null Mumbai Chapter - October 2013 Meet

1. News bytes
Null Mumbai

2. Android WebView Exploit
Found by Elad Shapira of AVG Mobile
Vuln in the webview class of Android which could be
used to access addJavascriptInterface
Victim needs to have a vulnerable app
All ad libraries at present are vulnerable

4. New Mac OSX malware
Leverage
App disguised as the picture
Creates a backdoor in the system
Uses two Java vulnerabilities
Exploited by Syrian Electronic Army

5. Bug bounty
Facebook paid a researcher $12500
Not proper security checks in the photo report abuse
feature

7. TrueCaller hacked

8. WhatsApp vuln

9. GTA

10. Indian celebrities IT
accounts hacked

13. Thankyou!
adi0x90@gmail.com
@adi1391