4 ms·
I doubt that is a real Google-issued certificate authority based on the issuing CA certificate having an e-mail address identified as "nbbsw@nbbsw.com". It's li
by dhx 4y ago
I doubt that is a real Google-issued certificate authority based on the issuing CA certificate having an e-mail address identified as "nbbsw@nbbsw.com". It's likely the reason this sample was removed from the post?
- axsharma 4y agoSame thought here. The domain appears to be associated with Ningbo Sunning Software, a Chinese vendor and likely a Mediatek partner than anything Android.
- arsome 4y agoGood catch after looking into it more this may be related to subcontractors providing vendors with malicious update tools that they then sign. https://maldroid.github.io/docs/vb_2022.pdf https://maldroid.github.io/docs/vb_2022.pdf
- MishaalRahman 4y agoGood catch!