Phony Google Update Spreads Android Malware

Android users are being warned of a phony Google update that is pushing malware onto devices. The attackers behind this scheme are domain squatting URLs that are similar to ones used by Google for legitimate updates, hoping to snare less-than-vigilant users. Researchers at Zscaler said yesterday ...

4Players - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 4Players published at the 'play' market has multiple vulnerabilities...

Nobby - AWS Credentials, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Nobby published at the 'play' market has multiple vulnerabilities...

Aeroflot - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Aeroflot published at the 'play' market has multiple vulnerabilities...

PosteMobile - Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application PosteMobile published at the 'play' market has multiple vulnerabilities...

Trova Poste - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Trova Poste published at the 'play' market has multiple vulnerabilities...

RuMMS: The Latest Family of Android Malware Attacking Users in Russia Via SMS Phishing

Introduction Recently we observed an Android malware family being used to attack users in Russia. The malware samples were mainly distributed through a series of malicious subdomains registered under a legitimate domain belonging to a well-known shared hosting service provider in Russia. Because...

Monster Castle - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Monster Castle published at the 'play' market has multiple vulnerabilities...

RuMMS: The Latest Family of Android Malware Attacking Users in Russia Via SMS Phishing

Introduction Recently we observed an Android malware family being used to attack users in Russia. The malware samples were mainly distributed through a series of malicious subdomains registered under a legitimate domain belonging to a well-known shared hosting service provider in Russia. Because...

DarsNameh - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application DarsNameh published at the 'play' market has multiple vulnerabilities...

IRCTC Connect - Dynamic Code Loading, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application IRCTC Connect published at the 'play' market has multiple vulnerabilities...

VEGA Conflict - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application VEGA Conflict published at the 'play' market has multiple vulnerabilities...

Skyscanner – Car Rentals - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Skyscanner – Car Rentals published at the 'play' market has multiple vulnerabilities...

FBT-40 by newgen medicals - Certificates or keys found, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application FBT-40 by newgen medicals published at the 'play' market has multiple vulnerabilities...

Daily Horoscope - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Daily Horoscope published at the 'play' market has multiple vulnerabilities...

Locus Map Free - Outdoor GPS - BSD license, Base64 encoded String, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Locus Map Free - Outdoor GPS published at the 'play' market has multiple vulnerabilities...

Plus Messenger - Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Plus Messenger published at the 'play' market has multiple vulnerabilities...

Hermes Paket Versand & Empfang - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Hermes Paket Versand & Empfang published at the 'play' market has multiple vulnerabilities...

Cool Reader - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Cool Reader published at the 'play' market has multiple vulnerabilities...

Moon+ Reader - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Moon+ Reader published at the 'play' market has multiple vulnerabilities...