Android Security & Malware

Android.Phantom trojans are bundled with modded games and popular apps to infiltrate smartphones. They use machine learning and video broadcasts to engage in click fraud
https://news.drweb.com/show/?i=15110&lng=en

Dr.Web

Android.Phantom trojans are bundled with modded games and popular apps to infiltrate smartphones. They use machine learning and…

Experts at the Doctor Web antivirus laboratory have discovered and investigated a new trojan clicker malware family. All of these trojans either are administered via the <span class="string">hxxps[:]//dllpgd[.]click</span> server or get downloaded and launched…

❤15🎃4👍3

6.62K views06:17

👍 21 👎

Android Security & Malware

Samsung S23 Ultra: The Ultimate NetHunter Setup(Android 14 Fix)
https://medium.com/@JanCSG/samsung-s23-ultra-the-ultimate-nethunter-setup-31c1105201d9

Medium

Samsung S23 Ultra: The Ultimate NetHunter Setup(Android 14 Fix)

I’ve spent the last couple of days trying to turn my S23 Ultra into the ultimate mobile hacking machine.

❤21🤡8👍7🗿3🥰1🎃1

7.65K views12:10

Android Security & Malware

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications
https://github.com/TheQmaks/soSaver

GitHub

GitHub - TheQmaks/soSaver: A Frida-based utility for dynamically extracting native (.so) libraries from Android applications.

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications. - TheQmaks/soSaver

❤17👍4🔥2

6.11K views13:50

👍 25 👎

Android Security & Malware

Android and authentication: The Evolution of FIDO Experiences on Android
https://bughunters.google.com/blog/fido

👍13❤1

5.18K views14:25

👍 14 👎 1

Android Security & Malware

Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation
https://www.welivesecurity.com/en/eset-research/love-actually-fake-dating-app-used-lure-targeted-spyware-campaign-pakistan/

Welivesecurity

Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan

ESET researchers discover an Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation.

👍12❤3

5.15K views19:07

👍 15 👎

Android Security & Malware

NFCShare (SuperCard X) Android Trojan: NFC card data theft via malicious APK
https://www.d3lab.net/nfcshare-android-trojan-nfc-card-data-theft-via-malicious-apk/

D3Lab

NFCShare Android Trojan: NFC card data theft via malicious APK

An Android trojan distributed via a Deutsche Bank phishing campaign pretends to be “Support Nexi,” prompts victims to tap their payment card and enter the PIN, then exfiltrates NFC data over a WebSocket. We attribute this cluster as NFCShare and provide technical…

👍11❤3

4.89K views12:24

👍 11 👎 1

Android Security & Malware

Disrupting the World's Largest Residential Proxy Network
https://cloud.google.com/blog/topics/threat-intelligence/disrupting-largest-residential-proxy-network

Google Cloud Blog

Disrupting the World's Largest Residential Proxy Network | Google Cloud Blog

IPIDEA’s proxy infrastructure is a component of the digital ecosystem leveraged by a wide array of bad actors.

👍14

4.97K views13:16

Android Security & Malware

The Rise of Android Arsink Rat
https://zimperium.com/blog/the-rise-of-arsink-rat

Zimperium

The Rise of Arsink Rat

true

👏12👍2

5.1K views16:29

👍 15 👎 1

Android Security & Malware

Android Trojan Campaign Uses Hugging Face Hosting for RAT Payload Delivery
https://www.bitdefender.com/en-us/blog/labs/android-trojan-campaign-hugging-face-hosting-rat-payload

Bitdefender Labs

Android Trojan Campaign Uses Hugging Face Hosting for RAT Payload Delivery

Bitdefender researchers discovered an Android RAT campaign that combines social engineering, the resources of Hugging Face and permission abuse

👍9⚡3🤣2😁1

4.85K views06:54

👍 13 👎

Android Security & Malware

Modern iOS Security Features – A Deep Dive
into SPTM, TXM, and Exclaves
https://arxiv.org/pdf/2510.09272

👍14❤5

5.25K views08:43

👍 15 👎 1

Android Security & Malware

Carbonara: The MediaTek exploit nobody served
https://shomy.is-a.dev/blog/article/serving-carbonara
Penumbra is a tool for interacting with Mediatek devices.
It provides flashing and readback capabilities, as well as bootloader unlocking and relocking on vulnerable devices: https://github.com/shomykohai/penumbra

❤12👍5

5.13K views09:58

👍 17 👎

Android Security & Malware

Analysing a Pegasus 0-click Exploit for iOS
Recreated the "Blastpass" iOS exploit in a faked target process, to understand the heap shaping strategy first-hand
https://youtu.be/0JFcDCW3Sis

YouTube

Analysing a Pegasus 0-click Exploit for iOS

Are you a security researcher or reverse engineer?

For 50% off IDA Products use promo code BILLY50, https://hex-rays.com/pricing *
For 30% off IDA Training use promo code BILLY30, https://hex-rays.com/training **

*License discounts are only valid for individuals…

👍15❤8

5.8K views20:19

👍 23 👎

Android Security & Malware

Deep-C: Android Deep Link misconfiguration detector and exploitation tool
https://github.com/KishorBal/deep-C

🔥15❤8👍3🎃2

4.44K views22:41

👍 30 👎 1

Android Security & Malware

Android Game Hacking (Part I)
https://medium.com/@justmobilesec/android-mobile-game-hacking-f428aef8eb98

Medium

Android Mobile Game Hacking

TL;DR#1: This is the first part of our series on Android Game Hacking. We will cover lab environments for rooted Android systems (on a…

🔥25❤4👎1🤮1

4.54K viewsedited 10:19

👍 26 👎 3

Android Security & Malware

Practical Mobile Traffic Interception
https://medium.com/@justmobilesec/practical-mobile-traffic-interception-1481e33d974e

Medium

Practical Mobile Traffic Interception

TL;DR#1: The post will discuss a step-by-step guide of how mobile web traffic can be intercepted on current android and ios applications…

👍16

4.66K views11:32

👍 21 👎 1

Android Security & Malware

Sapsan Terminal: new AI‑powered HID scripting tool that speeds up payload creation and handles the syntax for 15 supported devices (video test)
https://www.mobile-hacker.com/2026/02/03/sapsan-terminal-ai-powered-badusb-script-generator/

Mobile Hacker

Sapsan Terminal: AI-Powered BadUSB Script Generator - Mobile Hacker

Cybersecurity professionals and enthusiasts often rely on scripting to automate tasks and execute penetration tests efficiently. Writing payloads manually for devices like Rubber Ducky, Evil Crow Cable, or Flipper Zero can be time-consuming and error-prone.…

👍10👏3❤1🤔1

4.55K views13:01

👍 15 👎 3

Android Security & Malware

FIRST Ever Online Mobile Hacking Conference
Free, worldwide online event bringing the mobile security community together for sessions on mobile hacking, AI, malware, forensics, live mobile‑focused CTF with prizes!
When: March 3 and 4, 2026
Register here: https://www.mobilehackinglab.com/mobile-hacking-conference-registration

👍16

5.12K views18:16

👍 37 👎 2

Android Security & Malware

Inside a Multi-Stage Android Malware Campaign Leveraging RTO-Themed Social Engineering
https://www.seqrite.com/blog/inside-a-multi-stage-android-malware-campaign-leveraging-rto-themed-social-engineering/

Blogs on Information Technology, Network & Cybersecurity | Seqrite

Inside a Multi-Stage Android Malware Campaign Leveraging RTO-Themed Social Engineering

<p>In recent years, Android malware campaigns in India have increasingly abused the trust associated with government services and official digital platforms. By imitating well-known portals and leveraging social engineering through messaging applications…

👍11❤5

4.27K views11:37

👍 13 👎

Android Security & Malware