Android Security & Malware

15 October 2026 11:43

LEAD: LLM-Based Static Analysis of Session Hijacking Vulnerabilities in Android Deep Links
https://blog.cykor.kr/2026/10/LEAD-LLM-Based-Static-Analysis-of-Android-Deep-Links

Android Security & Malware

14 October 2026 10:31

How I Took Down a ₹1.2Cr Android Banking Fraud
im404/how-i-took-down-a-1-2-b4430d997c07">im404/how-i-took-down-a-1-2-b4430d997c07" rel="nofollow">https://medium.com/@im404/how-i-took-down-a-1-2-b4430d997c07

Android Security & Malware

07 October 2026 06:07

CVE-2026-23866: Finding a Whatsapp NDay
https://numb3rs.re/posts/cve-2026-23866-finding-a-whatsapp-nday/

Android Security & Malware

29 September 2026 19:39

CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC) https://github.com/0xjohnnydev/CVE-2026-20687-AppleJPEGDriver-UAF

Android Security & Malware

29 September 2026 08:36

From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat
https://www.cleafy.com/cleafy-labs/from-blackcat-to-panda-workshop-inside-the-evolving-c2-panel-behind-rathat

Android Security & Malware

28 September 2026 09:42

A native APK and DEX decompiler written in Rust
https://github.com/Ch0pin/rdx

Android Security & Malware

27 September 2026 10:46

Getting root on OnePlus 15 from an untrusted app, via an audio debug service and a vendor HAL
https://blog.nns.ee/2026/09/24/oneplus-root/

Android Security & Malware

17 September 2026 17:08

RatHat: AI-Powered Mobile Threat is Here for Your Credentials & Bank Accounts
https://zimperium.com/blog/rathat-ai-powered-mobile-threat-is-here-for-your-credentials-bank-accounts

Android Security & Malware

14 September 2026 08:04

Vwork: Weaponized Open-source Software as an Addon for Gigabud
https://www.group-ib.com/blog/vwork-app-cloning-gigabud-goldfactory/

Android Security & Malware

09 September 2026 14:33

WeWorm: The first zero-click worm to spread through WeChat calls across iOS and Android
https://calif.io/research/weworm

Android Security & Malware

08 September 2026 14:11

TeleGapper is a black-box dynamic analysis tool for Telegram Mini Apps on Android devices
https://github.com/Mobile-IoT-Security-Lab/TeleGapper

Android Security & Malware

08 September 2026 07:38

How to Copy and Backup RFID Access Cards and NFC Key Fobs with Chameleon Ultra
https://www.mobile-hacker.com/2026/09/07/chameleon-ultra-guide-to-rfid-reading-emulation-and-testing/

Android Security & Malware

02 September 2026 12:09

Uncovering StreamRat: From Meta Ads to Full Device Takeover
https://www.threatfabric.com/blogs/from-meta-ads-to-full-device-takeover-uncovering-streamrat

Android Security & Malware

01 September 2026 20:37

Beware of fake Indeed interview apps used to install spyware
https://www.malwarebytes.com/blog/scams/2026/08/beware-of-fake-indeed-interview-apps-used-to-install-spyware

Android Security & Malware

31 August 2026 08:16

How to Install Proxmark3 on the uConsole to read, write and clone some of RFID and NFC tokens
https://www.mobile-hacker.com/2026/08/31/how-to-install-proxmark3-on-the-clockworkpi-uconsole/

Android Security & Malware

14 October 2026 16:42

Hirudo: From Fake Updates to Patched Banking Apps
https://www.threatfabric.com/blogs/hirudo-from-fake-updates-to-patched-banking-apps

Android Security & Malware

12 October 2026 08:08

The phone was compromised before the user turned it on: the rise of Midnight Mimosa
https://www.bitdefender.com/en-us/blog/labs/midnight-mimosa-malware

Android Security & Malware

01 October 2026 16:46

CVE-2026-86950: The Great Glyph Grift
An in-the-wild iOS bug with a possible WhatsApp zero-click path
Blog: https://calif.io/research/the-great-glyph-grift
PoC: https://github.com/califio/publications/tree/main/MADBugs/CVE-2026-86950

Android Security & Malware

29 September 2026 11:27

How we found 24 Android vulnerabilities using our open source AI security agent
https://github.blog/security/how-we-found-24-android-vulnerabilities-using-our-open-source-ai-security-agent/

Android Security & Malware

28 September 2026 21:51

apk-reverse: An Agent Skill for Android APK reverse engineering, debloating, ad removal, surgical dex patching, repacking, and runtime/server analysis
https://github.com/newliver666/apk-reverse

Android Security & Malware

28 September 2026 08:42

RemControl: AI Built the Overlays. Victims Lose their PINs
https://www.group-ib.com/blog/remcontrol-android-banking-trojan/

Android Security & Malware

22 September 2026 13:01

Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC
https://www.mobile-hacker.com/2026/09/21/turn-a-rooted-android-phone-into-an-nfc-authenticator-and-automation-tool-for-your-pc/

Android Security & Malware

14 September 2026 08:08

Mantax Otax: Indonesian Mobile Ransomware with Spyware Integration
https://zimperium.com/blog/mantax-otax-indonesian-mobile-ransomware-with-spyware-integration

Android Security & Malware

09 September 2026 15:37

RCE in mexc Android app via Bypass URL validation to access the WebView, JS-Bridge with Path Traversal leads to Native-Library Cache Overwrite.
https://itis911.github.io/writeups/RCE-Mexc-Andriod-App.html

Android Security & Malware

09 September 2026 13:31

Hagaseca: Inside a Packed Android RAT Loader
https://darkatlas.io/blog/hagaseca-inside-a-packed-android-rat-loader

Android Security & Malware

08 September 2026 09:14

1-click could expose every contact saved on your Android, even if you never gave permission to access them (CVE-2026-28576)
Blog: https://www.mobilehackinglab.com/blog/cve-2026-28576-contacts-provider-sqli
Demo: https://www.youtube.com/shorts/nWzdx0uuULM
PoC APK: https://github.com/mobilehackinglab/CVE-2026-28576-poc

Android Security & Malware

02 September 2026 12:55

Your photos can be accessed without unlocking your Android when you receive a WhatsApp video call [not fixed]
https://www.mobile-hacker.com/2026/09/02/whatsapp-lets-you-view-photos-without-unlocking-smartphone/

Android Security & Malware

02 September 2026 12:02

Reproducing the Acode Zero-Day Vulnerability
-ACode is a simple code editor for Android
sal/Reproducing-the-Acode-Zero-Day-Vulnerability">sal/Reproducing-the-Acode-Zero-Day-Vulnerability" rel="nofollow">https://hackmd.io/@sal/Reproducing-the-Acode-Zero-Day-Vulnerability

Android Security & Malware

31 August 2026 21:33

PolicyGapper: A Multi-Prompt LLM-Based App Privacy Compliance Analysis
https://github.com/Mobile-IoT-Security-Lab/PolicyGapper

Android Security & Malware

30 August 2026 19:44

JADX MCP: a MCP (Model Context Protocol) server as a jadx-gui plugin
https://github.com/0xdad0/jadx-mcp