Dig Vulnerabilities in the BlackBox Presented at DEFCON 28 Blue Team Village and BHASIA Arsenal 2021, 2024 #DEFCON #BHASIA #MobileSecurity #AndroidSecurity

Joined June 2020
πŸŽ‰ 2025 #QuarkEngine Release Anniversary Recap! ✨ We've achieved 197 releases and aim for greater goals in the new year! πŸ™ Thanks to @PippenWang @xspiritualx1 @YushianhD @haeter525 @ZhiHTasi @zorro_wang @sasakikung1 @wen
2
2
414
πŸŽ‰ New report: #BTMOBRAT. BTMOBRAT is an Android remote access trojan (RAT) designed to compromise infected devices through remote control, surveillance, and sensitive data theft. πŸ“Ž reurl.cc/AXrRWd
49
πŸŽ‰ New report: #Herodotus. Herodotus is an Android banking trojan that abuses Accessibility Services, steals local data, and controls SMS messages to access sensitive information and compromise infected devices. πŸ“Ž reurl.cc/NOmG2p
56
πŸŽ‰ Published #QuarkEngine v26.10.1! Here are 1 major update: πŸ’‘Add new Quark rules and analysis reports for the Exodus, RuMMS, and Dendroid malware families. πŸ‘‰ reurl.cc/om3zjg #AndroidSecurity
58
πŸŽ‰ New report: #BrainTest. It gains root privileges through multiple exploits, installs itself as a system app, and dynamically loads additional code to maintain persistence. Quark detects these behaviors. πŸ“Ž reurl.cc/mzAq99
68
πŸŽ‰ New report: #Exodus β€” with a new Quark detection rule added. This update expands Quark’s coverage of Exodus, an Android malware family known for collecting device information and exfiltrating sensitive data. πŸ“Ž reurl.cc/NOEyYe
πŸ€– Made with AI
85
πŸŽ‰ New report: #RuMMS. It ships as a flight-sim game called "Infinite Flight", hides its icon after install, and forwards incoming SMS β€” which today mostly means one-time codes. Quark detects these behaviors. πŸ“Ž reurl.cc/eQnWd7
πŸ€– Made with AI
112
πŸŽ‰ Rules updated for the #Dendroid malware family and new report release. We're continuing to move toward practical and powerful Android malware analysis tools β€” thanks for your continued support! πŸ“Ž Report: reurl.cc/aEMpk4
πŸ€– Made with AI
66
πŸŽ‰ Published #QuarkEngine v26.9.1! Here are 2 major updates: πŸ’‘Add Quark malware analysis reports for EventBot, Skygofree, and Chrysaor. πŸ’‘Set DexTrace as the default analysis library. πŸ‘‰ reurl.cc/VnYA4b #AndroidSecurity
84
πŸŽ‰ Rules updated for the #Chrysaor malware family and new report release. We're continuing to move toward practical and powerful Android malware analysis tools β€” thanks for your continued support! πŸ“Ž Report: reurl.cc/GgpqRZ
πŸ€– Made with AI
101
πŸŽ‰ Rules updated for the #Skygofree malware family and new report release. We're continuing to move toward practical and powerful Android malware analysis tools β€” thanks for your continued support! πŸ“Ž Report: reurl.cc/Gg4ezA
πŸ€– Made with AI
1
99
πŸŽ‰ Rules updated for the #EventBot malware family and new report release. We're continuing to move toward practical and powerful Android malware analysis tools β€” thanks for your continued support! πŸ“Ž Report: reurl.cc/eQD71b
πŸ€– Made with AI
1
131
πŸŽ‰ Published #QuarkEngine v26.8.1! Here are 2 major updates: πŸ’‘Add Quark malware analysis reports for AhRat, AndroRAT, and Sova. πŸ’‘Add DexTrace core-library backend. πŸ‘‰ reurl.cc/OQEQa9 #AndroidSecurity
1
109
πŸŽ‰ Rules updated for the #SOVA malware family and new report release. We're continuing to move toward practical and powerful Android malware analysis tools β€” thanks for your continued support! πŸ“Ž Report: reurl.cc/eQ3MDb
πŸ€– Made with AI
179
πŸŽ‰ 1 new rule added and 278 rules updated for the #AndroRat malware family. We're moving toward practical, powerful tools β€” thanks for your continued support! πŸ“Ž Report: reurl.cc/Z8GY5V
πŸ€– Made with AI
1
116
πŸŽ‰ Rules updated for the #AhRat malware family and new report release. We're continuing to move toward practical and powerful Android malware analysis tools β€” thanks for your continued support! πŸ“Ž Report: reurl.cc/NOav5k
πŸ€– Made with AI
1
2
257
πŸŽ‰ Published #QuarkEngine v26.7.1! Here are one major update: πŸ’‘Add new Quark rules and analysis reports for the NGate, Cerberus, and SuperCardX malware families. πŸ‘‰ reurl.cc/aXpqOX #AndroidSecurity
115
πŸŽ‰ 1 new rule added and 277 rules updated for the #NGate malware family. We're moving toward practical, powerful tools β€” thanks for your continued support! πŸ“Ž Report: reurl.cc/Q2zkXo
πŸ€– Made with AI
1
4
177
πŸŽ‰ Rules updated for the #SuperCardX malware family and new report release. We're continuing to move toward practical and powerful Android malware analysis tools β€” thanks for your continued support! πŸ“Ž Report: reurl.cc/6G1ZL5
πŸ€– Made with AI
74
πŸŽ‰ 1 new rule added and 276 rules updated for the #Cerberus malware family. We're moving toward practical, powerful tools β€” thanks for your continued support! πŸ“Ž Report: reurl.cc/ova9m3
πŸ€– Made with AI
90
πŸŽ‰ Published #QuarkEngine v26.6.1! Here are one major update: πŸ’‘Add new Quark rules and analysis reports for the BRATA, TangleBot, and Godfather malware families. πŸ‘‰ reurl.cc/yO84pl #AndroidSecurity
71