43932
Mobile cybersecurity channel Links: https://linktr.ee/mobilehacker Contact: mobilehackerofficial@gmail.com
Mesh network cache poisoning: exploiting BitChat's BLE authentication
Blog: https://barghest.asia/blog/bitchat-cache-poisoning/
PoC: https://github.com/BARGHEST-ngo/PoC_Bitchat1.15.0_iOS-BLEcache-poisoning
Manic: Blend between Banking Malware & Spyware
https://www.threatfabric.com/blogs/manic-blend-between-banking-malware-and-spyware
Can Someone Secretly Scan Your Payment and Access Card? I Tested It
Blog: https://www.mobile-hacker.com/2026/08/20/how-easy-is-it-to-scan-a-contactless-payment-and-access-card/
Video: https://youtu.be/pwzMFQLrTHU
Porting ghostlock (CVE-2026-43499) to the Samsung Galaxy A17: KDP, DEFEX, and the art of not panicking
https://www.mobilehackinglab.com/blog/cve-2026-43499-ghostlock-a17-root-shell
Revealed: Cyber spies used malware from GitHub to hack EncroChat cryptophone network
https://www.computerweekly.com/news/366649396/Revealed-Cyber-spies-used-malware-from-GitHub-to-hack-EncroChat-cryptophone-network
WindRelay paired with SpyNote RAT enables live-call fraud, combining social engineering with dual digital and physical cash-out.
https://www.group-ib.com/blog/windrelay-nfc-spynote-rat-combo-fraud/
LLM Obfuscation Detection Framework for Android Apps
https://github.com/Mobile-IoT-Security-Lab/LLMObfuscDetection
Kimwolf v7: An Evolution of the Kimwolf Android Botnet
https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/
Developers: Beware of Ad Libraries that Betray Your Users’ Location Privacy
https://www.eff.org/deeplinks/2026/07/developers-beware-ad-libraries-betray-your-users-location-privacy
Introducing MobHunt: agentic mobile bug bounty hunting
Blog: https://ivrodriguez.com/introducing-mobhunt/
Tool: https://github.com/ivRodriguezCA/MobHunt
H96 Android TV Boxes Used for Ad Fraud and Residential Proxies
https://www.bitsight.com/blog/fuyao-enterprise-building-ad-fraud-empire-ai-and-kids-coding-blocks
Root My Pixel: is an Android application designed to automate root access on Google Pixel 10 devices leveraging the NebuSec IonStack exploit (CVE-2026-43499) and integrating ReSukiSU / KernelSU
https://github.com/alex193a/Root-My-Pixel
Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon
https://hunt.io/blog/flying-eagle-android-rat-170-servers-night-dragon
List of 140 vulnerabilities in Samsung preinstalled Android apps reported in 2022
https://github.com/oversecured/Samsung_Vulnerabilities
RedHook Android malware abuses ADB Wireless Debugging and Shizuku to get shell-level privileges
https://www.group-ib.com/blog/redhook-android-rat-upgraded/
Malware targeting Android-based automotive head units spread through built-in firmware updates (botnet proxy malware)
https://securelist.com/android-head-unit-malware/121106/
GhostBat RAT: 78 Victims, One Lazy Key, and a Firebase Named After India’s Ruling Party
singhbkn07/78-victims-one-lazy-key-and-a-firebase-named-after-indias-ruling-party-62cf0ad0380e">singhbkn07/78-victims-one-lazy-key-and-a-firebase-named-after-indias-ruling-party-62cf0ad0380e" rel="nofollow">https://medium.com/@singhbkn07/78-victims-one-lazy-key-and-a-firebase-named-after-indias-ruling-party-62cf0ad0380e
ToxicPanda 2.0, a Significantly More Powerful Android Banking Trojan
https://zimperium.com/blog/the-toxicpanda-never-sleeps-toxicpanda-2.0-prepares-its-next-strike-on-mobile
A critical vulnerability has been identified that allows arbitrary code execution with kernel privileges affecting Xiaomi Redmi A5 and Motorola E13 devices requiring only the ability to place a video call
https://ssd-disclosure.com/unisoc-t612-lpe/
Octagon: A New Android Bot Targeting Crypto Wallets and Banking Apps
https://iverify.io/blog/octagon-android-bot-crypto-wallets-banking-apps
LSPosed module for disabling SSL certificate pinning on Android
https://github.com/0xdad0/ssl-kill-switch-lsposed
Bypassing Android Hardware Attestation from the Analyst's Chair
https://blog.quarkslab.com/bypassing-android-hardware-attestation.html
Striking gold: Inside the GoldDigger Android malware
https://www.ibm.com/think/security/golddigger-android-malware-analysis
Dropping Elephant (Patchwork): Espionage APT Tactics and Tools
https://www.picussecurity.com/resource/blog/dropping-elephant-patchwork-espionage-apt-tactics-and-tools
Zero-Click File Drop on Xiaomi ShareMe (MiDrop)
https://blog.byterialab.com/zero-click-file-drop-on-xiaomi-shareme-midrop/
Octagon: Technical Analysis of a Fake Bahrain Civil Defense Application
https://labs.k7computing.com/index.php/octagon-technical-analysis-of-a-fake-bahrain-civil-defense-application/
Inside an N26 Impersonation Campaign: From Vishing and Fake Control 1.0 to the Copybara Android RAT
https://www.d3lab.net/inside-an-n26-impersonation-campaign-from-vishing-and-fake-control-1-0-to-the-copybara-android-rat/
Fake Bahrain Civil-Defense App Turns a Phone Into a Listening Post
https://dreamgroup.com/blog/how-a-fake-bahrain-civil-defense-app-turns-a-phone-into-a-listening-post
Reading Contact Photos Without READ_CONTACTS: A Google Messages Confused Deputy Bug
https://blog.devploit.dev/posts/google-messages-avatarcontentprovider-contacts-bypass/
How to Bypass mTLS on Android with Frida
https://kiratliygt.medium.com/how-to-bypass-mtls-on-android-with-frida-45c5e71373e8