Mobile Menace Monday: re-emergence of a fake Android AV

Back in early 2013, a new mobile antivirus AV company called Armor for Android emerged into the mobile security software industry that had everyone perplexed. It seemed eerily like malware known as a Fake AV, and some even gave it that label. As a younger mobile researcher, I was one of those who...

The New Mobile Threat Landscape, circa 2017 to 2018

Submitted by Ian Grutze If mobile threats diversified and expanded in 2016, they matured in 2017. Mobile ransomware continued to rear its head, burgeoning into the platform’s most prevalent threat. Simple screen lockers, for instance, evolved into file-encrypting malware, some of which even seeme...

mobile.ghanaweb.com XSS vulnerability

Open Bug Bounty ID: OBB-607546 Description| Value ---|--- Affected Website:| mobile.ghanaweb.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Google Android Buffer Out-of-Bounds Read Vulnerability

Android is a Linux-based open-source operating system jointly developed by Google and the Open Handheld Alliance OHA for short, and Qualcomm MDM9206 and other central processing unit CPU products from Qualcomm are used in different platforms. A buffer out-of-bounds read vulnerability exists in th...

CVE-2014-10043

CVE-2014-10043 affects Android devices with Qualcomm Snapdragon Mobile/Wear platforms (e.g., MSM8909W, SD 210/212/205, SD 400/410/12/800). The issue is a buffer over-read when reading PlayReady rights string information from a command buffer (sent from non-secure side) if the rights string length...

CVE-2014-10056

Concrete technical details found: CVE-2014-10056 is an Android/OpenCL-related buffer overflow affecting OpenCL applications that call clBuildProgram() with a CL_DEVICE_TYPE_CPU in the device_list, on Qualcomm CPUs SD 210/212/205 (Android prior to 2018-04-05 SPL). The CNVD-2018-08830 entry confirm...

CVE-2015-9144

CVE-2015-9144 concerns a buffer overflow in Android on Qualcomm Snapdragon Mobile and Snapdragon Wear platforms (e.g., MDM9206/9607/9615/9625/9635M/9640/9645/9650/9655, MSM8909W, SD family up to SDX20) during processing of scheduling message information. Root cause: overflow in a scheduling-messa...

CVE-2016-10407

CVE-2016-10407 affects Android platforms prior to the 2018-04-05 patch level, involving an integer overflow that can trigger a buffer overflow during a VT call on Qualcomm Snapdragon Mobile SoCs (SD 210/212/205, 400, 410/12, 430, 450, 615/16/ SD 415, 617, 625, 650/52, 800, 808, 810, 820, 835). Af...

Independent lab tests again prove the excellence of Trend Micro Mobile Security for Android

Submitted by Ian Grutze For the fourth year in a row, as shown in AV Comparatives’ Anti-Virus Comparative Android Test 2018 - January 2018, Trend Micro Mobile Security for Android shows it provides 100% protection against malware. In this independent lab test, more than 200 mobile security produc...

LeakVM - Research & Pentesting Framework For Android, Run Security Tests Instantly

LeakVM: Run security tests instantly. Why LeakVM : LeakVM fast security test on Android, by skipping the time-consuming build pen-testing laboratories, you can test on real devices or virtual devices. LeakVM makes researchers and pen-testers more productive since they can run the test on real tim...

VPN 101 – Part 2: How to Set Up the VPN/Content Shield in Trend Micro Mobile Security for iOS

Submitted by Brook Stein When you use Content Shield in Trend Micro Mobile Security for iOS, you’re protected from web threats across all iOS browsers and in apps that load websites. If you activate Age filters for your family members, they’re also protected from going to inappropriate websites...

Schneider Electric IGSS Mobile Security Misconfiguration Vulnerability

Schneider Electric IGSS Mobile is a suite of mobile applications for managing IGSS Shared Services Platform from Schneider Electric, France. A security vulnerability exists in Schneider Electric IGSS Mobile 3.01 and prior versions, which stems from a lack of certificate locking during TLS/SSL...

January 29, 2018 – Morning Cyber Coffee Headlines – “Grammys” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 29, 2018 - Headlines Carbon Black in the News: Four warnings for the...

CVE-2017-14082

An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security Enterprise versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vulnerable system...

CVE-2017-14082

An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security Enterprise versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vulnerable system...

CVE-2017-14082

Trend Micro Mobile Security for Enterprise (TMMS-E) versions 9.7 and earlier are affected by an information-disclosure vulnerability due to an uninitialized pointer in the clt_report_sms_status handling. The flaw allows an unauthenticated, remote attacker to disclose sensitive information within ...

CVE-2017-14082: Exposure of Sensitive Information to an Unauthorized Actor

An uninitialized pointer information disclosure vulnerability in Trend Micro Mobile Security Enterprise versions 9.7 and below could allow an unauthenticated remote attacker to disclosure sensitive information on a vulnerable system...

CVE-2018-5258

The Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information via a crafted certificate...

Trend Micro Mobile Security Enterprise get_dep_profile id SQL Injection (CVE-2017-14078)

An SQL injection vulnerability exists in Trend Micro Mobile Security Enterprise. The vulnerability is due to insufficient validation of the id request parameter with getdepprofile action...

Google Play Removes 22 Malicious ‘LightsOut’ Apps From Marketplace

Nearly two dozen Android flashlight and related utility apps were removed from the Google Play marketplace after researchers found a malicious advertising component dubbed “LightsOut” inside them. In total, the apps were downloaded between 1.5 and 7.5 million times. Security researchers at Check...