Malware bug

VkdGc2EzTWdZV0p2ZFhRZ1lXNWtjbTlwWkNCdFlXeDNZWEpsQ2tsdWRHVnlaWE4wWldRZ2FXNGdkMlZpTEcxdlltbHNaU3h1WlhSM2IzSnJJR0Z1WkNCaGNHa2dhR0ZqYTJsdVp3bz0=

[Cleafy LABS @cleafylabs]

[4/4] Our full technical analysis is available here 👇 https://t.co/ZLfjXTD3cn
Malfixer open-source on GitHub 👇 https://t.co/G4bSCZZQo2

[Cyber Security News @The_Cyber_News]

🚨 New GhostPairing Attacks allow full WhatsApp access via phone number 

Source: https://t.co/0YbVPSnY5K

A newly discovered account takeover campaign targeting WhatsApp users demonstrates how attackers can compromise messaging accounts without stealing passwords or exploiting technical vulnerabilities.

The attack begins when victims receive messages from known contacts, typically suggesting they have found a photo. The message includes a link designed to appear as a Facebook content viewer.

When users click the link, they encounter a fake Facebook-themed page requesting verification before accessing content.

#cybersecuritynews

[Dark Web Informer @DarkWebInformer]

🚨Cloudflare WAF Bypass Technique Discussed on Dark Web Forum

[h4k @h4kb4n]

We are still here! Always here! Incinerator has been updated and many functionalities have been improved. We have added a changelog to Incinerator Cloud, so you can better view the updates in each version.

[Malware bug @themalwarebug]

@h4kb4n 🔥🔥

[h4k @h4kb4n]

We have integrated a dynamic sandbox with our reverse engineering tools, creating a new form of reverse engineering tool. This makes APK reverse engineering and C2 location much more convenient! This is our new version of Incinerator!

[Mobile Hacker @androidmalware2]

Technical Analysis of Multi-layered Obfuscation Techniques in AndroidManifest.xml Aimed at Evading Static Analysis
https://t.co/xHfsqzyIQ7 by @h4kb4n

[Malware bug @themalwarebug]

@h4kb4n 🥳

[Bhavuk Jain @bhavukjain1]

📢 #bugbountytip

🛡️ If you can't see HTTP requests on Burp Suite while proxying a mobile device, the app might be built on Dart or Xamarin. Don't worry! Check out this handy trick to reveal all HTTP requests on Burp. Easy peasy bugs lying around. 😃

https://t.co/t6H65PCfAQ

[Eugene Kaspersky @e_kaspersky]

We've discovered a new cyberattack against iOS called Triangulation.

The attack starts with iMessage with a malicious attachment, which, using a number of vulnerabilities in iOS installs spyware. No user action is required.

#IOSTriangulation

[payloadartist @payloadartist]

🪲 Interesting Oauth vulnerability (CVE-2023-28131)) affecting multiple companies

https://t.co/txXiSwBJfE

Great work by @AviadCarmel

#bugbountytips #bugbounty #cybersecurity

[Malware bug @themalwarebug]

@thebinarybot WANT

[Malware bug @themalwarebug]

@Aktodotio Json injection which can lead to xss

[BleepingComputer @BleepinComputer]

New Fleckpe Android malware installed 600K times on Google Play - @billtoulas
https://t.co/zXnlxJSApv

[Malware bug @themalwarebug]

Ever wondered how a modded application used to perform malicious activities.
Here is my analysis of modded version of metamask wallet used to perform phishing.
https://t.co/REtMo6yVJX
#android #malware #phishing @malwrhunterteam @ReBensk @0xDanielLopez @mobilesecurity_

[Tatyana Shishkova @sh1shk0va]

We discovered #Fleckpe - a new family of Android Trojan subscribers on Google Play, which sign up for paid services without the user’s knowledge. The Trojan targets mostly users from Thailand 🇹🇭. Fleckpe is active since at least the beginning of 2022 and is constantly developing with new features being added. For now, the discovered malicious apps have been removed from Google Play. More details coming soon :)

[Ninad Mishra @NinadMishra5]

Check if any WAF

https://t.co/ZIk16YBQ2m

https://t.co/m2H7CuAaoV

https://t.co/SvEzVGP0ym

#bugbountytips #BugBounty

[Dimitri Os @Ch0pin]

https://t.co/56PNTdopje

[SecurityTrails, A Recorded Future Company @securitytrails]

A WAF (Web Application Firewall) is used to protect your websites (& web-apps) but the Alibaba Cloud WAF command injection was bypassed via a wildcard query:

https://t.co/QTUM4E0bpd

[Mohit Kumar @unix_root]

#Telegram becoming a hub for #cybercrime! Researchers find threat actors using the platform to sell #phishing kits and set up campaigns.

Over 2.5 million malicious URLs generated using phishing kits on Telegram in the past 6 months!

Learn more: https://t.co/rfvvKiSVbt

#hacking