Over the past few weeks, reports of the newest aggressive malware family to impact Android devices have made the rounds. Flubot, the credential and banking malware family, uses SMS phishing techniques to propagate to its victims, purporting to be various vendors and delivery services. The group behind this aggressive malware […]
COVID-19 has created a situation unlike anything many of us have ever seen; yet one that will likely leave permanent changes in remote working. With the overnight tectonic shift towards entire workforces working remotely from home, on all variety of corporate and personal (bring your own) devices, IT and security […]
We are thrilled to announce Google has selected us to help ensure the safety of the millions of apps in the Google Play Store through its App Defense Alliance. As a member of the App Defense Alliance, Google will provide us access to mobile apps as they are being queued […]
I’m very excited to announce that Zimperium has acquired application analytics company mi3 Security. The full press release can be found here: Zimperium acquires mi3. We’ve enjoyed great customer success with this solution and intend to further develop the mi3 technology to continue to lead the application security market. […]
Your million dollar 0day just got burned and now worth nothing? No worries – we are still interested in your exploit. The value of 0days can range from a few thousands to even a million dollars for a full remote exploit chain and many companies and governments are willing to […]
By:Zuk Avraham Follow Zuk Avraham (@ihackbanme) It’s been a whirlwind month for myself and the rest of the Zimperium team as we’ve launched new partnerships and closed Series C financing. Last week’s SOLARIN launch event was a highlight for me in particular. The launch took place at SIRIN LAB’s beautiful […]
By:Zuk Avraham Follow Zuk Avraham (@ihackbanme)Joshua Drake Follow Joshua Drake (@jduck)Yaniv Karta Follow Yaniv Karta (@shokoluv) Reflecting on our collective experiences in the Android ecosystem, especially recent events around Stagefright, we were reminded of several deficiencies in the way that Android security update ecosystem works. To help address these issues, […]
By Zuk About 5 years ago, when smartphone usage exploded, Zimperium built zANTI as an easy to use mobile pentesting tool. As zANTI proved successful in exposing a wide range of vulnerabilities, our customers requested that we develop a way to protect their employees against these risks and the rest is history. […]
A potential security risk has been discovered on a large number of Android Smartphones as discovered by Nowsecure. Some of the latest devices, such as Samsung Galaxy S6, and Galaxy S5, come pre-loaded with a third-party keyboard app, SwiftKey, which fetches an update over unsecure and invalidated channel. This allows the […]
By: Zuk Avraham, Joshua Drake, Yaniv Karta, Jimmy Shah (To download the detailed report, click here) Recently, Verizon published a report that says that malware on mobile is not an issue. We strongly suggest Verizon and other enterprises not underestimate the scale of one percent. The sheer number of mobile […]
Receive Zimperium proprietary research notes and vulnerability bulletins in your inbox