BlackRock Malware

BlackRock Mobile Malware

BlackRock – an advanced Android malware derived from Xeres malware – evades detection and steals login credentials or credit card data from 337 different mobile banking, shopping, lifestyle, and video apps. BlackRock was disclosed in July 2020 by ThreatFabric. The Zimperium z9 engine had begun detecting early variants of BlackRock in the weeks prior to …

App Shielding and In-App Protection

This presentation describes the differences between application shielding or hardening technologies and in-app protection. Application shielding is a set of technologies that modify and obfuscate an application’s binary code. App shielding makes an application more tamper-resistant, protecting against intellectual property theft, piracy, and vulnerability discovery by reverse engineering, and unauthorized access. It creates a more resilient …

Top 5 Ways Hackers Attack Your Mobile Apps

This presentation describes the top five ways hackers attack mobile apps looking for secrets. It describes particular attacks, the tools used in the attacks, what specific information the bad actor hopes to obtain, and cites real-world examples of each of the attack methods. The presentation is a collection of dozens of stories and was constructed …

Scanning the Top 45 Android Mobile Banking Apps

This presentation provides details on development best practices, data leakage risk and security exposure for 45 Android mobile apps from the top US banks and mobile payment providers. The research displays vulnerabilities in consumer mobile banking apps and the correlating risk they introduce for banks and mobile users. This presentation was delivered at Droidcon SFO …

Treat Your Mobile App Like You Treat Your Teenager

I had a teen learning how to drive and created an analogy of how teaching teen drivers to make good decisions is similar to your mobile apps in the wild. You can warn them both about the dangers but they are free to fail on their own. It’s interesting how risk affects auto insurance premiums …

5 Things I Changed to Win Webinar of the Year

I won webinar of the year by popular vote on an industry site by changing everything. I mean everything. I changed the story. I changed the presentation. I changed the graphics. I completely flipped our sales presentation upside down. I then threw it away and created an entirely different piece to tell an altogether different story in only 9 minutes.