PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2019-2215] Ứng dụng trên Google Play khai thác lỗ hổng Android để phát tán phần mềm gián điệp

blog.viettelcybersecurity.com | vulnerability | CVE-2019-2215 | #malware | #android | #spyware | #google-play | #trend-micro | #cve-2019-2215
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Trend Micro found three Google Play apps, Camero, FileCrypt and callCam, exploiting the Android privilege escalation bug CVE-2019-2215 to root devices and deploy spyware harvesting user data.
CVE
CVE-2019-2215
Published
Collected

Related coverage

vulnerability · projectzero.google
[CVE-2019-2215] Bad Binder: Android In-The-Wild Exploit
On October 3, 2019, we disclosed issue 1942 (CVE-2019-2215), which is a use-after-free in Binder in the Android kernel. The bug is a local privilege escalation vulnerability that allows for a full compromise of a vulnerable device. If chained with a browser renderer exploit, this bug could fully compromise a device through a malicious website.
research · volexity.com
EvilBamboo Targets Mobile Devices in Multi-year Campaign
# EvilBamboo Targets Mobile Devices in Multi-year Campaign September 22, 2023 Callum Roxan, Paul Rascagneres, and Tom Lancaster Volexity has identified several long-running and currently active...
research · volexity.com
OceanLotus: Extending Cyber Espionage Operations Through Fake Websites
Since Volexity’s 2017 discovery that OceanLotus was behind a sophisticated massive digital surveillance campaign, the threat group has continued to evolve. In 2019, Volexity gave a presentation at RSA Conference […]
vulnerability · eshard.com
[CVE-2023-20938] Kernel UaF to Root #1: Freeing an Object That’s Still in Use
A use-after-free in Android’s Binder driver, recorded once and replayed at will. Part 1 of a series building a full kernel exploit chain with time travel debugging.
vulnerability · volexity.com
Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows
On September 1, 2026, Volexity’s Network Security Monitoring service detected a spear-phishing campaign from a Chinese threat actor it tracks as UTA0560 targeting customers at multiple non-governmental organizations (NGOs). The emails contained a message encouraging the users to a click a link that led to the website of a US-based university. These links abused a reflected cross-site scripting (XSS) vulnerability on the website, redirecting recipients to threat-actor-controlled infrastructure hosting a multi-stage exploit chain that included a Google Chrome zero-day, CVE-2026-85046. Volexity analyzed its email telemetry and discovered that another Chinese threat actor it tracks as JungleBamboo (also known as APT31/Violet Typhoon/TA412) was also exploiting the same vulnerability chain against a different set of targets using different infrastructure and post-exploitation malware.
vulnerability · calif.io
CVE-2024-10382: Arbitrary code execution in Android Auto and various apps
# CVE-2024-10382: Arbitrary code execution in Android Auto and various apps One library, many apps, and code execution in all of them. Khanh Pham and Linh Le December 18, 2024 android Contents 1....
Back