iVerify

“The application downloads a configuration file over an unsecure connection and can be manipulated to execute code at the system level,” iVerify wrote in a summary report. The full 40-page analysis was aided by Palantir Technologies and Trail of Bits -Washington Post https://wapo.st/3WQeQvr

The software runs with high, “system-like” privileges, retrieves its configuration file from a single domain over unsecured HTTP, contains flawed code that could enable verification bypass and appears to be installed on a large percentage of Pixel devices, according to the report. - SC Media

Showcase.apk was found on a very large percentage of Pixel devices shipped worldwide since September 2017. A fix is coming, but some companies are moving away from Android because Google’s response has been troubling. https://bit.ly/4cq7PHr

iVerify Discovers Severe Android Vulnerability Impacting Millions of Devices Around the World. The vulnerability leaves millions of devices susceptible to man-in-the-middle (MITM) attacks and other dangerous malware and spyware. https://bit.ly/3YSlq78

Nation-states, hacktivists, and cybercriminals are targeting US campaigns, from local and state to the presidential election. Everyone working on campaigns should know their #mobile devices are at high risk. Read this from Defending Digital Campaigns to know your risk and available resources. https://bit.ly/3WEdrbg

GhostHook, a new Fileless Malware Framework is fast becoming a popular tool with #cybercriminals. It targets #Android devices and is not detectable with most #mobile threat detection. https://bit.ly/4dwx6k9

We're #Hiring a Director of Enterprise Sales to spearhead the growth of our mobile Endpoint Detection and Response (EDR) solution within large commercial organizations. This role demands a strategic, relationship-focused individual with a proven track record of success in complex sales cycles. Come join a dynamic growing company with the best #mobile solution in the industry. https://bit.ly/3Sy3UBt

Coming to an Android Device Near You! This new Fileless Malware Framework, GhostHook, is becoming very popular with #cybercriminals. It targets #Android devices and is not detectable with most #mobile threat detection. https://bit.ly/46rvSEy

Train to be an iOS Threat Hunter at #BHUSA . Dangerous mobile cyber attacks are rising with our dependence on mobile devices 24/7. Notorious spyware attacks like Pegasus, Quadream's Reign, Cytox's Predator, Tykelab's Hermit, and other sophisticated malware attacks make this a skill set you can't afford to be without. Learn more https://bit.ly/3A6eUQ3

The 1H of 2024 saw a rise in malicious activities and advanced threats, according to a Quad9 DNS report on cyber trends, including Omnatour malvertising, Pumpkin Eclipse malware botnet, qu[.]ax malicious distribution domain, and the PEACHPIT ad fraud botnet. The piece emphasizes the importance of robust cybersecurity measures in preventing exposure to these threats and illustrates the evolving landscape of cyber threats and the necessity for vigilant security practices. Read the full article httphttps://bit.ly/4fp03jN