Discover how Kimwolf v7 targets Android IoT devices with HTTP/2 DDoS fingerprinting, Ethereum ENS C2 resolution and Tor backup routing.

Hardware key attestation lets an Android app prove to its backend that a key lives in secure hardware on a locked, verified device. It is also the wall that stops a security analyst working on a rooted phone. This article opens the mechanism from the analyst's…

LLM Obfuscation Detection Framework for Android Apps - Mobile-IoT-Security-Lab/LLMObfuscDetection

LSPosed module for disabling SSL certificate pinning on Android. Covers Java-layer pinning (OkHttp, TrustManager, Conscrypt, WebView, Cordova, Tencent X5) and native-layer pinning (BoringSSL embedd...

A previously undocumented Android on-device fraud bot, advertised as malware-as-a-service since June 2026, with overlays for crypto wallets and banking apps.

Computer Weekly reveals for the first time how French cyber spies hacked EncroChat phones used by organised crime groups.

Summary UNISOC (Shanghai) Technologies Co., Ltd. is a top-three global fabless semiconductor company headquartered in Shanghai, specializing in 2G/3G/4G/5G mobile communication, IoT, and smart device chipsets. Formerly Spreadtrum, it serves major brands like…

Porting the public ghostlock exploit (CVE-2026-43499) to the Samsung Galaxy A17 (SM-A175F, GKI 6.12.23): KDP at EL2, DEFEX safeplace, PANIC_ON_OOPS, and 187 GB KASLR slides, ending in a clean no-panic root and a persistent root shell.

true

I recently tested NFC Canary against several real-world tools used by security researchers and penetration testers, and it raises an interesting question

A researcher’s account of dismantling a fake traffic-challan APK that hides an SMS-intercepting, UPI-hijacking trojan — and stumbling onto…

Manic is a newly identified Android malware family with broad surveillance and remote-control capabilities, introducing an unusual Wi‑Fi mesh technique.

BARGHEST found a cache poisoning attack in BitChat and replay flaw in BLE mesh synchronization that enabled durable network disruption before patching.