TGViewer
Channel Public Channel
Android Security & Malware

Android Security & Malware

@androidmalware

Mobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.com
Open in Telegram
Subscribers
44.9K
Photos
136
Videos
22
Links
2.9K

Showing posts older than #2942 · Back to latest

Older Posts 20 shown
Post #2941 8.99K
Inside an N26 Impersonation Campaign: From Vishing and Fake Control 1.0 to the Copybara Android RAT
https://www.d3lab.net/inside-an-n26-impersonation-campaign-from-vishing-and-fake-control-1-0-to-the-copybara-android-rat/
D3Lab Inside an N26 Impersonation Campaign: From Vishing and Fake Control 1.0 to the Copybara Android RAT From a fake N26 support call to the Copybara Android RAT: inside a human-operated phishing campaign designed for on-device financial fraud.
  • ❤ 19
  • 👍 10
  • 🥱 9
  • 🥰 5
Post #2940 8.58K
Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon
https://hunt.io/blog/flying-eagle-android-rat-170-servers-night-dragon
hunt.io Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon Hunt.io and NetAskari trace a leaked Android RAT framework across 170 active servers, analyze the APK builder internals, and document a successor platform called Night Dragon targeting Chinese users.
  • 👍 21
  • ❤ 13
  • 😁 9
Post #2937 9.94K

Forwarded from The Bug Bounty Hunter

Reading Contact Photos Without READ_CONTACTS: A Google Messages Confused Deputy Bug

https://blog.devploit.dev/posts/google-messages-avatarcontentprovider-contacts-bypass/
devploit / blog Reading Contact Photos Without READ_CONTACTS: A Google Messages Confused Deputy Bug Analysis of a fixed Google Messages vulnerability that exposed contact photos without READ_CONTACTS, covering its root cause and responsible disclosure.
  • ❤ 49
  • 👍 20
Post #2936 8.85K
RedHook Android malware abuses ADB Wireless Debugging and Shizuku to get shell-level privileges
https://www.group-ib.com/blog/redhook-android-rat-upgraded/
Group-IB RedHook Returns with a Dangerous Upgrade Group-IB analysts examine this resurfaced Android Remote Access Trojan, demonstrating new, sophisticated and malicious functionalities including autonomous privilege abuse, expanded command-and-control capabilities, and a robust persistence stack.
  • 👍 21
  • 👎 17
  • 🤡 13
  • ❤ 10
  • 😁 10
  • 🔥 8
  • 😇 3
Post #2931 18.4K
Android 17 root: full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 (CVE-2026-10702)
Click on the link -> root Android
https://x.com/nebusecurity/status/2069707520160227688
  • 🔥 58
  • 😱 29
  • ❤ 14
  • 🤔 12
  • 😎 9
  • 👀 8
  • 👏 7
Post #2929 11.2K
Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support
https://github.com/UltraSina/androidReverse
GitHub GitHub - UltraSina/androidReverse: Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers… Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support. - UltraSina/androidReverse
  • ⚡ 17
  • 👎 16
  • 👍 14
  • 🔥 14
  • 🤣 14
  • 💩 6
Post #2925 8.96K
I tested Nearby Glasses app to detect "spy" smart glasses - I explained why it is not working reliably and how the app can be even spoofed with fake Bluetooth signals
https://www.mobile-hacker.com/2026/06/14/smart-glasses-can-record-you-and-detecting-them-isnt-so-simple/
Mobile Hacker Smart Glasses Can Record You - And Detecting Them Isn’t So Simple - Mobile Hacker Smart glasses with camera are becoming more common, fitting into everyday life. They look like normal sunglasses — but they can record video, capture audio, and take photos at any moment.
  • ❤ 39
  • 👍 22
Post #2923 9.15K
Tested the raw socket layer of a pre-production POS system. Found 4 critical/high vulnerabilities — including a replay attack, cross-merchant IDOR, ghost transactions, and card identity bypass
https://m4kr0.vercel.app/posts/iso-8583-under-fire-finding-vulnerabilities-in-a-payment-socket
M4KR0 Blog ISO 8583 Under Fire: Finding Vulnerabilities in a Payment Socket - M4KR0 Blog A hands-on walkthrough of security testing an ISO 8583 payment socket — from reversing the app and enabling hidden debug mode, to finding four critical vulnerabilities in the processor layer
  • 🔥 32
  • ❤ 25
  • ⚡ 20
Post #2922 8.13K
NFCShare evolves: from a banking phishing APK to a GitHub-hosted Android NFC fraud campaign
https://www.d3lab.net/nfcshare-evolves-from-a-banking-phishing-apk-to-a-github-hosted-android-nfc-fraud-campaign/
D3Lab NFCShare evolves: from a banking phishing APK to a GitHub-hosted Android NFC fraud campaign A new NFCShare Android malware campaign distributed through an Intesa Sanpaolo-themed phishing flow, short URLs, and GitHub-hosted APKs. The recent samples keep the same NFC card-theft logic but introduce stronger anti-analysis packaging, brand rotation,…
  • 👍 36
  • ❤ 13
Older posts →
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →