Claud Xiao, Author at Palo Alto Networks Blog

Malware, Threat Prevention, Unit 42

Yesterday we posted an analysis report on a novel malware XcodeGhost that modifies Xcode IDE to infect Apple iOS apps. In the report, we mentioned that at least two popular iOS apps …

Sep 18, 2015

By Claud Xiao

Malware, Threat Prevention, Unit 42

UPDATE: Since this report's original posting on September 17, three additional XCodeGhost updates have been published, available here, here and here. On Wednesday, Chinese iOS developers disclosed a new OS X and iOS malware on Sina Weibo. Alibaba …

Sep 17, 2015

By Claud Xiao

Cybersecurity, Malware, Mobility, Threat Prevention, Unit 42

Executive Summary Recently, WeipTech was analyzing suspicious Apple iOS tweaks reported by users and found over 225,000 valid Apple accounts with passwords stored on a server. In cooperation with WeipTech, we have …

Aug 30, 2015

By Claud Xiao

Application Advisory/Analysis, Mobility, Threat Advisories - Advisories, Threat Prevention, Unit 42

We have recently been investigating an antivirus app in the Google Play store that was displaying fake virus detection results to scare users into purchasing a premium service. According to the Google …

Jan 22, 2015

By Claud Xiao

Announcement, Malware, Reports, Unit 42

Coolpad is the sixth largest manufacturer of smartphones in the world, and the third largest in China. We recently discovered that the software installed on many of Coolpad’s high-end Android phones includes …

Malware, Threat Prevention, Unit 42

Update: XcodeGhost Attacker Can Phish Passwords and Open URLs through Infec...

On Thursday we posted the initial analysis report on XcodeGhost malware and then found it had infected 39 iOS apps, potentially impacting hundreds of millions of users. XcodeGhost embedded malicious code into …

Sep 18, 2015

By Claud Xiao

Malware, Mobility, Threat Advisories - Advisories, Threat Prevention, Unit 42

Cardbuyer: New Smart Android Trojan Defeats Multi-factor Verification and S...

On April 21st our WildFire analysis cloud detected a new Android Trojan, which is currently completely undetected in VirusTotal and uses a new combination of tactics to make money for the author. …

Apr 24, 2014

By Claud Xiao and Zhi Xu

Threat Advisories - Advisories, Threat Prevention, Unit 42

Funtasy Trojan Targets Spanish Android Users with Sneaky SMS Charges

Summary A new Android Trojan, named Funtasy, began targeting Spanish Android users in mid-April. Users have downloaded 18 different variants of Funtasy between 13,500 and 67,000 times from the Google Play store. …

May 12, 2014

By Zhi Xu, Claud Xiao and Ryan Olson

Application Advisory/Analysis, Malware, Mobility, Threat Advisories - Advisories, Threat Prevention, Unit 42

SMS-Based In-App Purchase on Android Is Not Worth The Risk

In-App Purchase (IAP) has become a popular way to sell services and virtual items through mobile applications. In the Android ecosystem, in addition to the official IAP service by Google, there are …

Jul 15, 2014

By Claud Xiao and Zhi Xu

Threat Advisory/Analysis, Unit 42

Insecure Internal Storage in Android

Today, Palo Alto Networks researcher Claud Xiao is delivering a presentation titled “Insecure Internal Storage in Android” at the Hacks in Taiwan Conference (HITCON). Claud is discussing techniques for accessing private data …

Aug 18, 2014

By Claud Xiao and Ryan Olson

Claud Xiao

Malware, Threat Prevention, Unit 42

Malware XcodeGhost Infects 39 iOS Apps, Including WeChat, Affecting Hundred...

Malware, Threat Prevention, Unit 42

Novel Malware XcodeGhost Modifies Xcode, Infects Apple iOS Apps and Hits Ap...

Cybersecurity, Malware, Mobility, Threat Prevention, Unit 42

KeyRaider: iOS Malware Steals Over 225,000 Apple Accounts to Create Free Ap...

Application Advisory/Analysis, Mobility, Threat Advisories - Advisories, Threat Prevention, Unit 42

Scareware App Downloaded Over a Million Times from Google Play

Announcement, Malware, Reports, Unit 42

CoolReaper Revealed: A Backdoor in Coolpad Android Devices

Malware, Threat Prevention, Unit 42

Update: XcodeGhost Attacker Can Phish Passwords and Open URLs through Infec...

Malware, Mobility, Threat Advisories - Advisories, Threat Prevention, Unit 42

Cardbuyer: New Smart Android Trojan Defeats Multi-factor Verification and S...

Threat Advisories - Advisories, Threat Prevention, Unit 42

Funtasy Trojan Targets Spanish Android Users with Sneaky SMS Charges

Application Advisory/Analysis, Malware, Mobility, Threat Advisories - Advisories, Threat Prevention, Unit 42

SMS-Based In-App Purchase on Android Is Not Worth The Risk

Threat Advisory/Analysis, Unit 42

Insecure Internal Storage in Android

Get the latest news, invites to events, and threat alerts

Products and Services

Company

Popular Links