3+ hour, 10+ min ago   (207+ words) While organizations have invested heavily in securing traditional endpoints, cloud infrastructure, and networks, mobile remains an afterthought for many organizations. Consequently, with the help of AI, mobile has become the most vulnerable attack surface in the enterprise. These findings highlight…...

1+ week, 6+ day ago   (111+ words) Zimperium Recent research highlights how vulnerabilities in wireless file-sharing technologies can create new opportunities for mobile attacks. Researchers identified weaknesses affecting proximity-based sharing features that could allow attackers within wireless range to exploit devices without requiring traditional phishing or malicious…...

2+ week, 5+ day ago   (696+ words) The infection and distribution vectors for this banking trojan are fake websites that promise free access to KuaiBo, a prominent Chinese video-streaming and media player application. (Fig. 1). Modern mobile threats minimize their initial footprint concealing their malicious capabilities to evade…...

4+ week, 1+ hour ago   (154+ words) An emerging and highly aggressive Android Remote Access Trojan (RAT) called Glitch SPY has been reported by Cyble. Distributed through a sophisticated social engineering campaign, the malware uses a fraudulent Polish housing and apartment rental platform to lure unsuspecting users…...

4+ week, 2+ hour ago   (115+ words) Zimperium A recent campaign highlights how attackers are disguising malware as legitimate document reader applications to target Android users. Victims are lured into downloading seemingly harmless apps that promise to open or manage documents, but instead install malicious code capable…...

4+ week, 1+ day ago   (666+ words) Summer travel has always created security challenges for enterprises. Employees leave controlled environments and connect back to the business from airports, hotels, rideshares, cafes, rental homes, conference venues, and international networks. Likewise, the employee's mobile device has become the epicenter…...

1+ mon, 1+ week ago   (375+ words) The infection process begins when a dropper misleads users into installing a secondary payload containing the core malware (Figure 1). By masquerading as Google Play Protect, the dropper facilitates the installation of this payload. Fig. 1: Dropper installs the second stage while…...

1+ mon, 3+ week ago   (113+ words) Zimperium A recent analysis uncovered BTMOB, a stealthy Android remote access trojan designed to maintain deep persistence and evade detection on infected devices. The malware abuses accessibility services and advanced evasion techniques to gain extensive control over the device, enabling…...

1+ mon, 3+ week ago   (118+ words) Zimperium A recent campaign shows how attackers are leveraging fake AI tool websites to distribute malware and backdoors to unsuspecting users. By impersonating legitimate AI platforms and productivity tools, threat actors lure victims into downloading trojanized applications that enable persistent…...

1+ mon, 4+ week ago   (116+ words) Zimperium A recent analysis highlights how mobile phishing has evolved into a greater threat than traditional email-based attacks. Threat actors are increasingly targeting users through SMS messages, messaging apps, QR codes, and mobile browsers, exploiting the trust and immediacy associated…...