Research reports
1,224 reports from 387 publishers45 added in the past week
Added Wed 29 Apr
Build an iOS App Using OAuth 2.0 and PKCE
Learn how to create an iOS application to authenticate user via OIDC protocol using the OAuth Proof Key for Code Exchange (PKCE) flow. Overview In this tutorial, we will explore a simple iOS application to authenticate user utilizing OIDC with authorization…
Mobile
Added Fri 24 Apr
Charger Malware Calls and Raises the Risk on Google Play
Several weeks ago, Check Point Mobile Threat Prevention detected and quarantined the Android device of an unsuspecting customer employee who downloaded and installed a 0day mobile ransomware from Google Play dubbed “Charger.” This incident demonstrates how…
RansomwareMalwareMobile
Added Thu 23 Apr
Albiriox Exposed: A New RAT Mobile Malware Targeting Global Finance and Crypto Wallets
Two-stage deployment chain: The malware leverages dropper applications distributed through social engineering lures, combined with packing techniques, to evade static detection and deliver its payload. On-Device Fraud capabilities: Albiriox exhibits the core…
MalwareMobile
Mirax: a new Android RAT turning infected devices into potential residential proxy nodes
New Maas spreading: Mirax has emerged as a sophisticated Malware-as-a-Service (MaaS) offering, specifically targeting Android devices across Europe. It is actively marketed and distributed through underground malware forums. At the time of writing, Cleafy…
MalwareMobile
7 Years of Scarlet Mimic’s Mobile Surveillance Campaign Targeting Uyghurs
In 2022, Check Point Research (CPR) observed a new wave of a long-standing campaign targeting the Uyghur community, a Turkic ethnic group originating from Central Asia, one of the largest minority ethnic groups in China. This malicious activity, which we…
MalwareMobile
Added Tue 21 Apr
OSX/Dok Refuses to Go Away and It’s After Your Money
Following up on our recent discovery of the new OSX/Dok malware targeting macOS users, we’d like to report that the malicious actors behind it are not giving up yet. They are aiming at the victim’s banking credentials by mimicking major bank sites. The fake…
Mobile
Added Mon 20 Apr
Man-in-the-Disk: Android Apps Exposed via External Storage
Recently, our researchers came across a shortcoming in the design of Android’s use of storage resources. Careless use of External Storage by applications may open the door to an attack resulting in any number of undesired outcomes, such as silent installation…
Mobile
Added Sun 12 Apr
3rd October – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 3rd October, please download our Threat Intelligence Bulletin. Top Attacks and Breaches Check Point Research identified an ongoing, mobile malware campaign that has consistently targeted Uyghurs for…
MalwareMobile
Added Fri 10 Apr
Cerberus Analysis - Android Banking Trojan
Cerberus is an Android malware that emerged in 2019 but was allegedly used for special operations until two years ago. It has been determined by the analysts that it was not built on a banking trojan and the Anubis malware whose source code had leaked, or…
MalwareMobile
Added Mon 6 Apr
Rage against the virtual machine
Several features on this page require Premium Access. Information & Contributors Bibliometrics & Citations Reading Options References Figures Tables Media Share Abstract Antivirus companies, mobile application marketplaces, and the security research…
MalwareMobile
YiSpecter: First iOS Malware That Attacks Non-jailbroken Apple iOS Devices by Abusing Private APIs
We recently identified a new Apple iOS malware and named it YiSpecter. YiSpecter is different from previously seen iOS malware in that it attacks both jailbroken and non-jailbroken iOS devices through unique and harmful malicious behaviors. Specifically, it’s…
MalwareMobile
Havex
Havex malware, also known as Backdoor.Oldrea, is a Remote Access Trojan (RAT) employed by the Russian attributed APT group "Energetic Bear" or "Dragonfly".[1][2] Havex was discovered in 2013 and is one of five known ICS tailored malware developed in the past…
State-sponsoredMalwareMobile
Execution, Tactic TA0041 - Mobile
The adversary is trying to run malicious code. Execution consists of techniques that result in adversary-controlled code running on a mobile device. Techniques that run malicious code are often paired with techniques from all other tactics to achieve broader…
Mobile
FinFisher (Malware Family)
Source: https://malpedia.caad.fkie.fraunhofer.de/details/apk.finfisher
MalwareMobile
Added Wed 1 Apr
Operation Poisoned News: Hong Kong Users Targeted with Mobile Malware via Local News Links
By Elliot Cao, Joseph C. Chen, William Gamazo Sanchez, Lilang Wu, and Ecular Xu Contents 1 Attack Chain 1.1 Watering hole attack tactic 1.2 Infection chain 2 Exploits Analyses 2.1 The JavaScriptCore exploit 2.1.1 Bug triggering 2.1.2 The addrof/fakeobj…
MalwareVulnerabilitiesMobile
Added Fri 26 Jul 2024
Arid Viper poisons Android apps with AridSpy
ESET researchers discovered Arid Viper espionage campaigns spreading trojanized apps to Android users in Egypt and Palestine Lukas Stefanko 13 Jun 2024 • 25 min. read ESET researchers have identified five campaigns targeting Android users with trojanized…
State-sponsoredMobile
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.