Excited to share our research on ChillyHell, a modular macOS backdoor targeting officials in Ukraine. Check out our write-up for more details.
https://t.co/RakC7KEQAU
NEW: Citizen Lab researchers mapped out the infrastructure of spyware maker Paragon Solutions, and say they were able to identify servers likely used by customers in several countries: Australia, Canada, Cyprus, Denmark, Israel, and Singapore.
Interested in all the new macOS malware of 2024!? 🍎🐛
I've started my annual "The Mac Malware of <Insert Year>" report.
Each day, I'll be adding details of a new (for '24) malware ...including its infection vector, persistence, & capabilities.
Follow:
https://t.co/gWpjkBZ5UT
🚨🚨WE URGE EVERYONE TO UPDATE THEIR APPLE DEVICES AS SOON AS POSSIBLE.
We have found an actively exploited #zero#click vulnerability that was used to deliver #NSO group’s #Pegasus#spyware.
https://t.co/BS0ZI4QuIz
Sometimes spyware makes are really dumb.
Someone who used to work for Quadream, an Israeli surveillance tech maker that recently shut down, left the source code of the web panel of the company's REIGN spyware agent on GitHub.
https://t.co/1mAROGK98V
California regulators take over and shut down Silicon Valley Bank, one of the tech sector's favorite lenders, amid fear of broader fallout. https://t.co/XZW6E27XKX
Ever wanted to obtain an APK from an Android device?
You do not need to install fancy Apps for this, ADB and the following minimal Bash script is sufficient to do so: https://t.co/YOnSeMg4OS
Usage: ./download_apks.sh https://t.co/BFCPfLwL0b
#AppSec#Android#bugbountytips
Abusing iPhone coprocessors for Privilege Escalation at OBTS @i41nbeer
https://t.co/mfflMoNq4p
There is much more exploitation of co-processors, peripherals or firmware recently on mobile devices. This includes in-the-wild. Ian's talk provided a technical deep-dive of the DCP.
Late christmas present: https://t.co/JBW6tDh6h8
WebKit+Kernel exploit chain for all PS Vita firmwares.
This is a WIP from 3 years ago that I never finished (exploit is fully working, but hasn't been turned into a jailbreak yet).
New blog post: Get root on macOS 13.0.1 with CVE-2022-46689, the macOS Dirty Cow bug
https://t.co/9ZqMOOHk1H
% ./switcharoo /etc/pam.d/su overwrite_file.bin
Testing for 10 seconds...
RO mapping was modified
% su
sh-3.2#
(Demo: https://t.co/UtQiFwJVbV)
Full details and IOCs on Variston's Heliconia framework in the blog post.
https://t.co/2wfiFBa52d
TAG will continue to focus of exposing and disrupting these commercial surveillance vendors in order to keep users safe online.
I'm sharing two other iOS kernel vulnerabilities reachable from the default app sandbox that don’t require you to open a UserClient:
https://t.co/a6ZOu8UWKR
📱#iOS Talk
💡Nikias @pimskeks showcased how a design flaw in MobileDevice.framework iOS / iPadOS etc Dev Tools allowed an attacker in the same network to gain RCE on a target device with a software version prior to #iOS14
🍿Watch here▶️https://t.co/79JSdDdA0i
#NullconGoa2022
#macOS/#iOS#Entitlements Database now with Monterey and Ventura entitlements.
https://t.co/03cA36yoFg
With lots of Love (but no Thanks giving) to @Apple
Happy holidays :-)