---
id: 8317
title: "Android Exploitation Technical Paper Release"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/mobile-application-pentesting/android-exploitation-technical-paper-release/"
published_at: "2012-10-16T00:00:00Z"
tags: ["active-directory", "android", "mobile-security", "ios", "credential-storage"]
phying_url: "https://phying.com/item/8317"
lang: en
---

# Android Exploitation Technical Paper Release

## Summary

Announces the 'Dark Harvest' paper showing that Android and iOS devices tied to Exchange store domain credentials in cleartext, so root access yields AD credentials usable against RDP and VPN.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2012-10-16T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/mobile-application-pentesting/android-exploitation-technical-paper-release/
- **Phying News:** https://phying.com/item/8317