Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

Lookout Threat Lab has uncovered a mobile forensics application called Massistant, used by Chinese law enforcement to extract extensive data from mobile devices. Believed to be the successor of MFSocket, Massistant requires physical access to install and is not distributed through official app stores. It collects sensitive information including GPS data, SMS messages, images, audio, contacts, and phone services. The tool is associated with Xiamen Meiya Pico Information Co., Ltd., a Chinese technology company controlling a significant portion of China's digital forensics market. Massistant introduces new features like Accessibility Services to bypass device security prompts and support for additional messaging apps. The discovery raises concerns about data privacy for travelers to China, as law enforcement can potentially access and analyze confiscated devices without a warrant.

Massistant is a mobile forensic tool developed by Xiamen Meiya Pico Information Co., Ltd., a prominent Chinese digital forensics company. It is designed for use by Chinese law enforcement agencies to extract extensive data from mobile devices. Massistant is considered the successor to the earlier tool MFSocket and introduces enhanced capabilities such as leveraging Accessibility Services to bypass device security prompts, enabling data extraction without user consent or interaction. The tool requires physical access to the target device for installation and is not distributed via official app stores, indicating its use in controlled, law enforcement contexts rather than widespread malware campaigns. Massistant collects a broad range of sensitive data including GPS location history, SMS messages, images, audio recordings, contacts, and phone service information. It also supports data extraction from additional messaging applications beyond those targeted by its predecessor. The discovery of Massistant raises significant privacy concerns, particularly for travelers to China, as law enforcement can confiscate devices and extract data without a warrant or user knowledge. While it is not malware in the traditional sense, it functions as a forensic surveillance tool with capabilities that can circumvent standard mobile security protections. There are no known exploits in the wild beyond its intended forensic use, and it is not a remotely exploitable threat but rather a physical-access forensic tool.

MD5 of 93c5cd3a0bb04012927ccd29e505772492fcfbee

MD5 of 8659920f99a96c294c9857a761ce0729f3a8f2f7

MD5 of 895ad87f382de53f7323117b47150eaf0550cbf4

MD5 of c17e9325a6932ff8b725b18e4ddcb6dadab99457

MD5 of 215bd2972c5598787addad911915b9a04932d68d

MD5 of 256c357f884f33c032d2352ee6ff73fe94da83a8

SHA256 of c17e9325a6932ff8b725b18e4ddcb6dadab99457

SHA256 of 93c5cd3a0bb04012927ccd29e505772492fcfbee

SHA256 of 256c357f884f33c032d2352ee6ff73fe94da83a8

SHA256 of 215bd2972c5598787addad911915b9a04932d68d

SHA256 of 895ad87f382de53f7323117b47150eaf0550cbf4

SHA256 of 8659920f99a96c294c9857a761ce0729f3a8f2f7

Detailed information about Chinese Mobile Forensic Tooling Discovered. Get real-time updates, technical details, and mitigation strategies.

Threats Tagged 'mobile forensics'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'mobile forensics'

Lead Pen Test Professional