Android Malware in gaming apps on Play Store downloaded 4 million times

By Waqas Just another day with just another Android malware targeting unsuspecting This is a post from HackRead.com Read the original post: Android Malware in gaming apps on Play Store downloaded 4 million times...

Facebook Hacking Android Malware GhostTeam Found in 53 Play Store Apps

By Waqas Another day, another Android malware targeting those who download apps This is a post from HackRead.com Read the original post: Facebook Hacking Android Malware GhostTeam Found in 53 Play Store Apps...

Facebook Password Stealing Apps Found on Android Play Store

Even after many efforts made by Google last year, malicious apps always somehow manage to make their ways into Google app store. Security researchers have now discovered a new piece of malware, dubbed GhostTeam, in at least 56 applications on Google Play Store that is designed to steal Facebook...

МТС Банк - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application МТС Банк published at the 'play' market has multiple vulnerabilities...

A week in security (January 8 – January 14)

It's very early in the year, yet everyone has already had a complete meltdown pun intended over a number of serious vulnerabilities found in legacy and modern microprocessors. Last week, rightly so, vendors released patches for hardware and OSes to help mitigate these threats. However, problems i...

60 Android apps for kids found infected with Pornographic malware

By Waqas There is nothing surprising about Play Store hosting malware which This is a post from HackRead.com Read the original post: 60 Android apps for kids found infected with Pornographic malware...

Malware infected fake Telegram Messenger app found in Play Store

By Waqas The Google Play Store is home to more than 3.5 This is a post from HackRead.com Read the original post: Malware infected fake Telegram Messenger app found in Play Store...

Apps Exposing Children to Porn Ads Booted From Google Play

Sixty app were removed from the Google Play marketplace in December that were infected with malware dubbed AdultSwine that in some cases generated pornographic ads on apps aimed at children. The developers behind the malicious apps also scammed victims with scareware techniques and attempted to...

Unauthorized access vulnerability in Xiaomi Box

Xiaomi Box is a high-definition Internet TV box. Xiaomi Box suffers from an unauthorized access vulnerability, which is due to the failure of the Xiaomi Box server to verify authorization for service access. An attacker can use this vulnerability to install and uninstall applications, play...

Android Malware written in Kotlin found on Play Store stealing data

By Waqas Just another day with just another Android malware hosted on This is a post from HackRead.com Read the original post: Android Malware written in Kotlin found on Play Store stealing data...

Hundreds of Android Gaming Apps are Tracking Your TV Viewing Habits

By Waqas There are more than 250 Android gaming apps on Google Play This is a post from HackRead.com Read the original post: Hundreds of Android Gaming Apps are Tracking Your TV Viewing Habits...

Fake Android apps caught dropping Coinhive miner

By Waqas In October last year, three Android apps on Play Store This is a post from HackRead.com Read the original post: Fake Android apps caught dropping Coinhive miner...

January 5, 2017 – Morning Cyber Coffee Headlines – “Monopoly” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! January 5, 2018 - Headlines Carbon Black in the News: Cybersecurity news round-...

Google Play Removes 22 Malicious ‘LightsOut’ Apps From Marketplace

Nearly two dozen Android flashlight and related utility apps were removed from the Google Play marketplace after researchers found a malicious advertising component dubbed “LightsOut” inside them. In total, the apps were downloaded between 1.5 and 7.5 million times. Security researchers at Check...

My Telekom - Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Telekom published at the 'play' market has multiple vulnerabilities...

Play XML External Entity Injection Vulnerability

Play is a set of open source Java Web application framework. The framework is scalable , low resource consumption and so on. An XML external entity injection vulnerability exists in the Java XML functionality in Play versions prior to 2.2.6 and 2.3.x versions prior to 2.3.5. A remote attacker can...

Huawei UPnP DeviceUpgrade command injection

Added: 01/02/2018 BID: 102344 Background Huawei home routers support the DeviceUpgrade service type over the Universal Plug and Play UPnP protocol to facilitate upgrading of firmware. Problem A remote authenticated attacker can execute arbitrary commands injected into the NewStatusURL XML element...

Huawei UPnP DeviceUpgrade command injection

Added: 01/02/2018 BID: 102344 Background Huawei home routers support the DeviceUpgrade service type over the Universal Plug and Play UPnP protocol to facilitate upgrading of firmware. Problem A remote authenticated attacker can execute arbitrary commands injected into the NewStatusURL XML element...

Dojo by BullGuard - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Dojo by BullGuard published at the 'play' market has multiple vulnerabilities...

CVE-2014-3630

XML external entity XXE vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspecified other impact via crafted XML data...