Tag: android
-
North Korean government hackers snuck spyware on Android app store
Cybersecurity firm Lookout found several samples of a North Korean spyware it calls KoSpy. First seen on techcrunch.com Jump to article: techcrunch.com/2025/03/12/north-korean-government-hackers-snuck-spyware-on-android-app-store/
-
PlayPraetor Malware Targets Android Users via Fake Play Store Apps to Steal Passwords
A sophisticated malware campaign, dubbed PlayPraetor, has been uncovered by cybersecurity firm CTM360. This operation involves creating fake Google Play Store websites that deceive users into downloading malicious Android applications. These apps, though appearing legitimate, are actually advanced banking Trojans designed to steal sensitive user information, including banking credentials and clipboard data. Operation Details The…
-
Android Zygote Injection Flaw Lets Attackers Execute Code Gain Elevated Privileges
A significant vulnerability in the Android operating system, identified as CVE-2024-31317, has been discovered, allowing attackers to exploit the Zygote process for system-wide code execution and privilege escalation. This flaw affects devices running Android 11 or older, highlighting a critical security risk in the Android ecosystem. Background and Vulnerability Details The Zygote process is a…
-
UK Cybersecurity Weekly News Roundup 9 March 2025
Tags: android, attack, backdoor, breach, china, cloud, compliance, computer, cyber, cyberattack, cybercrime, cybersecurity, data, espionage, exploit, government, group, hacker, infrastructure, international, malware, microsoft, network, ransomware, regulation, resilience, service, skills, software, theft, update, vulnerabilityWelcome to this week’s edition of our cybersecurity news roundup, bringing you the latest developments and insights from the UK and beyond. Microsoft Engineer’s Transition to Cybersecurity Ankit Masrani, a 36-year-old software engineer, successfully transitioned into a cybersecurity role at Microsoft. With a background in IT and a Master’s degree in computer science, Masrani secured…
-
Google trackt Android-Geräte bevor Nutzer eine App öffnen
Ein Professor am Trinity College Dublin hat sich Googles Android vorgenommen und behauptet, dass Android-Nutzer mit Werbe-Cookies und andere technischen Hilfsmitteln getrackt werden, bevor sie eine App geöffnet und der Nutzung zugestimmt haben. Und es gibt Ärger über eine SafetyCore-Funktion, … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/08/google-trackt-android-geraete-bevor-nutzer-eine-app-oeffnen/
-
The Badbox botnet is back, powered by up to a million backdoored Androids
Best not to buy cheap hardware and use third-party app stores if you want to stay clear of this vast ad fraud effort First seen on theregister.com Jump to article: www.theregister.com/2025/03/07/badbox_botnet_returns/
-
BadBox Malware Infects 50,000+ Android Devices via 24 Apps on Google Play
HUMAN’s Satori Threat Intelligence and Research team has uncovered a complex cyberattack dubbed >>BADBOX 2.0,
-
BadBox malware disrupted on 500K infected Android devices
The BadBox Android malware botnet has been disrupted again by removing 24 malicious apps from Google Play and sinkholing communications for half a million infected devices. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/badbox-malware-disrupted-on-500k-infected-android-devices/
-
Google Rolls Out AI Scam Detection for Android to Combat Conversational Fraud
Google has announced the rollout of artificial intelligence (AI)-powered scam detection features to secure Android device users and their personal information.”These features specifically target conversational scams, which can often appear initially harmless before evolving into harmful situations,” Google said. “And more phone calling scammers are using spoofing techniques to hide their real First seen on…
-
Google Introduces New AI-Powered Scam Detection Features for Android
With Android Scam Detection for messages and calls, Google wants to push scam detection further than traditional spam detection First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/google-new-ai-scam-detection/
-
1 Million Third-Party Android Devices Have a Secret Backdoor for Scammers
New research shows at least a million inexpensive Android devices”, from TV streaming boxes to car infotainment systems”, are compromised to allow bad actors to commit ad fraud and other cybercrime. First seen on wired.com Jump to article: www.wired.com/story/1-million-third-party-android-devices-badbox-2/
-
U.S. CISA adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog
Tags: android, cisa, cve, cybersecurity, exploit, google, infrastructure, kev, linux, vmware, vulnerabilityU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Linux kernel and VMware ESXi and Workstation flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: The first issue, tracked as CVE-2024-50302, was addressed by Google with the release of the Android…
-
Banking-Trojaner auf Android-Smartphones explodieren um 196 %
Kaspersky Security Network weist auf einen deutlichen Anstieg von Banking-Trojanern um 196 % im Jahr 2024 auf Android-Smartphones hin. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/online-betrug/banking-trojaner-auf-android-smartphones-explodieren-um-196-311126.html
-
Google Secretly Tracks Android Devices Even Without User-Opened Apps
A recent technical study conducted by researchers at Trinity College Dublin has revealed that Google collects and stores extensive user data on Android devices, even when pre-installed Google apps are never opened. The findings indicate that cookies, device identifiers, and tracking links are downloaded and stored without user consent, raising significant privacy concerns. Persistent Tracking…
-
Google fixed two actively exploited Android flaws
Android March 2025 security update addresses over 40 vulnerabilities, including two flaws actively exploited in attacks in the wild. Android March 2025 security update addressed over 40 vulnerabilities, including two flaws, respectively tracked as CVE-2024-43093 and CVE-2024-50302, which are actively exploited in attacks in the wild. >>There are indications that the following may be under…
-
Google Patches Pair of Exploited Vulnerabilities in Android
Android’s March 2025 security update addresses over 40 vulnerabilities, including two actively exploited in the wild. The post Google Patches Pair of Exploited Vulnerabilities in Android appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/google-patches-pair-of-exploited-vulnerabilities-in-android/
-
Google fixes Android zero-day exploited by Serbian authorities
Google has released patches for 43 vulnerabilities in Android’s March 2025 security update, including two zero-days. Serbian authorities have used one of the zero-days to unlock confiscated devices. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-fixes-android-zero-days-exploited-in-targeted-attacks/
-
Spionage möglich: Google warnt vor aktiv ausgenutzten Android-Lücken
Google hat über 40 Sicherheitslücken in Android geschlossen. Zwei davon werden bereits aktiv ausgenutzt, eine zu Spionagezwecken von Behörden. First seen on golem.de Jump to article: www.golem.de/news/spionage-moeglich-google-warnt-vor-aktiv-ausgenutzten-android-luecken-2503-193917.html
-
How Google tracks Android device users before they’ve even opened an app
No warning, no opt-out, and critic claims … no consent First seen on theregister.com Jump to article: www.theregister.com/2025/03/04/google_android/
-
March 2025 Android Security Bulletin Fixes 44 Flaws
Google has rolled out its monthly Android Security Bulletin for March 2025, fixing a total of 44 vulnerabilities, including two high-severity flaws that have been actively exploited in the wild. Critical Vulnerabilities Under Active Exploitation Among the patched vulnerabilities, two… First seen on sensorstechforum.com Jump to article: sensorstechforum.com/march-2025-android-security-bulletin/
-
Update Alert: Google Warns of Critical Android Vulnerabilities Under Exploit
Tags: android, cve, cyber, exploit, flaw, google, remote-code-execution, risk, update, vulnerabilityGoogle’s March 2025 Android Security Bulletin has unveiled two critical vulnerabilities”, CVE-2024-43093 and CVE-2024-50302″, currently under limited, targeted exploitation. These flaws, impacting Android versions 12 through 15, underscore escalating risks for billions of devices. The bulletin mandates the immediate installation of the 2025-03-05 security patch, which resolves remote code execution and privilege escalation threats. Critical…
-
Privacy Roundup: Week 9 of Year 2025
Tags: access, android, apple, attack, backdoor, breach, browser, cctv, control, cyber, cybersecurity, data, data-breach, encryption, endpoint, exploit, firmware, flaw, government, group, hacker, Internet, jobs, law, leak, malware, office, password, phishing, privacy, regulation, router, scam, service, software, switch, technology, threat, tool, update, vpn, vulnerabilityThis is a news item roundup of privacy or privacy-related news items for 23 FEB 2025 – 1 MAR 2025. Information and summaries provided here are as-is for warranty purposes. Note: You may see some traditional “security” content mixed-in here due to the close relationship between online privacy and cybersecurity – many things may overlap;…
-
Android security update contains 2 actively exploited vulnerabilities
Google’s monthly batch of security fixes addressed 43 vulnerabilities. First seen on cyberscoop.com Jump to article: cyberscoop.com/android-security-update-march-2025/
-
âš¡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists
This week, a 23-year-old Serbian activist found themselves at the crossroads of digital danger when a sneaky zero-day exploit turned their Android device into a target. Meanwhile, Microsoft pulled back the curtain on a scheme where cybercriminals used AI tools for harmful pranks, and a massive trove of live secrets was discovered, reminding us that…
-
Riesiges Botnetz Vo1d auf Android TV-Geräten
Sicherheitsforscher sind auf ein riesiges Botnetz mit dem Namen “Vo1d” auf Android TV-Geräten gestoßen. Um die 1,6 Millionen Geräte sind wohl infiziert, wobei viele in Asien oder Südamerika und Afrika stehen. In Deutschland sind 2,17 % der infizierten Android TV-Geräte … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/03/03/riesiges-botnetz-vo1d-auf-android-tv-geraeten/
-
Serbian student activist’s phone hacked using Cellebrite zero-day exploit
Amnesty International reports that a Cellebrite zero-day exploit was used to unlock a Serbian activist’s Android phone. Amnesty International reported that a Cellebrite zero-day exploit was used to unlock the Android smartphone of a Serbian activist. In astatementpublished on 25 February 2025,Cellebrite announcedthat it had blocked Serbia from using its solution after reports that police…