#greyware — Public Fediverse posts

GAMA analysis — Graveyard Empire (com.graveyard.empire)
SHA256: 6dc1c122...cbbc3b
Developer: 24 HIT Riga SIA — €2,800 capital, May 2024

- 14 ad SDKs + TikTok Pangle TEA cipher
- Firebase bypass post opt-out
- Art. 7 Chinese Intel Law applies

Data in plain sight. Nobody had looked.

centurialabs.pl

#infosec #greyware #Android #GAMA #ThreatIntel #ReverseEngineering #OSINT

Releasing #GAMA — Greyware Analysis and Mitigation Approach.

Not a malware scanner. Not a clean-room tool. Built specifically for the grey area: apps that aren't malicious but collect, exfiltrate, and evade in ways users never agreed to.

4 open source tools:
• gama-intel — automated static analysis pipeline, STIX 2.1 output
• gama-framework — interactive analyst workspace, 7-phase methodology
• gama-deep — three-channel MLP anomaly scoring (static + smali + network), no CUDA required
• gama-community — shared confirmed findings DB (coming soon)

First confirmed finding: CENT-2026-001 — Mintegral MBridge SDK.

https://gama.centurialabs.pl
https://github.com/psychomad/gama

#Android #greyware #mobileforensics #infosec #malwareanalysis #threatintel #OSINT

Releasing #GAMA — Greyware Analysis and Mitigation Approach.

Not a malware scanner. Not a clean-room tool. Built specifically for the grey area: apps that aren't malicious but collect, exfiltrate, and evade in ways users never agreed to.

4 open source tools:
• gama-intel — automated static analysis pipeline, STIX 2.1 output
• gama-framework — interactive analyst workspace, 7-phase methodology
• gama-deep — three-channel MLP anomaly scoring (static + smali + network), no CUDA required
• gama-community — shared confirmed findings DB (coming soon)

First confirmed finding: CENT-2026-001 — Mintegral MBridge SDK.

https://gama.centurialabs.pl
https://github.com/psychomad/gama

#Android #greyware #mobileforensics #infosec #malwareanalysis #threatintel #OSINT