Aviran Hazum

Husband | Father | Gamer | Mobile Threat Intelligence Team Leader @_CPResearch_

[Aviran Hazum @MrHazum]

One of the BEST episodes ever. They really stepped it up, and they cranked it to 11 on EVERY aspect.
Keep up the amazing work! @JoshLeeKwai @jfwong @PostMalone @AshlenRose

[The Command Zone @commandcast]

Check out Post Malone in this epic game of Magic: The Gathering on #GameKnights.

Plus, we're battling with the awesome new cards from Modern Horizons 2!

Don't miss it.
https://t.co/dbI72z0tZD

[Check Point Research @_CPResearch_]

We have uncovered an ongoing Chinese-based operation targeting a Southeast Asian government: #SharpPanda 🐼

▶️ Malicious documents weaponized with #RoyalRoad
▶️ In-memory loaders deliver a previously unknown #VictoryDLL backdoor
▶️ Tools in development since at least 2017

[Aviran Hazum @MrHazum]

Any recommendations for react/nodejs training? Backend focused is OK, full stack even better. 😁

[Alberto Segura @alberto__segura]

#Flubot 4.4! Portugal has been added with seed 2931.

6a03efa4ffa38032edfb5b604672e8c9e01a324f8857b5848e8160593dfb325e

cc @malwrhunterteam @danlopgom @pr3wtd @JosepAlbors

[Alex Ilgayev @_alex_il_]

When threat intel meets research - In this short article, We explain how #IcedID C&C servers could be tracked easily by utilizing few simple tools. We also share a list of currently tracked servers and a script to validate them.
https://t.co/S7yGht56R0

[Lukas Stefanko @LukasStefanko]

SMS worm impersonates Covid-19 vaccine free registration

Android SMS worm tries to spread via text messages as fake free registration for Covid-19 vaccine - targets India 🇮🇳
It can spread itself via SMS to victim contacts with link to download this malware.

[apkdetect @apkdetect]

A few researchers asked for and about, so here it comes! Now #Flubot #Android #malware config contains DGA info 😀

@malwrhunterteam @0xabc0 @alberto__segura @sS55752750 @B0rys_Grishenko

[Aviran Hazum @MrHazum]

Not one of my usual tweets.
I have 4 spare #mtgarena #Strixhaven #prerelease codes for 6 booster packs.
If you didn’t get a chance to get one, feel free to use one of those.
Only 1 activation per account.
Enjoy!

[Mobile Security @mobilesecurity_]

‼️ Remote exploitation of a man-in-the-disk vulnerability in WhatsApp (CVE-2021-24027) 🔥
#MobileSecurity #AndroidSecurity by @census_labs
https://t.co/a5Jq2kpvCi

[💥 𝕭𝖑4𝖈𝖐𝖍0𝖑3𝖟 👾 @bl4ckh0l3z]

🚨 Digging into the #spymax #rat 📱🔎👀

🖥️C2:
45.77.9.151:4444

Network protocol 📡 dissection and more below ⚙️

ht: @FewAtoms
cc: @malwrhunterteam @James_MHT

👇👇👇

https://t.co/yhptwGGoKj

[Aviran Hazum @MrHazum]

A new version of the Auto-Reply Android Malware, now compatible with Signal, Telegram, Skype and Viber.

[Lukas Stefanko @LukasStefanko]

Updated version of auto-reply Android malware spreads not only to WhatsApp received messages, but also to Signal, Telegram, Skype and Viber

[argp @_argp]

Remote exploitation of a man-in-the-disk vulnerability in WhatsApp (CVE-2021-24027); epic logical exploitation writeup by huku: https://t.co/ZAc64X1SUj

[Aviran Hazum @MrHazum]

@virusbtn @IsraelWernik @IsraelWernik @_mbv06_

[ThreatFabric @ThreatFabric]

The #APKPure 3.17.18 is indeed trojanized. This shows that the actors could have had access to the sources/build environment or compromised a 3rd party SDK, very worrisome! CC @DrWeb_antivirus
https://t.co/25LYgZUSHU

[Re-ind @ReBensk]

#Android #Banking #Trojan #Malware
@malwrhunterteam @Spam404
@bl4ckh0l3z @JAMESWT_MHT
@500mk500
Fresh #Joker Trojan on Google Play:
https://t.co/5S4DLJrLdd
0+ Installs
"Md5: ac2f1708ba265b2152aed0c43b7be2ea"
C2: https://wansgo[.oss-ap-southeast-5.aliyuncs.com/siyue

[Aviran Hazum @MrHazum]

@LukasStefanko same technique as https://t.co/jqd3sDAuOt

[Aviran Hazum @MrHazum]

#Android #Malware that distribute itself over #WhatsApp messages found on #GooglePlay. The malware hijack the notification's predefined action "reply" to send messages on the victim's behalf.

@_CPResearch_

https://t.co/w6CzJKQ30l

[Re-ind @ReBensk]

#Android #Banking #Trojan #Malware
@malwrhunterteam @Spam404
@bl4ckh0l3z @JAMESWT_MHT
@500mk500 @douglasmun
#Joker Trojan on Google Play:
https://t.co/PNKwnYnHBD
1,000+ Installs
Md5: "bf84acfcd727c8aead7f81d73fc41082"
C2: http://selct[.oss-ap-southeast-2.aliyuncs.com/castle.EPS

[MalwareHunterTeam @malwrhunterteam]

"Tiktok-Pro.apk": 1d9871425ec0e2701967381e9700acbb4f0cb2a3c5c3c60f25116ac9ba0524e3
http://tiny[.]cc/Tiktok-pro -> https://github[.]com/samakaka123/kaka/raw/main/Tiktok-Pro.apk -> https://raw.githubusercontent[.]com/samakaka123/kaka/main/Tiktok-Pro.apk
@bl4ckh0l3z @Spam404

[MalwareHunterTeam @malwrhunterteam]

"e-DevletPortal.apk": 800e68c6f380610de04d4add775394722b9b482ad956adc99cfe5437d79ab659