Alec Guertin

Reverse Engineer/Security Researcher @Google @Android Security
| Malware | Security | Doggos 🐶 |
My opinions are my own.

[Alec Guertin @guertin_alec]

We officially launched the Android Partner Vulnerability Initiative!

https://t.co/TSqsdLe83j

#Android #vulnerabilities #AndroidSecurity

[Alec Guertin @guertin_alec]

@k8em0 I’ve been getting calls on my personal cell about RSA booths… can’t block fast enough

[Łukasz @maldr0id]

New APVI entry: platform certificates used to sign malware

Found by yours truly :)

https://t.co/qiFMJW111A

[Alec Guertin @guertin_alec]

A good reminder to be kind to people, even when they are calling to scam you...

[Los Angeles Times @latimes]

In a dystopian nightmare come to life, the Cambodian government has given Chinese crime syndicates free rein to bring in tens of thousands of people who are held captive to work in crowded cyber scam mills.

@dhpierson reports: https://t.co/XSqNZvFH1o

[Mishaal Rahman @MishaalRahman]

Informative presentation from Łukasz and Alec of the Android Malware Research team at Google that covers real-world examples of malicious over-the-air updater apps.

[Łukasz @maldr0id]

It's been a really... weird and crazy day on Twitter today.

I'd just like to say that a few people reached out to me and sent me some positives words. Thank you all! You're all great and wonderful people. Keep on hacking! :)

I think this drama will have a net positive effect.

[Alec Guertin @guertin_alec]

Up to 28 now!

[Łukasz @maldr0id]

So far we have disclosed 25 bugs as a part of Android Partner Vulnerability Initiative!

https://t.co/KeEuYeyaT1

[Oh My Hack @OMHconf]

Are you ready to meet our next speaker? Please welcome @guertin_alec !👏

In the course of our conference, he will present:
🤖Accidental Vulnerability Research: Pre-installed Findings on Android Devices.🤖

Tickets 👉 https://t.co/laxE22YXnG
More 👉 https://t.co/GaWugVXMbB

[Alec Guertin @guertin_alec]

Just published 2 cases of hardcoding access to sensitive APIs for a pre-installed app. Check it out:
https://t.co/YKeIqRiPYD
https://t.co/r4m7FVBFSf

[Alec Guertin @guertin_alec]

Another vuln disclosure published!

[Łukasz @maldr0id]

On some phones the System UI app could be tricked to initiate any app installation through an unprotected Broadcast Receiver.

CVE-2020-0222 (now that's a good number, right?) disclosed through APVI here:

https://t.co/htROOVhHQC

[Łukasz @maldr0id]

Jeśli przegapiliście moją prezentację na temat analizy obrazów systemu Android to możecie wciąż to nadrobić!

https://t.co/RNVU2fVQah

[Alec Guertin @guertin_alec]

Here is another vuln we released this week: https://t.co/MldNnQ5GQ8

A malicious app on these devices could trick the system into changing settings and performing package manager functions on its behalf.

#Android #Malware #MobileSecurity #vulnerabilities

[Alec Guertin @guertin_alec]

Released some more Android Partner Vulnerability Initiative disclosures this week. This app exposed SD card contents by hosting an HTTP server that you could access when connected to its WiFi hotspot (with hardcoded password).

https://t.co/YID9iCY6uG

[Alec Guertin @guertin_alec]

We disclosed a few more issues this week as part of the Android Partner Vulnerability Initiative, including: an ADB private key leak, a cloud services key leak, and permissions bypass for system APIs.

See the full list of disclosed issues here: https://t.co/fpz8870efV

#Android

[Alec Guertin @guertin_alec]

https://t.co/7yRqMfdRqU

[Alec Guertin @guertin_alec]

We officially launched the Android Partner Vulnerability Initiative!

https://t.co/TSqsdLe83j

#Android #vulnerabilities #AndroidSecurity

[Alec Guertin @guertin_alec]

https://t.co/uUWRcLfBU5

[Alec Guertin @guertin_alec]

Check out my new blog on the history of the Bread (Joker) malware family's techniques #Google #android #Malware

https://t.co/MZzQHAVxAw

[Alec Guertin @guertin_alec]

@jack_daniel But does your guitar gently weep as well?

[Alec Guertin @guertin_alec]

We may be having power cuts in high wind, but the local hardware store has your back with amazing sales on generators!

[Android Developers @AndroidDev]

Demystify the MUwS (Mobile Unwanted Software) and PHA (Potentially Harmful App) policies and review process with @guertin_alec. This #AndroidDevSummit session covers insights and examples of pitfalls that cause ""good"" apps to get a warning. ⚠️

Watch → https://t.co/NORzpJO2Bm