Android malware researcher | Founder of @apkdetect
Joined February 2017
- Tweets625
- Following374
- Followers1K
- Likes7.5K
Pinned Tweet
I'm thrilled to present @apkdetect - #Android #malware analysis, detection and classification platform!
Analyze suspicious apps, detect known threats and extract malware configurations.
Go and check features: apkdetect.com
@LukasStefanko @virqdroid @ThreatFabric
Introducing new #Android #malware analysis platform!
Upload APK, detect malware and grab its configuration.
Currently open for trusted researchers only.
Learn more on: apkdetect.com
Witold Precikowski retweeted
CSIRT KNF discovered a campaign of the FvncBot malware described in our blog: bit.ly/3MgAqYF
The FvncBot features include keylogging, web-inject attacks, screen streaming and remote control capabilities.
Explore the samples in apkdetect.com/
🚨 Uwaga! Ostrzegamy przed kolejną odsłoną fałszywych aplikacji dla Androida pod nazwą Klucz Bezpieczeństwa.
🕵️♂️ Tym razem szkodliwe oprogramowanie podszywa się pod #SGB, @mBankpl, @BankMillennium, #CA24, @ING__Polska, @AliorBankSA.
🔐 Nie dajcie się oszukać i pamiętajcie o pobieraniu aplikacji wyłącznie z zaufanych źródeł!
Witold Precikowski retweeted
Intel 471 observed a new Android banking trojan impersonating an mBank security app in Poland. We named it FvncBot, noting a new codebase and capabilities used for mobile #fraud. Read the full analysis: hubs.la/Q03W-1PV0
#cybersecurity #threatintel #cybercrime
Witold Precikowski retweeted
Intel 471 reports new Android banking trojan FvncBot, targeting Polish users via a fake mBank security app. It abuses accessibility services for keylogging, employs web injects, screen streaming & HVNC, & has a new codebase not tied to leaked source codes. intel471.com/blog/new-fvncbo…
Witold Precikowski retweeted
TgToxic is evolving, expanding targets and shifting tactics to evade detection. Intel 471 breaks down its latest moves and key recommendations for defenders. Read more: hubs.la/Q0390H170
#threatintel #TgToxic #threathunting #malware #cybersecurity
Witold Precikowski retweeted
#BlankBot a new Android banking trojan with screen recording, keylogging and remote control capabilities
#mobilesecurity #Androidsecurity #threatintel #infosec #cybersecurity #malware
On July 24, 2024, Intel 471 Malware Intelligence researchers discovered an unknown Android banking trojan. We decided to call it BlankBot. hubs.la/Q02JNG8B0
Witold Precikowski retweeted
On July 24, 2024, Intel 471 Malware Intelligence researchers discovered an unknown Android banking trojan. We decided to call it BlankBot. hubs.la/Q02JNG8B0
Witold Precikowski retweeted
Exploiting the #EvilVideo vulnerability on Telegram
We discovered a 0-day Telegram for Android exploit that allows sending malicious apps disguised as videos
welivesecurity.com/en/eset-r… @ESETresearch @ESET
Interested in Android malware research? Check out the remote position for a malware analyst from @Intel471Inc and join our Malware Intelligence team!
intel471.bamboohr.com/career…
Witold Precikowski retweeted
🚨 Blog Alert: Bypassing Android 13 Restrictions with SecuriDropper
Discover how SecuriDropper bypasses Google's newest Android defenses. Droppers evolve into MaaS, outpacing security measures
#ThreatFabric #Android13 #SecuriDropper
hubs.ly/Q027SVwL0
Witold Precikowski retweeted
Trojanized #Signal and #Telegram apps discovered on Google Play and Galaxy Store. Espionage malware belongs to BadBazaar family
It is the first case of spying on victim’s Signal communication by secretly autolinking compromised device to attacker’s Signal
welivesecurity.com/en/eset-r…
Witold Precikowski retweeted
Katalina - new tool that executes Android byte code, enabling to deobfuscate strings in Android malware
It’s written in Python and emulates each individual bytecode instruction that was used back in the day for Android
github.com/huuck/Katalina
humansecurity.com/tech-engin… via @hookgab
Witold Precikowski retweeted
💥 GIR now available on GitHub! 💥
We’re thrilled to announce the initial Open Source release of the General Intelligence Requirements (GIR) framework on GitHub. Get started today to supercharge your threat intelligence program!
hubs.la/Q01-jLyR0
Witold Precikowski retweeted
Zespół CSIRT KNF przeprowadził szczegółową analizę strony internetowej zgłoszonej przez firmę RIFFSEC (nitter.cf/getriffsec/statu…).
Wynikiem tej analizy było odkrycie wyrafinowanego ataku phishingowego, który wykorzystywał technologię WebAPK do instalacji szkodliwej aplikacji na urządzeniach z systemem Android.
Cały tekst:
linkedin.com/pulse/wykorzyst…
Witold Precikowski retweeted
Malware alert! Anatsa banking trojan hits the UK, US, and DACH region. ThreatFabric monitors Google Play dropper campaigns spreading the Android Trojan Anatsa. Anatsa's DTO Fraud leads to financial losses.
Read the full article: threatfabric.com/blogs/anats…
#fraud #malware #alert
Witold Precikowski retweeted
Trojanized #WhatsApp and #Telegram apps replace cryptocurrency wallet addresses in messages
Some of them use OCR to recognize mnemonic phrase text from screenshots and photos stored on the devices to steal cryptocurrency funds
welivesecurity.com/2023/03/1… #Android #Windows
Witold Precikowski retweeted
I published an article and a connector to #OpenCTI and
@apkdetect
. The connector allows you to complete the knowledge about the hash of the .apk file and then visualise the relationship.
Sorry, the article is in Polish.
linkedin.com/pulse/apkdetect…
#mobile #Malware #xenomorph #CTI
Witold Precikowski retweeted
THREAT UPDATE: ThreatFabric discovers a new strain #Xenomorph!
Xenomorph v3 adds a complete #ATS framework capable of Device Take Over (DTO), in addition more than 400 new financial institutions in its target list.
threatfabric.com/blogs/xenom…
