Android Security & Malware

02 February 2026 12:32

Practical Mobile Traffic Interception
justmobilesec/practical-mobile-traffic-interception-1481e33d974e" rel="nofollow">https://medium.com/@justmobilesec/practical-mobile-traffic-interception-1481e33d974e

Android Security & Malware

01 February 2026 23:41

Deep-C: Android Deep Link misconfiguration detector and exploitation tool
https://github.com/KishorBal/deep-C

Android Security & Malware

31 January 2026 10:58

Carbonara: The MediaTek exploit nobody served
https://shomy.is-a.dev/blog/article/serving-carbonara
Penumbra is a tool for interacting with Mediatek devices.
It provides flashing and readback capabilities, as well as bootloader unlocking and relocking on vulnerable devices: https://github.com/shomykohai/penumbra

Android Security & Malware

30 January 2026 07:54

Android Trojan Campaign Uses Hugging Face Hosting for RAT Payload Delivery
https://www.bitdefender.com/en-us/blog/labs/android-trojan-campaign-hugging-face-hosting-rat-payload

Android Security & Malware

29 January 2026 14:16

Disrupting the World's Largest Residential Proxy Network
https://cloud.google.com/blog/topics/threat-intelligence/disrupting-largest-residential-proxy-network

Android Security & Malware

28 January 2026 20:07

Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation
https://www.welivesecurity.com/en/eset-research/love-actually-fake-dating-app-used-lure-targeted-spyware-campaign-pakistan/

Android Security & Malware

28 January 2026 14:50

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications
https://github.com/TheQmaks/soSaver

Android Security & Malware

22 January 2026 07:17

Android.Phantom trojans are bundled with modded games and popular apps to infiltrate smartphones. They use machine learning and video broadcasts to engage in click fraud
https://news.drweb.com/show/?i=15110&lng=en

Android Security & Malware

21 January 2026 05:35

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari
https://github.com/zeroxjf/WebKit-UAF-ANGLE-OOB-Analysis

Android Security & Malware

18 January 2026 13:39

WPair: app for testing Bluetooth WhisperPair vulnerability in Google's Fast Pair protocol (CVE-2025-36911) https://github.com/zalexdev/wpair-app

Android Security & Malware

15 January 2026 20:08

A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here?
https://projectzero.google/2026/01/pixel-0-click-part-3.html

Android Security & Malware

15 January 2026 18:02

A 0-click exploit chain for the Pixel 9 Part 1: Decoding Dolby
https://projectzero.google/2026/01/pixel-0-click-part-1.html

Android Security & Malware

13 January 2026 12:18

Flutter SSL Bypass: How to Intercept HTTPS Traffic When all other Frida Scripts Fail
https://m4kr0.vercel.app/posts/flutter-ssl-bypass-how-to-intercept-https-traffic-when-all-other-frida-scripts-fail/

Android Security & Malware

13 January 2026 10:09

One-click Telegram IP address leak
https://www.bleepingcomputer.com/news/security/hidden-telegram-proxy-links-can-reveal-your-ip-address-in-one-click/
Video by @0x6rss

Android Security & Malware

12 January 2026 14:40

Dalvik bytecode emulator for Android static analysis | String decryption | Multi-DEX | No Android runtime required
https://github.com/fatalSec/DaliVM

Android Security & Malware

02 February 2026 11:19

Android Game Hacking (Part I)
justmobilesec/android-mobile-game-hacking-f428aef8eb98" rel="nofollow">https://medium.com/@justmobilesec/android-mobile-game-hacking-f428aef8eb98

Android Security & Malware

01 February 2026 21:19

Analysing a Pegasus 0-click Exploit for iOS
Recreated the "Blastpass" iOS exploit in a faked target process, to understand the heap shaping strategy first-hand
https://youtu.be/0JFcDCW3Sis

Android Security & Malware

31 January 2026 09:43

Modern iOS Security Features – A Deep Dive
into SPTM, TXM, and Exclaves
https://arxiv.org/pdf/2510.09272

Android Security & Malware

29 January 2026 17:29

The Rise of Android Arsink Rat
https://zimperium.com/blog/the-rise-of-arsink-rat

Android Security & Malware

29 January 2026 13:24

NFCShare (SuperCard X) Android Trojan: NFC card data theft via malicious APK
https://www.d3lab.net/nfcshare-android-trojan-nfc-card-data-theft-via-malicious-apk/

Android Security & Malware

28 January 2026 15:25

Android and authentication: The Evolution of FIDO Experiences on Android
https://bughunters.google.com/blog/fido

Android Security & Malware

23 January 2026 13:10

Samsung S23 Ultra: The Ultimate NetHunter Setup(Android 14 Fix)
JanCSG/samsung-s23-ultra-the-ultimate-nethunter-setup-31c1105201d9" rel="nofollow">https://medium.com/@JanCSG/samsung-s23-ultra-the-ultimate-nethunter-setup-31c1105201d9

Android Security & Malware

21 January 2026 07:37

Firebase APK Security Scanner
Scan Android APKs for Firebase security misconfigurations including open databases, exposed storage buckets, and authentication bypasses
https://github.com/trailofbits/skills/tree/main/plugins/firebase-apk-scanner

Android Security & Malware

20 January 2026 03:07

Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system
https://github.com/lautarovculic/frida-ipa-extract

Android Security & Malware

16 January 2026 16:11

WhisperPair: Hijacking Bluetooth Accessories
Using Google Fast Pair.
You can also check if your device is vulnerable
https://whisperpair.eu/

Android Security & Malware

15 January 2026 20:07

A 0-click exploit chain for the Pixel 9 Part 2: Cracking the Sandbox with a Big Wave
https://projectzero.google/2026/01/pixel-0-click-part-2.html

Android Security & Malware

13 January 2026 15:37

deVixor: An Evolving Android Banking RAT with Ransomware Capabilities Targeting Iran
https://cyble.com/blog/devixor-an-evolving-android-banking-rat-with-ransomware-capabilities-targeting-iran/

Android Security & Malware

13 January 2026 11:15

Play Integrity API: How It Works & How to Bypass It
https://m4kr0.vercel.app/posts/play-integrity-api-how-it-works--how-to-bypass-it/

Android Security & Malware

12 January 2026 15:43

Frida-UI: Interact with Frida devices, processes, and scripts directly from your browser
https://github.com/adityatelange/frida-ui

Android Security & Malware

12 January 2026 11:01

Droid LLM Hunter is a tool to scan for vulnerabilities in Android applications using Large Language Models (LLMs)
https://github.com/roomkangali/droid-llm-hunter