-
A recently discovered Android vulnerability, referred to as SMS of Death, allows attackers to crash a phone’s telephony process with just one malformed SMS, without any interaction from the victim. Researcher Mark B reports that this flaw can dis…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
CyberDakait, a financially motivated Android malware operation targeting Indian banking customers since July 2025. Researchers identified at least 17,960 compromised devices and 7,611,443 intercepted SMS messages, exposing a campaign that combines bank…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Research found 426 mobile apps connecting to servers advertising PHP versions potentially affected by PHP2Shell vulnerabilities, raising concerns…
·
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Midnight Mimosa, a widespread Android malware campaign, is turning inexpensive smartphones into advertising fraud engines and potential residential proxy nodes by embedding malicious apps in device firmware before purchase. Bitdefender observed thousan…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A new GhostBat RAT variant targets 60 Android financial application packages used in India, combining accessibility-based PIN capture with a transparent overlay that intercepts interactions inside legitimate Google Pay and MobiKwik interfaces. The find…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An Android remote-access Trojan, YuanKong, whose weakly protected dropper reveals more than its hidden payload: it exposes the operator account identifiers embedded in each build. Analysis of 110 droppers uncovered 57 distinct child payloads, 42 operat…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Midnight Mimosa, an Android malware campaign embedded in firmware that monetizes compromised smartphones through advertising fraud and residential proxy services. Disclosed on October 8, the operation affected thousands of devices across more than 150 …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Low-cost Android phones can arrive already compromised, with malware embedded in their firmware before buyers switch them on.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google has expanded Android Advanced Protection with six security enhancements targeting spyware investigations, malicious USB connections, accessibility abuse, browser exploits, and repeated authentication failures. Announced on October 1, 2026, the u…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly documented Android banking trojan named RATHat is demonstrating how generative AI can be operationalized inside mobile malware. The threat uses Google Gemini models to navigate unfamiliar Android interfaces, while its operator panel applies AI …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
