Matteo Favaro

SATURN Software deobfuscation framework based on LLVM

iOS & Android
22 minutes
Nov 21, 2019
Introduction For a variety of security reasons, obfuscating code is a best practice for mobile app developers. Legitimate app developers use obfuscation
Read Full Post

Fake BBC News App: Analysis

Threat Research
6 minutes
Mar 01, 2018
Follow @fvrmatteo On February 26, 2018, we received a notification from the detection system about a malicious sample with a suspicious package and Play
Read Full Post

Dissecting mobile native code packers. A case study.

Threat Research
34 minutes
Feb 01, 2018
As mobile malware advances to the levels of desktop malware, it's not uncommon to stumble upon protected APKs while analysing malware. Most of the times,
Read Full Post

Fake WhatsApp… and the Real Malware zLabs Discovered

Threat Research
71 minutes
Nov 21, 2017
On November 3, 2017, some users of Reddit noticed two WhatsApp applications with the same developer name "WhatsApp Inc." and started to investigate what
Read Full Post