TGViewer
Channel Public Channel
Android Security & Malware

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com
Open in Telegram
Subscribers
44.8K
Photos
136
Videos
22
Links
2.9K

Showing posts older than #2682 · Back to latest

Older Posts 20 shown
Post #2681 6.19K
Security Evaluation Of Android Apps In Budget African Mobile Devices
The study examined 1,544 APKs collected from seven African smartphones. The analysis revealed that 145 applications (9%) disclose sensitive data, 249 (16%) expose critical components, and many present additional risks: 226 execute privileged or dangerous commands, 79 interact with SMS messages (read, send, or delete), and 33 perform silent installation operations
https://arxiv.org/pdf/2509.18800
  • 👍 12
  • 🤬 5
  • 🤣 5
  • 🌚 4
  • 👀 3
  • 🥴 1
  • 🍓 1
Post #2680 5.79K
Analysis of Android DHCSpy operated by the Iranian APT MuddyWater
https://shindan.io/blog/dhcspy-discovering-the-iranian-apt-muddywater
shindan.io Blog - DHCSpy - Discovering the Iranian APT MuddyWater Shindan est une application SaaS, mobile et desktop qui détecte les compromissions et vulnérabilités sur smartphones et tablettes, sans accès aux données personnelles. Obtenez un diagnostic rapide et précis pour protéger vos VIP et collaborateurs.
  • 👍 6
  • 🌚 3
Post #2679 5.84K
Exploring Android Accessibility Malware | Droidcon Italy 2024
https://www.youtube.com/watch?v=xCHW8ql3vi0
YouTube Exploring Android Accessibility Malware | Droidcon Italy 2024 Android Accessibility Malware EXPOSED: What Hackers Don’t Want You to Know—this eye-opening session from Droidcon Italy 2024 reveals how cybercriminals exploit Android’s Accessibility Services and combine them with credential stuffing to infiltrate user accounts…
  • 🌚 8
  • 👍 3
Post #2677 8.97K
Triggered WhatsApp 0-click on iOS/macOS/iPadOS
CVE-2025-55177 arises from missing validation that the [Redacted] message originates from a linked device, enabling specially crafted DNG parsing that triggers CVE-2025-43300.
Analysis of Samsung CVE-2025-21043 is also ongoing
Source: https://x.com/DarkNavyOrg/status/1972260639101034950
  • ❤ 15
  • ☃ 6
  • 😁 4
  • 😢 2
  • 🤯 1
  • 👨‍💻 1
  • 🎅 1
  • 🎄 1
Post #2676 8.72K
Banker Trojan Targeting Indonesian and Vietnamese Android Users
https://dti.domaintools.com/banker-trojan-targeting-indonesian-and-vietnamese-android-users/
Domaintools DomainTools Investigations | Banker Trojan Targeting Indonesian and Vietnamese Android Users A group has been targeting Indonesian and Vietnamese Android users with banking trojans disguised as legitimate payment and government identity applications. The operators exhibit distinct domain registration patterns with a strong operational focus during…
  • ❤ 13
  • ⚡ 5
Post #2674 10.5K
Finding vulnerabilities in the Binder kernel driver through fuzzing
https://androidoffsec.withgoogle.com/posts/binder-fuzzing/
Withgoogle Binder Fuzzing - Android Offensive Security Blog In our previous blog posts, we explored Android Binder’s intricacies, from exploiting a vulnerability (CVE-2023-20938) for kernel code execution to examining its inner workings. In this post, we shift our focus to finding vulnerabilities in the Binder kernel…
  • ❤ 8
  • 👍 2
  • 🌚 1
Post #2671 8.97K
Automating Android Component Testing with new APK Inspector tool
-What are exported components?
-Setup and testing APK Inspector
-Improve automation and execute ADB commands interactively
-Run it on Android
-What are Intent Redirection Vulnerabilities?
https://www.mobile-hacker.com/2025/09/18/automating-android-app-component-testing-with-new-apk-inspector/
Mobile Hacker Automating Android App Component Testing with New APK Inspector - Mobile Hacker Security testing of Android apps often starts with identifying attack surfaces. One of the most critical is exported components. These are parts of an app (Activities, Services, Broadcast Receivers, Content Providers) that are exposed to other apps and can…
  • 👍 20
  • ❤ 5
  • 🎃 5
  • 🕊 4
Post #2667 10.7K
Strategies for Analyzing Native Code in Android Applications: Combining Ghidra and Symbolic Execution for Code Decryption and Deobfuscation
https://revflash.medium.com/strategies-for-analyzing-native-code-in-android-applications-combining-ghidra-and-symbolic-aaef4c9555df
Medium Strategies for Analyzing Native Code in Android Applications: Combining Ghidra and Symbolic… In my work analyzing native code in Android applications, I often try different techniques. Some work, others not so much. I’ve realized I…
  • 👍 13
  • 🔥 3
  • 👏 3
  • ❤ 1
Post #2666 6.42K
PhantomCall unmasked: An Antidot variant disguised as fake Chrome apps in a global banking malware campaign
https://www.ibm.com/think/news/phantomcall-antidot-variant-in-fake-chrome-apps
Ibm PhantomCall unmasked: An Antidot variant disguised as fake Chrome apps in a global banking malware campaign | IBM Android users beware! A new Antidot campaign (banking trojan) named PhantomCall is targeting users of major financial institutions across Europe. Trusteer Labs shares what they’ve learned.
  • ❤ 9
  • 👍 5
  • 👏 5
Post #2665 8.59K
Analysis of P2P cheap "spy" cameras and their LookCam app
https://palant.info/2025/09/08/a-look-at-a-p2p-camera-lookcam-app
Almost Secure A look at a P2P camera (LookCam app) I’ve got my hands on an internet-connected camera and decided to take a closer look, having already read about security issues with similar cameras. What I found far exceeded my expectations: fake access controls, bogus protocol encryption, completely unprotected…
  • 🔥 18
  • 👍 3
  • 🌚 1
Post #2663 7.56K
Analysis of CVE-2025-38352 and technical insights into process of triggering the bug that caused a crash in the Android kernel. It was released in the September 2025 Android Bulletin, marked as possibly under limited, targeted exploitation.
https://streypaws.github.io/posts/Race-Against-Time-in-the-Kernel-Clockwork/
StreyPaws Race Against Time in the Kernel’s Clockwork An in-depth exploration of the Linux POSIX CPU Timer Subsystem, including patch analysis and vulnerability insights for Android Kernel CVE-2025-38352.
  • ❤ 13
  • 👍 2
Post #2662 8.32K
CoRCTF 2025 - CoRPhone: Android Kernel Pwn
CoRPhone is an Android kernel exploitation challenge created for CoRCTF 2025. It simulates a scenario in which a kernel exploit is delivered as shellcode and executed in memory by an untrusted Android app.
https://github.com/0xdevil/corphone/tree/main
GitHub GitHub - 0xdevil/corphone: CoRCTF 2025 - CoRPhone: Android Kernel Pwn CoRCTF 2025 - CoRPhone: Android Kernel Pwn. Contribute to 0xdevil/corphone development by creating an account on GitHub.
  • 👍 17
  • ❤ 9
  • 🤩 3
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →