bolha.us

0 posts0 participants0 posts today

0x40kWhoa, things are heating up again in the Android world... Watch out for "Crocodilus," a nasty new banking trojan that's currently zeroing in on folks in Spain and Turkey. 🐊 Now, it might sound like your standard-issue malware at first, but this one's got some particularly devious tricks. It's not *just* snagging login details – it's also after the seed phrases for crypto wallets. 🤯Here’s the kicker: it disguises itself as Google Chrome and tries to trick you into granting Accessibility Services permissions. If you give it that access, you've basically handed over the keys to your device. Seriously, it can then read everything on your screen, see every tap you make... and you wouldn't even know, because it can black out the screen while it does its dirty work. 🙈 Total stealth mode.As someone in penetration testing, I unfortunately run into this kind of threat all too often. Clients sometimes say, "But I have antivirus software!" The hard truth? Against sophisticated attacks like this, basic AV often won't cut it.So, the usual advice is more critical than ever: Be super careful about the apps you install and *always* double-check the permissions they ask for! And please, use Multi-Factor Authentication (MFA) wherever you can! 🔐I'm curious – what security measures do you have running on your smartphone? Drop your tips below!<a href="https://infosec.exchange/tags/AndroidSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AndroidSecurity</a> <a href="https://infosec.exchange/tags/Malware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Malware</a> <a href="https://infosec.exchange/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://infosec.exchange/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://infosec.exchange/tags/BankingTrojan" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BankingTrojan</a>

ITSEC NewsNew AI-Powered Scam Detection Features to Help Protect You on Android - Posted by Lyubov Farafonova, Product Manager, Phone by Google; Alberto Pastor Niet... <a href="http://security.googleblog.com/2025/03/new-ai-powered-scam-detection-features.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">http://security.googleblog.com/2025/03/new-ai-powered-scam-detection-features.html</a> <a href="https://schleuss.online/tags/androidsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#androidsecurity</a> <a href="https://schleuss.online/tags/android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#android</a> <a href="https://schleuss.online/tags/pixel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pixel</a>

0x40kHey Android folks, listen up! 👀 Google just dropped a crucial security update that you seriously need to check out. It might just be relevant to your phone. Word on the street is, two of the patched vulnerabilities are already being exploited in the wild. Crazy, right? 😬This reminds me of those chats I have with clients: "So, Android's secure, yeah?" Well... Privilege Escalation basically means an attacker can snag more permissions on your device. In short: hackers can potentially grab your data! 😱They've squashed a whopping 44 vulnerabilities in this March update. CVE-2024-43093 & CVE-2024-50302 are seriously critical. Apparently, CVE-2024-50302 was even leveraged by Cellebrite to get into an activist's phone. Wild stuff! 😳Go ahead and check your Android version and smash that update button ASAP (look for 2025-03-01 or 2025-03-05)! Also, be extra careful with apps from sources you don't know. Regular security checks are a must, even on your smartphone.Have you already installed the update? Any thoughts or experiences with Android security? 🤔<a href="https://infosec.exchange/tags/AndroidSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AndroidSecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/pentest" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pentest</a>

Six Grandfathers Mountain<a href="https://partyon.xyz/@nullagent" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@nullagent</a> <a href="https://mastodon.sdf.org/@jack" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@jack</a> RE Privacy alert for <a href="https://mastodon.social/tags/androidsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#androidsecurity</a> <a href="https://mastodon.social/tags/android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#android</a> Maybe this setting is NOT what you are talking about, but... sounds similarThere is a settings to have "take and use images on the screen"Samsung Tablet <a href="https://mastodon.social/tags/OneUI6" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OneUI6</a> <a href="https://mastodon.social/tags/android14" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#android14</a>see the 3 images

ITSEC NewsHow we kept the Google Play & Android app ecosystems safe in 2024 - Posted by Bethel Otuteye and Khawaja Shams (Android Security and Privacy Team), an... <a href="http://security.googleblog.com/2025/01/how-we-kept-google-play-android-app-ecosystem-safe-2024.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">http://security.googleblog.com/2025/01/how-we-kept-google-play-android-app-ecosystem-safe-2024.html</a> <a href="https://schleuss.online/tags/googleplayprotect" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#googleplayprotect</a> <a href="https://schleuss.online/tags/androidsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#androidsecurity</a> <a href="https://schleuss.online/tags/googleplay" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#googleplay</a> <a href="https://schleuss.online/tags/android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#android</a>

MasterTrend Info - Mejores Apps de Seguridad: 11 Que Debes Tener en Android  - <a href="https://mastodon.social/tags/SeguridadDigital" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SeguridadDigital</a> <a href="https://mastodon.social/tags/AppsEsenciales" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppsEsenciales</a> <a href="https://mastodon.social/tags/ProtegeTuM%C3%B3vil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ProtegeTuMóvil</a> - <a href="https://mastodon.social/tags/Software" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Software</a> - <a href="https://mastodon.social/tags/Androidsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Androidsecurity</a> <a href="https://mastodon.social/tags/EvergreenContent" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#EvergreenContent</a> <a href="https://mastodon.social/tags/Technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Technology</a>  - 🔒 ¡Descubre las 11 mejores apps de seguridad que necesitas en tu Android! Desde Grannus, ideal para mujeres y niños, hasta Life360, para mantener a tu familia segura. También encontrarás herramientas como Google Find My Device y bSafe para emergencias. 🌍... <a href="https://mastertrend.info/mejores-apps-de-seguridad/?fsp_sid=2422" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://mastertrend.info/mejores-apps-de-seguridad/?fsp_sid=2422</a>

CryptomatorCryptomator for Android is now on Accrescent! 🔐📱We're expanding our distribution with Accrescent 🌙, a privacy-focused app store with strong security features:✔ No user accounts needed ✔ Signed repository metadata ✔ App signing key pinningGet Cryptomator now via Accrescent, Google Play, F-Droid & APK Store!➡️ More info: <a href="https://cryptomator.org/blog/2025/01/24/cryptomator-accrescent/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://cryptomator.org/blog/2025/01/24/cryptomator-accrescent/</a><a href="https://mastodon.online/tags/Cryptomator" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cryptomator</a> <a href="https://mastodon.online/tags/PrivacyFirst" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PrivacyFirst</a> <a href="https://mastodon.online/tags/AndroidSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AndroidSecurity</a> <a href="https://mastodon.online/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://mastodon.online/tags/Accrescent" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Accrescent</a> <a href="https://mastodon.online/tags/Encryption" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Encryption</a>

ITSEC NewsAndroid enhances theft protection with Identity Check and expanded features - Posted by Jianing Sandra Guo, Product Manager, Android, Nataliya Stanetsky, Staff ... <a href="http://security.googleblog.com/2025/01/android-theft-protection-identity-check-expanded-features.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">http://security.googleblog.com/2025/01/android-theft-protection-identity-check-expanded-features.html</a> <a href="https://schleuss.online/tags/androidsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#androidsecurity</a> <a href="https://schleuss.online/tags/android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#android</a>

ITSEC NewsSafer with Google: New intelligent, real-time protections on Android to keep you safe - Posted by Lyubov Farafonova, Product Manager and Steve Kafka, Group Product Manage... <a href="http://security.googleblog.com/2024/11/new-real-time-protections-on-Android.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">http://security.googleblog.com/2024/11/new-real-time-protections-on-Android.html</a> <a href="https://schleuss.online/tags/androidsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#androidsecurity</a> <a href="https://schleuss.online/tags/android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#android</a> <a href="https://schleuss.online/tags/pixel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#pixel</a>

ITSEC News5 new protections on Google Messages to help keep you safe - Posted by Jan Jedrzejowicz, Director of Product, Android and Business Communications; Alb... <a href="http://security.googleblog.com/2024/10/5-new-protections-on-google-messages.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">http://security.googleblog.com/2024/10/5-new-protections-on-google-messages.html</a> <a href="https://schleuss.online/tags/androidsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#androidsecurity</a> <a href="https://schleuss.online/tags/android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#android</a>

ITSEC NewsBringing new theft protection features to Android users around the world - Posted by Jianing Sandra Guo, Product Manager and Nataliya Stanetsky, Staff Progra... <a href="http://security.googleblog.com/2024/10/android-theft-protection.html" rel="nofollow noopener noreferrer" translate="no" target="_blank">http://security.googleblog.com/2024/10/android-theft-protection.html</a> <a href="https://schleuss.online/tags/androidsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#androidsecurity</a> <a href="https://schleuss.online/tags/android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#android</a>

Vinoth (Mobile security)This is my <a href="https://infosec.exchange/tags/indroduction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#indroduction</a> post. I hope I am doing this right.I am Vinoth, from San Diego. I lead the silicon security architecture and silicon security operations teams at <a href="https://infosec.exchange/tags/Google" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Google</a>. Before this, I worked on mobile silicon security at <a href="https://infosec.exchange/tags/Qualcomm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Qualcomm</a>. I will mostly talk about <a href="https://infosec.exchange/tags/mobilesecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mobilesecurity</a>, <a href="https://infosec.exchange/tags/androidsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#androidsecurity</a> and <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>. Much of my work is about improving the security of <a href="https://infosec.exchange/tags/Pixel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pixel</a> and other <a href="https://infosec.exchange/tags/Android" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Android</a> devices. My expertise is at the intersection of hardware security architecture, software security architecture and silicon security operations (secure key provisioning, code signing, device attestation etc.). I have ~20 years of experience making mistakes at this particular intersection that make me feel eminently qualified to talk about how to not make them. I love explaining the intricacies of silicon development to software engineers and vice versa. So if you want to understand the hardware underpinnings of Trusted compute, confidential compute or whatever, I'm your guy.I sometimes hold unpopular opinions, and I welcome healthy discussions about them. For example, (a) open sourcing RTL will not improve hardware security to the same extent open source software improved software security (b) there are situations where compliance actively harms security.Also a medidator, volunteer at <a href="https://infosec.exchange/tags/ishafoundation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ishafoundation</a>, father of 2 kids, husband of 1 wife, angel investor and a very curious human being.

Recent searches

Search options

Administered by:

Server stats:

#androidsecurity