When we think about cyber attacks, we usually think about someone targeting a backend system or an...
When we think about cyber attacks, we usually think about someone targeting a backend system or an API gateway, but in my experience with securing mobile apps, It occurred to me that user's the device itself could also serve as an entry point.
A legitimate user might open your app on a normal device, while a potential attacker, might be using:
A rooted device
running an emulator at scale
A custom or modified Android ROM
84% of attacks misuse legitimate tools across 700,000 incidents, reducing detection effectiveness and increasing internal breach…
Cyber threats are becoming increasingly common. Phishing websites, malicious links, fake messages,...
Device Code Flow abuse is not a new technique. Security teams have known for some time that this...
Trapdoor used 455 Android apps and 183 C2 domains, generating 659M daily bid requests and fueling ad fraud.
I’m building ScriptTap, a no-root Android automation app for user-controlled phone workflows. The...
I Turned an Android Phone Into a No-Root Cybersecurity Learning Workspace Most people...
