Telit IoT Innovation - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Telit IoT Innovation published at the 'play' market has multiple vulnerabilities...

Telegram - Exported components, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Telegram published at the 'play' market has multiple vulnerabilities...

Sberbank Online Kazakhstan - BSD license, Customized SSL, GPL license vulnerabilities

HackApp vulnerability scanner discovered that application Sberbank Online Kazakhstan published at the 'play' market has multiple vulnerabilities...

Sberbank Online Ukraine - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sberbank Online Ukraine published at the 'play' market has multiple vulnerabilities...

Спасибо от Сбербанка - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Спасибо от Сбербанка published at the 'play' market has multiple vulnerabilities...

Сбербанк Онлайн - Certificates or keys found, Corrupted files, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Сбербанк Онлайн published at the 'play' market has multiple vulnerabilities...

Grow Castle - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Grow Castle published at the 'play' market has multiple vulnerabilities...

Mobile Menace Monday: Fake WannaCry Scanner

With all the buzz around the PC ransomware WannaCry, it’s no surprise that a fake antivirus FakeAV has emerged on Google Play. Entitled WannaCry Ransomware Protector for Android, the bold claim it makes is right in its name. So how do we know this claim is false? Simple, there is no WannaCry...

A week in security (June 19 – June 25)

Last week, we expanded on all the different technologies that Malwarebytes uses to break the attack chain and our Incident Response solution. We also warned you about a Roblox Robux generator scam and a phish targeting customers of Barclays Bank. Below are notable news stories and security-relate...

Discourse - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Discourse published at the 'play' market has multiple vulnerabilities...

My Airtel-Recharge, Bill, Bank - Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My Airtel-Recharge, Bill, Bank published at the 'play' market has multiple vulnerabilities...

Fleya - Fluid Experiences - Dynamic Code Loading, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Fleya - Fluid Experiences published at the 'play' market has multiple vulnerabilities...

WWE SuperCard - Base64 encoded String, Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application WWE SuperCard published at the 'play' market has multiple vulnerabilities...

Fake GPS GO Location Spoofer Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Fake GPS GO Location Spoofer Free published at the 'play' market has multiple vulnerabilities...

Google Removes Two Ztorg Trojans from Play Marketplace

Google, for the second time this month, has removed malicious apps from Google Play that could have laid the groundwork for an attacker to root infected devices. A researcher with Kaspersky Lab on Tuesday described how attackers managed to evade settings set in place by Google Play’s VerifyApps...

MasterCard StartPath Insights - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MasterCard StartPath Insights published at the 'play' market has multiple vulnerabilities...

Ztorg: from rooting to SMS

I've been monitoring Google Play Store for new Ztorg Trojans since September 2016, and have so far found several dozen new malicious apps. All of them were rooting malware that used exploits to gain root rights on the infected device. Then, in the second half of May 2017 I found one that wasn't...

MasterCard Nearby - Certificates or keys found, Corrupted files, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application MasterCard Nearby published at the 'play' market has multiple vulnerabilities...

اضافات - MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application اضافات published at the 'play' market has multiple vulnerabilities...

Рамблер/почта - Certificates or keys found, Corrupted files, Dynamic Code Loading vulnerabilities

HackApp vulnerability scanner discovered that application Рамблер/почта published at the 'play' market has multiple vulnerabilities...