Scode - Code World - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Scode - Code World published at the 'play' market has multiple vulnerabilities...

Viking Horde Malware Co-Ops Android Devices for Ad Fraud

The latest Android malware campaign to wend its way through Google’s Play marketplace can leverage victims’ phones for ad fraud, carry out DDoS attacks, send spam, and more, researchers warn. Dubbed Viking Horde, the campaign ropes Android devices into a botnet without their owners being any the...

Tinkoff Mobile Wallet - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Tinkoff Mobile Wallet published at the 'play' market has multiple vulnerabilities...

Google Play Music - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Google Play Music published at the 'play' market has multiple vulnerabilities...

Well Timed - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Well Timed published at the 'play' market has multiple vulnerabilities...

Biz Pathshala - Customized SSL, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Biz Pathshala published at the 'play' market has multiple vulnerabilities...

Phony Google Update Spreads Android Malware

Android users are being warned of a phony Google update that is pushing malware onto devices. The attackers behind this scheme are domain squatting URLs that are similar to ones used by Google for legitimate updates, hoping to snare less-than-vigilant users. Researchers at Zscaler said yesterday ...

4Players - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 4Players published at the 'play' market has multiple vulnerabilities...

Nobby - AWS Credentials, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Nobby published at the 'play' market has multiple vulnerabilities...

Aeroflot - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Aeroflot published at the 'play' market has multiple vulnerabilities...

PosteMobile - Dangerous filesystem permissions, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application PosteMobile published at the 'play' market has multiple vulnerabilities...

Trova Poste - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Trova Poste published at the 'play' market has multiple vulnerabilities...

RuMMS: The Latest Family of Android Malware Attacking Users in Russia Via SMS Phishing

Introduction Recently we observed an Android malware family being used to attack users in Russia. The malware samples were mainly distributed through a series of malicious subdomains registered under a legitimate domain belonging to a well-known shared hosting service provider in Russia. Because...

Monster Castle - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Monster Castle published at the 'play' market has multiple vulnerabilities...

RuMMS: The Latest Family of Android Malware Attacking Users in Russia Via SMS Phishing

Introduction Recently we observed an Android malware family being used to attack users in Russia. The malware samples were mainly distributed through a series of malicious subdomains registered under a legitimate domain belonging to a well-known shared hosting service provider in Russia. Because...

DarsNameh - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application DarsNameh published at the 'play' market has multiple vulnerabilities...

IRCTC Connect - Dynamic Code Loading, External URLs, Runtime command execution vulnerabilities

HackApp vulnerability scanner discovered that application IRCTC Connect published at the 'play' market has multiple vulnerabilities...

VEGA Conflict - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application VEGA Conflict published at the 'play' market has multiple vulnerabilities...

Skyscanner – Car Rentals - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Skyscanner – Car Rentals published at the 'play' market has multiple vulnerabilities...

FBT-40 by newgen medicals - Certificates or keys found, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application FBT-40 by newgen medicals published at the 'play' market has multiple vulnerabilities...