anonymized users and let attackers take total control of someoneâs account. Yik Yakâs security team was apparently...
Xsser Trojan Spies on Jailbroken iOS Devices in Hong Kong
An iOS version of an Android espionage Trojan targeting activists and protestors in Hong Kong has been discovered on the command and control server hosting the Android malware. The iOS version, a mobile remote access Trojan dubbed Xsser by Lacoon Mobile Security, affects only jailbroken iOS...
AdThief iOS Malware Affecting 75K Jailbroken Devices
A relatively new form of malware on iOS is estimated to have stolen revenue from 22 million ads and infected upwards to 75,000 devices so far. The malware, iOS/AdThief, was first identified back in March but wasnât fully articulated until Axelle Aprville, a researcher with Fortinet, looked into t...
'AdThief' Chinese Malware Infects Over 75,000 Jailbroken iOS devices
If you have jailbroken your iPhone, iPad, or iPod touch and have downloaded pirated tweaks from pirated repositories, then you may be infected by âAdThiefâ malware, a Chinese malware that is now installed on more than 75,000 iPhone devices. According to a recent research paper published on Virus...
iOS iFileExplorer Free - Directory Traversal
No description provided by source. Exploit Title: iPod Touch/iPhone iFileExplorer Free Directory Traversal Date: 04/03/2011 UK date format Author: theSmallNothing Software Link: http://itunes.apple.com/gb/app/ifileexplorer-protect-multi/id355253462?mt=8 Version: 2.8 Tested on: iPod Touch 2G 4.1...
iphone/ipad phone drive 1.1.1 - Directory Traversal
No description provided by source. !/usr/bin/python ---------------------------------------------------------------- Software : iPhone/iPad Phone Drive 1.1.1 Type of vulnerability : Directory Traversal Tested On : iPhone 4 IOS 4.3.3/Jailbroken...
Warning: Malware Campaign targeting Jailbroken Apple iOS Devices
A new piece of malicious malware infection targeting jailbroken Apple iOS devices in an attempt to steal usersâ credentials, has been discovered by Reddit users. The Reddit Jailbreak community discovered the malicious infection dubbed as âUnflod Baby Pandaâ, on some jailbroken Apple iOS devices o...
iOS 7 Bug Could Allow Background Monitoring
Itâs only been a few days since Apple fixed the nasty certificate-validation âgoto failâ vulnerability in iOS and OSX and now word comes that another bug, one that could allow an attacker to monitor keystrokes on iOS 7 devices without the user being any the wiser, also exists. The problem...
New Apple vulnerability allows Malicious keylogger App to Record User Inputs
Yet another Apple vulnerability has been exposed by security researchers, that can be exploited to track your finger's every action on iOS Devices i.e. iPhone, iPad etc. The exploit reportedly targets a flaw in iOS multitasking capabilities to capture user inputs, according to Security researcher...
Mobile Malware Captures Keystrokes and Screengrabs
New proof-of-concept mobile malware logs keystrokes and captures screen-grabs on jailbroken iOS and Android devices in order to steal online log-in credentials and other sensitive information from targeted devices. In an interview with Threatpost, Trustwave senior security consultant Neal Hindoch...
Apple iOS Default SSH Password Vulnerability
This module exploits the default credentials of Apple iOS when it has been jailbroken and the passwords for the 'root' and 'mobile' users have not been changed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...
Android Vulnerability Bypasses App's Digital Signature
A vulnerability exists in the Android code base that would allow a hacker to modify a legitimate, digitally signed Android application package file APK and not break the appâs cryptographic signatureâan action that would normally set off a red flag that something is amiss. Researchers at startup...
Apple IOS default SSH password Exploit-vulnerability warning-the black bar safety net
When the Apple iOS jailbreak and root and mobile users use the default password, you can use the following Metasploit to Exploit the use of the test. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework...
Apple iOS Default SSH Password Vulnerability
This module exploits the default credentials of Apple iOS when it has been jailbroken and the passwords for the root' and 'mobile' users have not been changed. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit...
