Channel Public Channel

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com

Open in Telegram

Subscribers: 44.9K
Photos: 136
Videos: 22
Links: 2.9K

Showing posts older than #2802 · Back to latest

Older Posts 20 shown

Post #2801 9.33K Jan 23, 2026, 12:10 UTC

Samsung S23 Ultra: The Ultimate NetHunter Setup(Android 14 Fix)
https://medium.com/@JanCSG/samsung-s23-ultra-the-ultimate-nethunter-setup-31c1105201d9

Medium Samsung S23 Ultra: The Ultimate NetHunter Setup(Android 14 Fix) I’ve spent the last couple of days trying to turn my S23 Ultra into the ultimate mobile hacking machine.

❤ 23
👍 8
🤡 8
🗿 3
🥰 2
🎃 1

Post #2800 8.07K Jan 22, 2026, 06:17 UTC

Android.Phantom trojans are bundled with modded games and popular apps to infiltrate smartphones. They use machine learning and video broadcasts to engage in click fraud
https://news.drweb.com/show/?i=15110&lng=en

❤ 16
👍 5
🎃 5

Post #2799 8.66K Jan 21, 2026, 06:37 UTC

Firebase APK Security Scanner
Scan Android APKs for Firebase security misconfigurations including open databases, exposed storage buckets, and authentication bypasses
https://github.com/trailofbits/skills/tree/main/plugins/firebase-apk-scanner

GitHub skills/plugins/firebase-apk-scanner at main · trailofbits/skills Trail of Bits Claude Code skills for security research, vulnerability detection, and audit workflows - trailofbits/skills

❤ 18
🎃 4
👍 3

Post #2798 7.95K Jan 21, 2026, 04:35 UTC

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari
https://github.com/zeroxjf/WebKit-UAF-ANGLE-OOB-Analysis

👍 11
❤ 6
🎃 2

Post #2797 8.12K Jan 20, 2026, 02:07 UTC

Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system
https://github.com/lautarovculic/frida-ipa-extract

GitHub GitHub - lautarovculic/frida-ipa-extract: Robust Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports… Robust Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system. - lautarovculic/frida-ipa-extract

👍 17
❤ 8
🎃 4
🤣 1

Post #2796 7.46K Jan 18, 2026, 12:39 UTC

WPair: app for testing Bluetooth WhisperPair vulnerability in Google's Fast Pair protocol (CVE-2025-36911) https://github.com/zalexdev/wpair-app

GitHub GitHub - zalexdev/wpair-app: WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair)… WPair is a defensive security research tool that demonstrates the CVE-2025-36911 (eg WhisperPair) vulnerability in Google's Fast Pair protocol. This vulnerability affects millions of Blueto...

🔥 16
❤ 8
👏 6
👍 3
🤯 2
🎃 2
💋 1

Post #2795 8.06K Jan 16, 2026, 15:11 UTC

WhisperPair: Hijacking Bluetooth Accessories
Using Google Fast Pair.
You can also check if your device is vulnerable
https://whisperpair.eu/

whisperpair.eu WhisperPair: Hijacking Bluetooth Accessories Using Google Fast Pair WhisperPair is a family of practical attacks leveraging a flaw in the Google Fast Pair implementation on flagship audio accessories.

❤ 12
🎃 6
👏 4
👍 2

Post #2794 9.75K Jan 15, 2026, 19:08 UTC

A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here?
https://projectzero.google/2026/01/pixel-0-click-part-3.html

projectzero.google A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here? While our previous two blog posts provided technical recommendations for increasing the effort re...

👏 16
🎃 6
❤ 2
👍 1
🤔 1

Post #2793 9.26K Jan 15, 2026, 19:07 UTC

A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave
https://projectzero.google/2026/01/pixel-0-click-part-2.html

projectzero.google A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave With the advent of a potential Dolby Unified Decoder RCE exploit, it seemed prudent to see what k...

👏 12
🎃 3
👍 2

Post #2792 9.4K Jan 15, 2026, 17:02 UTC

A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby
https://projectzero.google/2026/01/pixel-0-click-part-1.html

projectzero.google A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby Over the past few years, several AI-powered features have been added to mobile phones that allow ...

🔥 16
❤ 3
🎃 2
👍 1

Post #2791 8.12K Jan 13, 2026, 14:37 UTC

deVixor: An Evolving Android Banking RAT with Ransomware Capabilities Targeting Iran
https://cyble.com/blog/devixor-an-evolving-android-banking-rat-with-ransomware-capabilities-targeting-iran/

Cyble deVixor: An Evolving Android Banking RAT with Ransomware Capabilities Targeting Iran Cyble analyzed deVixor, an advanced Android banking RAT with ransomware features actively targeting Iranian users.

❤ 16
👍 5
🤬 4
😁 2
🎃 2

Post #2790 9.94K Jan 13, 2026, 11:18 UTC

Flutter SSL Bypass: How to Intercept HTTPS Traffic When all other Frida Scripts Fail
https://m4kr0.vercel.app/posts/flutter-ssl-bypass-how-to-intercept-https-traffic-when-all-other-frida-scripts-fail/

M4KR0 Blog Flutter SSL Bypass: How to Intercept HTTPS Traffic When all other Frida Scripts Fail - M4KR0 Blog my journey in intercepting HTTPS traffic from a APK based on Flutter

❤ 20
🔥 6
👍 4

Post #2789 8.75K Jan 13, 2026, 10:15 UTC

Play Integrity API: How It Works & How to Bypass It
https://m4kr0.vercel.app/posts/play-integrity-api-how-it-works--how-to-bypass-it/

M4KR0 Blog Play Integrity API: How It Works & How to Bypass It - M4KR0 Blog What's Play Interity API and how to bypass it

❤ 18
⚡ 5
👍 4
😴 2
👏 1

Post #2788 9.42K Jan 13, 2026, 09:09 UTC

One-click Telegram IP address leak
https://www.bleepingcomputer.com/news/security/hidden-telegram-proxy-links-can-reveal-your-ip-address-in-one-click/
Video by @0x6rss

❤ 19
🎃 4
👍 2
😁 2

Post #2787 7.22K Jan 12, 2026, 14:43 UTC

Frida-UI: Interact with Frida devices, processes, and scripts directly from your browser
https://github.com/adityatelange/frida-ui

GitHub GitHub - adityatelange/frida-ui: Interact with Frida devices, processes, and scripts directly from your browser. Interact with Frida devices, processes, and scripts directly from your browser. - adityatelange/frida-ui

👌 13
👍 2

Post #2786 7.7K Jan 12, 2026, 13:40 UTC

Dalvik bytecode emulator for Android static analysis | String decryption | Multi-DEX | No Android runtime required
https://github.com/fatalSec/DaliVM

👍 29
❤ 4

Post #2785 13.7K Jan 12, 2026, 10:01 UTC

Droid LLM Hunter is a tool to scan for vulnerabilities in Android applications using Large Language Models (LLMs)
https://github.com/roomkangali/droid-llm-hunter