Boutique offensive security.

mobile application assessments + infostealer log intelligence

credited by

mobile security assessments

  • iOS and Android application penetration testing
  • Reverse engineering of Mach-O binaries and DEX bytecode
  • Runtime instrumentation and dynamic analysis on real devices
  • Jailbreak, root, and tamper detection review
  • Hardening and obfuscation effectiveness review
  • Reporting aligned to OWASP MASVS/MASTG, retest included

infostealer intelligence

  • Continuous monitoring of stealer log markets and channels
  • Credential exposure alerts for your domains
  • Session cookie and token alerts (the ones that bypass MFA)
  • Family tracking across Lumma, StealC, RedLine, and successors
  • One-time exposure report or ongoing monitoring subscription
  • Response guidance your team can act on the same day

about

Acheron is an independent security practice registered in the State of Wyoming.

The name comes from the Acheron: in Greek myth, the river at the boundary of the underworld, crossed by the ferryman Charon; in Epirus, a real river that runs through dark gorges and goes underground, which is where the ancients located the descent. The practice works at the same boundary, between what a surface shows and what moves underneath it.

contact

To discuss an engagement, email:

contact@acheronsec.com

Include the app platform or the domains you want watched. We respond to inquiries within one business day.

methods

signal acheron.1337
pgp available on request
hours mon-fri, 9-17 mt