Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Zhengyu Dong
Lemon Group’s Cybercriminal Businesses Built on Preinfected Devices
Following a report of mobile devices being used for a fraud campaign, we analyzed one of the devices preloaded with two different loaders capable of downloading other components from two different threat groups. In the full research we just presented at the in May, we identified the full details of other systems used by the threat actors, their companies and other commercial front ends in operation, monetization channels, Telegram groups, and employee profiles.
Fake Mobile Apps Steal Facebook Credentials, Cryptocurrency-Related Keys
Mobile We recently observed a number of apps on Google Play designed to perform malicious activities such as stealing user credentials and other sensitive user information, including private keys. By: Cifer Fang, Ford Quin, Zhengyu Dong May 16, 2022 Read time: ( words) We recently observed a number of apps on Google Play designed to perform malicious activities such as stealing user credentials and other sensitive user information, including private keys.
SMS PVA Services' Use of Infected Android Phones Reveals Flaws in SMS Verification
This specific SMS PVA service provider is able to maintain many mobile numbers across different countries. It’s also interesting to note that the cost of maintaining these numbers exceeds the service rates charged to customers — so how, therefore, does this service manage to continue its business operations?
StrongPity APT Group Deploys Android Malware for the First Time
We recently conducted an investigation into a malicious Android malware sample, which we believe can be attributed to the StrongPity APT group, that was posted on the Syrian e-Gov website. To the best of our knowledge, this is the first time that the group has been publicly observed using malicious Android applications as part of its attacks. We first learned about the sample from a thread shared on the MalwareHunterTeam Twitter.
An Old Joker’s New Tricks: Using Github To Hide Its Payload
The Joker malware has consistently plagued mobile users since its discovery in 2017. In January 2020, Google removed 1700 infected applications from the Play Store — a list that grew over three years. More recently, in September, security company Zscaler found 17 samples that were uploaded to the Google Play Store. Joker has been responsible for a range of malicious activity, from signing unknowing users to premium services and compromising SMS messaging to stealing contacts.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Zhengyu
Contact Zhengyu, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack