GriftHorse Android Trojan Steals Millions from over 10M Victims Globally

The Zimperium zLabs researchers discovered the GriftHorse malware, a global premium services Trojan leading to millions stolen. | Continue reading


@blog.zimperium.com | 2 years ago

New Advanced Android Malware Posing as “System Update”

Zimperium's zLabs is warning Android users about a sophisticated new malicious app that disguises itself as a System Update application. It is stealing data, messages, images and taking control of Android phones. | Continue reading


@blog.zimperium.com | 3 years ago

FreeRTOS TCP/IP Stack Vulnerabilities – The Details

Researcher: Ori Karliner (@oriHCX) Following our blog from last month, this blog will cover the technical details of our findings. If you suspect that any of your devices are affected by these vulnerabilities and want our assessment, contact us at freertos@zimperium.com. General … | Continue reading


@blog.zimperium.com | 5 years ago

CVE-2018-9411: New critical vuln in multiple high-privileged Android services

As part of our platform research in Zimperium zLabs, I have recently discloseda a critical vulnerability affecting multiple high-privileged Android services to Google. Google designated it as CVE-2018-9411 and patched it in the July security update (2018-07-01 patch level), inclu … | Continue reading


@blog.zimperium.com | 5 years ago

Several FreeRTOS TCP/IP Stack Vulnerabilities Found

Researchers: Ori Karliner (@oriHCX) Relevant Operating Systems: FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), AWS FreeRTOS up to V1.3.1, WHIS OpenRTOS and SafeRTOS (With WHIS Connect middleware TCP/IP components) . CVE List: As a part of our ongoing IoT platform research, zLabs rec … | Continue reading


@blog.zimperium.com | 5 years ago