#mobilesecurity — Public Fediverse posts

That answered VoLTE video call might be more dangerous than it looks.

Researchers demonstrated an attack chain that can reach Android’s deepest system level on certain devices using Unisoc chips, including the Motorola E13, Realme C33 and Xiaomi Redmi A5.

The attacker needs a private 4G network—but there’s still no official patch available.

Find out how the chain works.

https://en.hacks.gr/kindynos-gia-ekatommyria-android-mia-vinteoklisi-mporei-na-dosei-pliri-elegcho-se-chaker/

#Cybersecurity #MobileSecurity #Android #Unisoc

Stolen phones - and specifically iPhones - have robust anti-theft protections. They are worthless once they're flagged - locked to their owner. So why are millions still being stolen every year?
In this paper, we uncover a thriving underground marketplace focused on unlocking stolen phones. It is powered by:

Lookalike domains impersonating Apple, Xiaomi, Samsung and other brands
Smishing campaigns targeting device owners
Pay‑as‑you‑go “unlocking” tools sold on Telegram
By pivoting on DNS data, we identified 10,000+ malicious domains and a growing ecosystem turning locked devices into profit at scale.

👉 Read how this supply chain works—from theft to resale—and why it’s growing fast. https://www.infoblox.com/blog/threat-intelligence/lookalike-domains-expose-the-iphone-theft-economy/

#ThreatIntel #CyberSecurity #Phishing #MobileSecurity #iOS #Smishing #dns #threatintelligence #cybercrime #infosec #infoblox #infobloxthreatintel #threatintelligence #cybercrime  #infosec #infoblox #infobloxthreatintel

Greek police arrested scammers using a fake cell tower for SMS phishing.

Phones were forced onto insecure 2G networks to harvest data and send bank-themed smishing.

https://www.technadu.com/greek-police-arrest-scammers-in-athens-using-fake-cell-tower-for-sms-phishing-operation/618856/

Thoughts?

#Smishing #MobileSecurity #InfoSec

Tea App Data Breach Fallout: A New App with Security Flaws and Lawsuits – Source: securityboulevard.com https://ciso2ciso.com/tea-app-data-breach-fallout-a-new-app-with-security-flaws-and-lawsuits-source-securityboulevard-com/ #SecurityBoulevard(Original) #rssfeedpostgeneratorecho #classactionlawsuit #CyberSecurityNews #SecurityBoulevard #Threats&Breaches #Identity&Access #NetworkSecurity #Apple.AppStore #MobileSecurity #SocialFacebook #SocialLinkedIn #CloudSecurity #Cybersecurity #securityflaws

Ivanti patches two EPMM flaws exploited in the wild https://www.csoonline.com/article/3985912/ivanti-patches-two-epmm-flaws-exploited-in-the-wild.html #ZeroDayVulnerabilities #NetworkSecurity #MobileSecurity

The Android Phone: Three OPSEC Levels to Disappear Into the Shadows
#OPSEC #Android #Privacy #Cybersecurity #OperationalSecurity #DeadSwitch #PhoneSecurity #PrivacyTools #AndroidSecurity #Encryption #SecurePhone #PrivacySettings #GhostMode #MobileSecurity #DigitalAnonymity #StealthTech #TechPrivacy #PrivacyMatters #SecureYourTech

http://tomsitcafe.com/2025/04/15/the-android-phone-three-opsec-levels-to-disappear-into-the-shadows/

LightSpy: Implant for iOS:

https://www.threatfabric.com/blogs/lightspy-implant-for-ios

#ios #implant #infosec #informationsecurity #mobilesecurity #privacy #vulnerability #cybersecurity #iphone

👉 A new edition of the #OWASP Mobile Top 10 2023 has been released.

The blog breaks down the updated list of #vulnerabilities and provides mitigation guidelines - https://bit.ly/3RH1CQw

#owasptop10 #mobileapplications #mobilesecurity #penetrationtesting #mobileappsecurity #mobileapplicationscanning #apptrana #indusface