Fr4

Hey, #chess and #cybersecurity enthusiasts! A couple of months ago I found security weaknesses in one of the world's most popular chess apps (chess.com) ♟️ Get the details here: link.medium.com/srwXKaBiFzb #bugbounty #infosec #hacking #android #Pentesting #mobile

CSIRT KNF discovered a campaign of the FvncBot malware described in our blog: bit.ly/3MgAqYF The FvncBot features include keylogging, web-inject attacks, screen streaming and remote control capabilities. Explore the samples in apkdetect.com

Meet #Albiriox - a new #Android #botnet to watch First released in October 2025, Albiriox is a rapidly evolving Android banking trojan. Since launch, its developers have rolled out multiple upgrades, including latest version 1.5 released on Jan 25th, 2026.

Intel471 researchers analyse TgToxic Android trojan updates and capabilities observed in a campaign from November 2024. TgToxic is designed to steal user credentials, cryptocurrency from digital wallets, and funds from banking and finance apps. intel471.com/blog/android-t…

Intel 471 researchers analyse BlankBot, an Android banking trojan with screen recording, keylogging and remote control capabilities that highly likely targets Turkish users. intel471.com/blog/blankbot-…

#BlankBot a new Android banking trojan with screen recording, keylogging and remote control capabilities #mobilesecurity #Androidsecurity #threatintel #infosec #cybersecurity #malware

@cryptax @ReBensk @malwrhunterteam @Cyber_O51NT @bl4ckh0l3z @JAMESWT_MHT @500mk500 @banthisguy9349 it should be unconditional call forwarding

@ReBensk @malwrhunterteam @Cyber_O51NT @bl4ckh0l3z @JAMESWT_MHT @500mk500 @banthisguy9349 It steals SMS and sends them to a remote HTTPS website. Also it sends a USSD to *21*9319668779#. Anybody knows what that USSD is?

#Android #Trojan #Malware @malwrhunterteam @cryptax @Cyber_O51NT @bl4ckh0l3z @JAMESWT_MHT @500mk500 @banthisguy9349 #SpyBanker my-card.apk From: https://mycreditpoint[.]online/my-card.apk

Cleafy researchers intercepted an ongoing banking fraud campaign against users in the UK, Spain & Italy. Copybara presents all the functionalities for performing On-Device Fraud and initiating unauthorised money transfers directly on the victim's device. cleafy.com/cleafy-labs/on…

#Teabot campaign on official #Android app store. The #dropper has just been removed from Google Play Store 👽 #mobilesecurity #Androidsecurity #threatintel #infosec #cybersecurity #malware

Has anyone ever been able to win against the Maximum of @chesscom bot (elo 3200)? ♟️ I've done it twice 😎

@LastPass Has anyone been able to download the fake app? it is no longer available on the store, but I would like to analyse it

⚠️ Don't fall for fraudulent app impersonating LastPass in Apple's App Store. We are actively working to get this application taken down. Download our official app here: apps.apple.com/us/app/lastpas…. Learn more on our blog. bit.ly/3w9Qrr6 #FraudAlert

Alternative App Stores on iOS are becoming real! Apple officially confirms that alternative app stores will be available for iOS in the European Union. In the same time Apple warns about new malware possibilities and introduces notarization for iOS apps. Interesting times.

@malwrhunterteam @realperumalj Yes, I did, but it doesn't make sense. It seems to be just a very long string 😅

@_icebre4ker_ @realperumalj The fuck? 😂 Did you try to base64 decode that string if it makes sense?

"GTA IV unlocked.apk": c1e805304b5007b8f958161679f06d9ed546ae3134de3cf99a8572d592d6244a 😂

@malwrhunterteam @realperumalj Exactly and the password is this one 🤡

@realperumalj Yes. But based on VT (I not looked closer), it is only the screenlocker version, so files are not encrypted.

Dive into the second part of my “Analysis of an Info Stealer” series, focusing on the #iOS info stealer app 🦠📱 Get the details here: link.medium.com/Tn0znTtXeGb #mobilesecurity #iOSsecurity #malware #threatintel #infosec #cybersecurity

Just published the first chapter of 'Analysis of an Info Stealer - Chapter 1: The Phishing Website.' 🕵️‍♂️🔍 A phishing campaign delivering malicious apps for Android and iOS, targeting users in South Korea, India and China. link.medium.com/kjqkLTvDbGb #threatintel #infosec #phishing

@vxunderground @binaryz0ne 🤓

Are you new to cyber security and want to go into Digital Forensics and Incident Response? That's cool because we're doing a giveaway for that! Our friend @binaryz0ne hooked us up with 20 tickets for his DFIR course and exam for the C5W cert. Comment below for a chance to win!

@vxunderground @MalDevAcademy @mrd0x 🤓

Hello, are you a nerd who likes malware? Us too! Our sponsor @MalDevAcademy has hooked us up with 3 lifetime licenses to their courses. Thank you to @mrd0x for the gifts! Leave a comment below for a chance to win!

🔍 Just released a handy script for extracting C2 URLs from #spyware WhatsApp mod 🕵️‍♂️ Check it out on GitHub: github.com/icebre4ker/spy… #MalwareAnalysis #MobileSecurity #AndroidSecurity #informationsecurity #Android #infosec

Argh 😐 #BugBounty

@vxunderground The Giant Black Book of Computer Viruses

Due to the increasing number of sponsors, and monthly donors, we have some money for a giveaway. - The Art of Mac Malware - Rootkits and Bootkits - The Giant Black Book of Computer Viruses Comment which book you'd like to receive! * Winners will be DM'd. If you do not reply in 24 hours you will forfeit your win and a new winner will be selected. * A physical address must be supplied, failure to provide a valid shipping address will result in a forfeiture of your prize. * We will send the book anywhere in the world, as long as the destination country is not sanctioned (sorry North Korea). * Prize winners will be selected September 6th, 2023.