Hidden Devil in the Development Life Cycle: Google Play Apps Infected with Windows Executable Files
Unit 42 uncovers 145 malicious Google Play apps. Get the full report.
Palo Alto Networks
Android
News of the Week: June 16, 2018
Catch up on the latest Palo Alto Networks news of the week.
Introducing Traps for Android
Introducing Traps for Android: detection and prevention to Android endpoints.
HenBox: Inside the Coop
Unit 42 goes inside the coop with new analysis and additional information on malicious HenBox applications
Reaper Group’s Updated Mobile Arsenal
Unit 42 examines the Reaper Group’s updated mobile arsenal, including a Bitcoin Ticker Widget and a PyeongChang Winter Games application.
TeleRAT: Another Android Trojan Leveraging Telegram’s Bot API to Target Ira...
Unit 42 discovers TeleRAT, an Android Trojan abusing Telegram’s Bot API for command and control and data exfiltration.
HenBox: The Chickens Come Home to Roost
Unit 42 discovers HenBox, an Android Malware family masquerading as legitimate apps on third-party app stores.
Palo Alto Networks News of the Week: February 10, 2018
Catch up on all the latest Palo Alto Networks news.
Mobile Android Is an Even Bigger Opportunity for Attackers Than Windows PCs
Mobile Android is now a bigger threat opportunity than Windows PCs. What mobile network operators need to know about the current mobile threat landsca...
Threat Brief: Meltdown and Spectre Vulnerabilities
Get an overview of the Meltdown and Spectre vulnerabilities including a risk assessment and calls to action.
2 Minute Threat Brief: Android Toast Overlay Attack
2 Minute Threat Brief: Android Toast Overlay Attack.
Threat Brief: Patch Today and Don’t Get Burned by an Android Toast Overlay
Palo Alto Networks Unit 42 researchers share details of a new high severity vulnerability affecting the Google Android platform.
Android Toast Overlay Attack: “Cloak and Dagger” with No Permissions
Palo Alto Networks Unit 42 researchers have uncovered a high severity vulnerability in the Android overlay system, which allows a new Android overlay attack by using the “Toast typ...
Palo Alto Networks News of the Week – July 8, 2017
Catch up on the top Palo Alto Networks news of the week.
SpyDealer: Android Trojan Spying on More Than 40 Apps
Palo Alto Networks researchers discovered an advanced Android malware we’ve named “SpyDealer” which exfiltrates private data from more than 40 apps and steals sensitive messages from communication apps by abusi...
Ewind – Adware in Applications’ Clothing
Threat actors use popular android applications to mask Ewind adware.
Targeted Attacks in the Middle East Using KASPERAGENT and MICROPSIA
This post explores how the attackers attempt to gain a foothold into target networks before briefly describing the malware families used.
Google Play Apps Infected with Malicious IFrames
Unit 42 researchers discover Google Play apps infected with malicious IFrames.
PluginPhantom: New Android Trojan Abuses “DroidPlugin” Framework
Recently, we discovered a new Google Android Trojan named “PluginPhantom”, which steals many types of user information including: files, location data, contacts and Wi-Fi informati...
DualToy: New Windows Trojan Sideloads Risky Apps to Android and iOS Devices
Over the past two years, we’ve observed many cases of Microsoft Windows and Apple iOS malware designed to attack mobile devices. This attack vector is increasingly popular with mal...
Palo Alto Networks News of the Week – July 30, 2016
Unit 42 had a busy week! Researchers Robert Falcone and Jen Miller-Osborn observed a 9002 Trojan delivered using a combination of shortened links and a shared file hosted on Google Drive.
Subscribe to the Blog!
Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
By submitting this form, you agree to our Terms of Use and acknowledge our Privacy Statement. Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.