|
Nikolaos Chrysaidos
@
virqdroid
keybase.io/virqdroid
|
|
Mobile Security & Malware Researcher | Building Threat Intelligence platforms & @apklabio at @avast_antivirus
|
|
|
3.626
Tweetovi
|
425
Pratim
|
5.639
Osobe koje vas prate
|
| Tweetovi |
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Avast
@avast_antivirus
|
30. sij |
|
A message from Avast CEO Ondrej Vlcek ➢ ava.st/313ZvtQ pic.twitter.com/cQScckP0Xe
|
||
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Joshua Saxe
@joshua_saxe
|
29. sij |
|
1\ I've written a little compiler to ship ML models as standalone Yara rules, and done proof of concept detectors for Macho-O, RTF files, and powershell scripts. So far I have decision trees, random forests, and logistic regression (LR) working. github.com/inv-ds-researc… pic.twitter.com/sfuXEkHeNO
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Caleb Fenton
@caleb_fenton
|
25. sij |
|
I'm working on a new project for Android reversers called Smali Debugger. It's like gdb but for Smali. It uses smalivm (github.com/CalebFenton/si…) for execution.
Here's a quick video of me stepping through two similar methods. #AndroidSecurity #ReverseEngineering pic.twitter.com/72Ic5PB8MK
|
||
|
|
||
|
|
Nikolaos Chrysaidos
@virqdroid
|
21. sij |
|
That would be awesome. Thanks
|
||
|
|
||
|
|
Nikolaos Chrysaidos
@virqdroid
|
21. sij |
|
Do you have somewhere (github etc) collected all of the IoCs of Joker that you've collected/discovered?
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Alexander J. Martin
@AJMartinSky
|
16. sij |
|
These kiosks are Cellebrite, apparently. Seeking confirmation. Police page on them here: scotland.police.uk/about-us/polic…
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Ersin Çahmutoğlu
@ersincmt
|
11. sij |
|
Yes Hacking Team is back, but changed it's name to Memento Labs and they developed their tools twitter.com/ersincmt/statu…
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
alfred 🆖
@alfredwkng
|
10. sij |
|
I walked through the door and was immediately greeted by this kiosk, which recognized my face just from the corner of my eye and nose.
I didn't even say hello to the people in the room yet cnet.com/news/at-ces-fa… pic.twitter.com/2mC0UtkpYC
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Alec Guertin
@guertin_alec
|
9. sij |
|
Check out my new blog on the history of the Bread (Joker) malware family's techniques #Google #android #Malware
security.googleblog.com/2020/01/pha-fa…
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Witold Precikowski
@pr3wtd
|
8. sij |
|
#Joker #malware still makes it through to Play Store with zero detection on VT. Number of malicious samples is at least worrying. One of them reported at 0+ downloads (currently 100+). Hopefully it will change in the near future. pic.twitter.com/YZ2VpGYbxy
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Maxime Ingrao
@IngraoMaxime
|
2. sij |
|
In Austria, a Joker malware was at the top of the free applications list for two days and was downloaded 100,000 times. 🤦♂️ Happy new year ! 😅
#malware #Joker #Austria #PlayStore pic.twitter.com/hUeqwGSxah
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
APKLAB.io
@apklabio
|
24. pro |
|
Merry Christmas 🎄and happy Mobile Threat hunting from the apklab.io team! @avast_antivirus @AvastThreatLabs pic.twitter.com/hnOXLmYD3M
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Objective-See
@objective_see
|
22. pro |
|
Yikes! A top iOS app in @Apple's App Store, was a government spy tool!? 🍎📲🕵️♂️😱
"...used by the govt. of the United Arab Emirates to try to track every conversation, movement ...of those who install it on their phones" -@nytimes
Our technical analysis:
objective-see.com/blog/blog_0x52…
|
||
|
|
||
|
|
Nikolaos Chrysaidos
@virqdroid
|
19. pro |
|
Hey Vangelis, did you sent an invitation request here apklab.io/invite.html ?
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Ahmet Bilal Can
@0xabc0
|
16. pro |
|
5 more #Joker. Almost all of them have 0/64 on VT. Over 130k+ installations
Package names:
com.fans.game.box
com.gamesbox.runrace
com.co.center.box
com.markersketchphotomaker
com.sktop.lockapp
Added to spreadsheet:
docs.google.com/spreadsheets/d…
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Tatyana Shishkova
@sh1shk0va
|
13. pro |
|
#Adware on Google Play in apps with more than 16,100,000 installs in total. Thanks to Igor Golovin
play.google.com/store/apps/det… 10,000,000+ installs
play.google.com/store/apps/det… 5,000,000+ installs
play.google.com/store/apps/det… 1,000,000+ installs
play.google.com/store/apps/det… 100,000+ installs
(1/3) pic.twitter.com/MGelcsMlng
|
||
|
|
||
|
|
Nikolaos Chrysaidos
@virqdroid
|
13. pro |
|
For search & booking, with a very bad support
|
||
|
|
||
|
|
Nikolaos Chrysaidos
@virqdroid
|
13. pro |
|
Semi-automated responses, no real customer service. You better use some alternative like @Skyscanner and not @kiwicom
|
||
|
|
||
|
|
Nikolaos Chrysaidos
@virqdroid
|
13. pro |
|
KIWI Service @kiwicom247:
- Your outbound flight canceled
- The alternatives are one for free 2 days after OR on the same day +63 Euros
- I'm accepting paid alternative
- Service is of course late and sending a payment link 3 days after for 95 Euros. Wtf #KIWI?
|
||
|
|
||
| Nikolaos Chrysaidos proslijedio/la je tweet | ||
|
Thomas Brewster
@iblametom
|
12. pro |
|
New - Mystery Russian Telegram Hacks Intercept Secret Codes To Spy On Messages
forbes.com/sites/thomasbr…
|
||
|
|
||