How I Took Down a ₹1.2Cr Android Banking Fraud
https://medium.com/@im404/how-i-took-down-a-1-2-b4430d997c07
https://medium.com/@im404/how-i-took-down-a-1-2-b4430d997c07
Medium
How I Took Down a ₹1.2Cr Android Banking Fraud
A complete technical write-up of an engagement against an active Android banking-fraud operation — recon, malware internals, platform…
❤20🤯11🌚11⚡9👀8
Hirudo: From Fake Updates to Patched Banking Apps
https://www.threatfabric.com/blogs/hirudo-from-fake-updates-to-patched-banking-apps
https://www.threatfabric.com/blogs/hirudo-from-fake-updates-to-patched-banking-apps
ThreatFabric
Hirudo: From Fake Updates to Patched Banking Apps
Hirudo replaces Indonesian banking apps with patched copies that blind their defences. We break down its patching, distribution, targeting and fraud.
🎃26❤21
LEAD: LLM-Based Static Analysis of Session Hijacking Vulnerabilities in Android Deep Links
https://blog.cykor.kr/2026/10/LEAD-LLM-Based-Static-Analysis-of-Android-Deep-Links
https://blog.cykor.kr/2026/10/LEAD-LLM-Based-Static-Analysis-of-Android-Deep-Links
blog.cykor.kr
LEAD: LLM-Based Static Analysis of Session Hijacking Vulnerabilities in Android Deep Links - Your site
By Hyunseo Shin · October 2026 · Korean version
👍23❤19🎉15
Full Android kernel exploit chain built on CVE-2023-20938, a use-after-free in Binder, on a Pixel 6 running Android 12
https://www.eshard.com/blog/kernel-uaf-1-trigger
https://www.eshard.com/blog/kernel-uaf-1-trigger
Eshard
Kernel UaF to Root #1: Freeing an Object That’s Still in Use | eShard
A use-after-free in Android's Binder driver, recorded once and replayed at will. Part 1 of a full kernel exploit chain built with time travel debugging.
👏25👍13🔥10😁10❤4
Baohuo, the gray eminence. Android backdoor hijacks Telegram accounts, gaining complete control over them
https://news.drweb.com/show/?i=15076
https://news.drweb.com/show/?i=15076
Dr.Web
Baohuo, the gray eminence. Android backdoor hijacks Telegram accounts, gaining complete control over them
Doctor Web has identified a dangerous backdoor, <a href="https://vms.drweb.com/search/?q=Android.Backdoor.Baohuo.1.origin&lng=en"><b>Android.Backdoor.Baohuo.1.origin</b></a>, in maliciously modified versions of the Telegram X messenger. In addition to being…
❤16😱8⚡6
How one exported activity in Microsoft Authenticator let an unprivileged app get tokens for any Microsoft service (CVE-2026-80097)
https://enclave.ai/blog/authmask-we-made-microsoft-authenticator-hand-over-tokens
https://enclave.ai/blog/authmask-we-made-microsoft-authenticator-hand-over-tokens
Enclave
Enclave: AuthMask: We Made Microsoft Authenticator Hand Over Tokens to an App With Zero Permissions
How one exported activity in Microsoft Authenticator let an unprivileged app get tokens for any Microsoft service.
❤34
The Seven Android Trojan Families Targeting Indian Banking Apps
https://www.group-ib.com/blog/cyberdakait-seven-android-trojans-indian-banking/
https://www.group-ib.com/blog/cyberdakait-seven-android-trojans-indian-banking/
👍12
GhostMap: The Android flaw that crashes your phone before you open the app (not fixed)
https://www.bitdefender.com/en-us/blog/labs/ghostmap-android
https://www.bitdefender.com/en-us/blog/labs/ghostmap-android
Bitdefender
GhostMap: The Android flaw that crashes your phone before you open the app
Bitdefender Labs researchers found that installing a specially crafted app can leave an Android phone stuck in a crash loop
👍9
Run unsigned code in Download Mode on Samsung (run custom images on locked bootloader for Exynos) - SVE-2026-3546 (CVE-2026-21155)
https://github.com/Gabriel2392/SVE-2026-3546
https://github.com/Gabriel2392/SVE-2026-3546
GitHub
GitHub - Gabriel2392/SVE-2026-3546
Contribute to Gabriel2392/SVE-2026-3546 development by creating an account on GitHub.
❤10🔥7👍5
Android TV Box Malware: XCPE Botnet
https://cloud.google.com/blog/topics/threat-intelligence/shutting-the-door-on-the-xcpe-botnet
https://cloud.google.com/blog/topics/threat-intelligence/shutting-the-door-on-the-xcpe-botnet
Google Cloud Blog
Shutting the Door on the XCPE Botnet | Google Cloud Blog
Google and industry partners have dismantled the XCPE backdoor and botnet, which was intentionally developed and operated by OEM Videostrong Technology Co. for financial gain.
👍6
IoTPwnBench: an open-source benchmark for IoT security research, featuring 716 intentionally implemented vulnerabilities in IoT firmware images
https://github.com/Mobile-IoT-Security-Lab/IoTPwnBench
https://github.com/Mobile-IoT-Security-Lab/IoTPwnBench
GitHub
GitHub - Mobile-IoT-Security-Lab/IoTPwnBench
Contribute to Mobile-IoT-Security-Lab/IoTPwnBench development by creating an account on GitHub.
🔥4👍1