Bitdefender has identified a malware campaign (dubbed Midnight Mimosa) running on low-cost, multi-brand Android devices built on MediaTek platforms.

A complete technical write-up of an engagement against an active Android banking-fraud operation — recon, malware internals, platform…

Hirudo replaces Indonesian banking apps with patched copies that blind their defences. We break down its patching, distribution, targeting and fraud.

By Hyunseo Shin · October 2026 · Korean version

A use-after-free in Android's Binder driver, recorded once and replayed at will. Part 1 of a full kernel exploit chain built with time travel debugging.

Doctor Web has identified a dangerous backdoor, <a href="https://vms.drweb.com/search/?q=Android.Backdoor.Baohuo.1.origin&lng=en"><b>Android.Backdoor.Baohuo.1.origin</b></a>, in maliciously modified versions of the Telegram X messenger. In addition to being…

How one exported activity in Microsoft Authenticator let an unprivileged app get tokens for any Microsoft service.

Bitdefender Labs researchers found that installing a specially crafted app can leave an Android phone stuck in a crash loop

Contribute to Gabriel2392/SVE-2026-3546 development by creating an account on GitHub.

Google and industry partners have dismantled the XCPE backdoor and botnet, which was intentionally developed and operated by OEM Videostrong Technology Co. for financial gain.

Contribute to Mobile-IoT-Security-Lab/IoTPwnBench development by creating an account on GitHub.