Team Pangu is back (Sort), Announce Mobile Threat Intelligence Platform 'Janus'

The world-renowned Pangu team has made a comeback. The team, which has previously been highlighted for security research and producing jailbreak, has used their preferred social network to announce a new mobile threat detection platform called Janus.

The official Twitter account of Pangu Team has not been fully full of activity in recent weeks, months, and even years, in all honesty. This account has garnered many followers based on work done in the jailbreak community but it does not really have much to do other than promote talks at conferences related to Pangu9 back in Q3 / Q4 2016.

Team Pangu is back (Sort), Announce Mobile Threat Intelligence Platform 'Janus'

Now, it seems the team is returning with a new focus, with Janus announcement, a platform that will allow threats to be detected directly in the native mobile application code base:

We are releasing Janus, a mobile threat intelligence platform http://www.appscan.io . Find intro doc at http://doc.appscan.io/en/ . Our team is now conducting security research on mobile apps. If you need security auditing for your apps, please contact us.

It appears that Pangu wants to keep what is known by taking the combined expertise of its team members and build a platform that can help by auditing mobile apps from a security perspective. The route chosen to do this is the so-called Janus team, described as a "mobile threat intelligence platform," which "monitors long-term distribution channels, including dozens of major app stores, accumulates to tens of millions of applications and more than 300 billion broad spectrum characteristics. "

Using this platform, the team has also used Twitter to reveal that it has "confirmed multiple iOS apps with over 100 million users" that are vulnerable to the so-called "Zipper Down" team. This is the name the team has assigned to so-called "programming errors" in popular applications that introduce potential "severe consequences" such as the ability to overwrite data and the potential execution of arbitrary code from malicious individuals.

More information about Janus can be found in appscan.io, with documentation at a more technical and in-depth level in document port doc.appscan.io/en/ for platforms.