Android Campaign from Known OceanLotus APT Group Potentially Older than Estimated, Abused Legitimate Certificate

Android Campaign from Known OceanLotus APT Group Potentially Older than Estimated, Abused Legitimate Certificate

A group of sophisticated threat actors known as OceanLotus or PhantomLance has recently become known for disseminating advanced Android threats via official and third-party marketplaces since 2014. They have sought to remotely ...
Android Apps and Malware Capitalize on Coronavirus

Android Apps and Malware Capitalize on Coronavirus

As new developments regarding the coronavirus outbreak emerge, Android developers (malware developers included) have started capitalizing the topic. Bitdefender researchers have recently analyzed Android telemetry from Google Play – and other third-party ...
Over one billion Android devices at risk as they no longer receive security updates

Over one billion Android devices at risk as they no longer receive security updates

More than one billion Android devices are at risk of being hacked or infected by malware, because they are no longer supported by security updates and built-in protection. That’s the conclusion of ...
Seventeen Android Nasties Spotted in Google Play, Total Over 550K Downloads

Seventeen Android Nasties Spotted in Google Play, Total Over 550K Downloads

Bitdefender researchers recently found 17 Google Play apps that, once installed, start hiding their presence on the user’s device and constantly display aggressive ads. While not malicious per se, the tactics they ...
Dozens of Apps Still Dodging Google’s Vetting System

Dozens of Apps Still Dodging Google’s Vetting System

Bitdefender researchers recently analyzed 25 apps that made it into Google Play, at least for a time, packing aggressive adware SDKs that bombarded users with ads and avoided removal by hiding their ...
Italian Android Spyware Infected Google Play Store for Years, Researchers Find

Italian Android Spyware Infected Google Play Store for Years, Researchers Find

Fake service applications in Italian from mobile operators were found to be invasive spyware after successfully bypassing Google Play Store’s filters, according to a group of researchers from non-profit security organization Security ...
app security

Android Security is a Hot Mess (yet Again)

Google’s Android smartphone platform is under fire again. Hundreds of “legitimate” apps have been infected with malicious third-party libraries—and not for the first time. These apps account for more than 320 million downloads ...
Security Boulevard
Triout Android Spyware Framework Makes a Comeback, Abusing App with 50 Million Downloads

Triout Android Spyware Framework Makes a Comeback, Abusing App with 50 Million Downloads

In August 2018, Bitdefender researchers stumbled across an Android malware framework, dubbed Triout, which packed massive surveillance capabilities. Bundled with a legitimate application ripped from the official Google Play marketplace, the spyware ...
MFA CISA multi-factor authentication

Two Dozen Click Fraud Apps Found in Google Play

Attackers managed to pass Google’s defenses and place 22 Android apps on Google Play that engaged in sophisticated advertising click fraud when installed on users’ phones. The majority of the apps were ...
Security Boulevard
Webex Vulnerability Can Enable Remote Code Execution

Webex Vulnerability Can Enable Remote Code Execution

Cisco Systems patched a serious privilege escalation vulnerability in the Webex Meetings Desktop App and the Webex Productivity Tools that could be exploited remotely on local networks. The flaw has been dubbed ...
Security Boulevard