9127 matches found
Mobile Menace Monday: Fake WannaCry Scanner
With all the buzz around the PC ransomware WannaCry, it’s no surprise that a fake antivirus FakeAV has emerged on Google Play. Entitled WannaCry Ransomware Protector for Android, the bold claim it makes is right in its name. So how do we know this claim is false? Simple, there is no WannaCry...
A week in security (June 19 – June 25)
Last week, we expanded on all the different technologies that Malwarebytes uses to break the attack chain and our Incident Response solution. We also warned you about a Roblox Robux generator scam and a phish targeting customers of Barclays Bank. Below are notable news stories and security-relate...
Discourse - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Discourse published at the 'play' market has multiple vulnerabilities...
My Airtel-Recharge, Bill, Bank - Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application My Airtel-Recharge, Bill, Bank published at the 'play' market has multiple vulnerabilities...
Fleya - Fluid Experiences - Dynamic Code Loading, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application Fleya - Fluid Experiences published at the 'play' market has multiple vulnerabilities...
WWE SuperCard - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application WWE SuperCard published at the 'play' market has multiple vulnerabilities...
Fake GPS GO Location Spoofer Free - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Fake GPS GO Location Spoofer Free published at the 'play' market has multiple vulnerabilities...
Google Removes Two Ztorg Trojans from Play Marketplace
Google, for the second time this month, has removed malicious apps from Google Play that could have laid the groundwork for an attacker to root infected devices. A researcher with Kaspersky Lab on Tuesday described how attackers managed to evade settings set in place by Google Play’s VerifyApps...
MasterCard StartPath Insights - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application MasterCard StartPath Insights published at the 'play' market has multiple vulnerabilities...
Ztorg: from rooting to SMS
I've been monitoring Google Play Store for new Ztorg Trojans since September 2016, and have so far found several dozen new malicious apps. All of them were rooting malware that used exploits to gain root rights on the infected device. Then, in the second half of May 2017 I found one that wasn't...
MasterCard Nearby - Certificates or keys found, Corrupted files, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application MasterCard Nearby published at the 'play' market has multiple vulnerabilities...
اضافات - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application اضافات published at the 'play' market has multiple vulnerabilities...
Рамблер/почта - Certificates or keys found, Corrupted files, Dynamic Code Loading vulnerabilities
HackApp vulnerability scanner discovered that application Рамблер/почта published at the 'play' market has multiple vulnerabilities...
Space Villain Voice Changer - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Space Villain Voice Changer published at the 'play' market has multiple vulnerabilities...
Tas24 - Customized SSL, Redefined SSL Common Names verifier vulnerabilities
HackApp vulnerability scanner discovered that application Tas24 published at the 'play' market has multiple vulnerabilities...
ВьетКафе - Corrupted files, Exported components, External URLs vulnerabilities
HackApp vulnerability scanner discovered that application ВьетКафе published at the 'play' market has multiple vulnerabilities...
Чат наедине - Suspicious files, Unsafe deleting vulnerabilities
HackApp vulnerability scanner discovered that application Чат наедине published at the 'play' market has multiple vulnerabilities...
تقویم فارسی 96 - Exported components, External URLs, Possible privilege escalation vulnerabilities
HackApp vulnerability scanner discovered that application تقویم فارسی 96 published at the 'play' market has multiple vulnerabilities...
9Cookies Driver - Customized SSL, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application 9Cookies Driver published at the 'play' market has multiple vulnerabilities...