
Dig Vulnerabilities in the BlackBox Presented at DEFCON 28 Blue Team Village and BHASIA Arsenal 2021, 2024 #DEFCON #BHASIA #MobileSecurity #AndroidSecurity
Joined June 2020
- Tweets328
- Following766
- Followers857
- Likes231
Pinned Tweet
π 2025 #QuarkEngine Release Anniversary Recap!
β¨ We've achieved 197 releases and aim for greater goals in the new year!
π Thanks to @PippenWang @xspiritualx1 @YushianhD @haeter525 @ZhiHTasi @zorro_wang @sasakikung1 @wen
π New report: #BTMOBRAT.
BTMOBRAT is an Android remote access trojan (RAT) designed to compromise infected devices through remote control, surveillance, and sensitive data theft.
π reurl.cc/AXrRWd
π New report: #Herodotus.
Herodotus is an Android banking trojan that abuses Accessibility Services, steals local data, and controls SMS messages to access sensitive information and compromise infected devices.
π reurl.cc/NOmG2p
π Published #QuarkEngine v26.10.1!
Here are 1 major update:
π‘Add new Quark rules and analysis reports for the Exodus, RuMMS, and Dendroid malware families.
π reurl.cc/om3zjg
#AndroidSecurity
π New report: #BrainTest.
It gains root privileges through multiple exploits, installs itself as a system app, and dynamically loads additional code to maintain persistence. Quark detects these behaviors.
π reurl.cc/mzAq99
π New report: #Exodus β with a new Quark detection rule added.
This update expands Quarkβs coverage of Exodus, an Android malware family known for collecting device information and exfiltrating sensitive data.
π reurl.cc/NOEyYe
π€ Made with AI
π New report: #RuMMS.
It ships as a flight-sim game called "Infinite Flight", hides its icon after install, and forwards incoming SMS β which today mostly means one-time codes. Quark detects these behaviors.
π reurl.cc/eQnWd7
π€ Made with AI
π Rules updated for the #Dendroid malware family and new report release.
We're continuing to move toward practical and powerful Android malware analysis tools β thanks for your continued support!
π Report: reurl.cc/aEMpk4
π€ Made with AI
π Published #QuarkEngine v26.9.1!
Here are 2 major updates:
π‘Add Quark malware analysis reports for
EventBot, Skygofree, and Chrysaor.
π‘Set DexTrace as the default analysis library.
π reurl.cc/VnYA4b
#AndroidSecurity
π Rules updated for the #Chrysaor malware family and new report release.
We're continuing to move toward practical and powerful Android malware analysis tools β thanks for your continued support!
π Report: reurl.cc/GgpqRZ
π€ Made with AI
π Rules updated for the #Skygofree malware family and new report release.
We're continuing to move toward practical and powerful Android malware analysis tools β thanks for your continued support!
π Report: reurl.cc/Gg4ezA
π€ Made with AI
π Rules updated for the #EventBot malware family and new report release.
We're continuing to move toward practical and powerful Android malware analysis tools β thanks for your continued support!
π Report: reurl.cc/eQD71b
π€ Made with AI
π Published #QuarkEngine v26.8.1!
Here are 2 major updates:
π‘Add Quark malware analysis reports for
AhRat, AndroRAT, and Sova.
π‘Add DexTrace core-library backend.
π reurl.cc/OQEQa9
#AndroidSecurity
π Rules updated for the #SOVA malware family and new report release.
We're continuing to move toward practical and powerful Android malware analysis tools β thanks for your continued support!
π Report: reurl.cc/eQ3MDb
π€ Made with AI
π 1 new rule added and 278 rules updated for the
#AndroRat malware family. We're moving toward practical, powerful tools β thanks for your continued support!
π Report: reurl.cc/Z8GY5V
π€ Made with AI
π Rules updated for the #AhRat malware family and new report release.
We're continuing to move toward practical and powerful Android malware analysis tools β thanks for your continued support!
π Report: reurl.cc/NOav5k
π€ Made with AI
π Published #QuarkEngine v26.7.1!
Here are one major update:
π‘Add new Quark rules and analysis reports for the NGate, Cerberus, and SuperCardX malware families.
π reurl.cc/aXpqOX
#AndroidSecurity
π 1 new rule added and 277 rules updated for the
#NGate malware family. We're moving toward practical, powerful tools β thanks for your continued support!
π Report: reurl.cc/Q2zkXo
π€ Made with AI
π Rules updated for the #SuperCardX malware family and new report release.
We're continuing to move toward practical and powerful Android malware analysis tools β thanks for your continued support!
π Report: reurl.cc/6G1ZL5
π€ Made with AI
π 1 new rule added and 276 rules updated for the
#Cerberus malware family. We're moving toward practical, powerful tools β thanks for your continued support!
π Report: reurl.cc/ova9m3
π€ Made with AI
π Published #QuarkEngine v26.6.1!
Here are one major update:
π‘Add new Quark rules and analysis reports for the BRATA, TangleBot, and Godfather malware families.
π reurl.cc/yO84pl
#AndroidSecurity




















