true

I pointed an autonomous coding agent at a $35 projector. It found a big RAT.

Cleafy's TIR team identified and analyzed two previously undocumented Android NFC relay malware families, DevilNFC and NFCMultiPay, actively targeting European and LATAM banking customers.

An unprivileged Android app can leak the user's real IP past Always-On VPN + lockdown by handing system_server a UDP payload to fire on its behalf.

Android Penetration Testing Tool — Auto Root Detection & SSL Pinning Bypass with Frida Script Generation - Whitehat987/apkshield-pt

A full technical teardown of a malware campaign hiding behind India’s traffic fine system

Google has today announced the launch of a new ‘Android Intrusion Logging’ feature as part of Android Advanced Protection Mode (AAPM). The new intrusion logging feature promises to be a major aid to digital forensics researchers undertaking investigations into sophisticated attacks on Android devices. This is the first time a major device vendor has release […]

In this video, I break down a critical Android vulnerability ( CVE‑2026‑0073 ) affecting modern versions of Android (14, 15, 16), where a flaw in ADB’s authentication logic can allow an attacker on the same network to gain shell access without user interaction. Full blog write‑up: https://www.mobile-hacker.com/2026/05/12/android-rce-via-wireless-debugging-from-network-access-to-shell/ Want to support us? You can support us here: https://www.youtube.com/channel/UCuUA4tbGJS1AEtClDgomwsA/join 🔥 Follow us on: Instagram - https://www.instagram.com/sapsanpentesting/ Facebook - https://www.facebook.com/profile.php?id=100070927734505 X - https://twitter.com/KrystianHutyra

Seriously, How hard can it be?

noxen is an Android runtime interception tool for security research. It uses Frida to hook Java methods in live apps, map component communication, and captur...

Perseus is a new Device Takeover (DTO) malware family that specifically looks for user-generated content stored in note taking applications.

Skill de Pentesting para Android. Contribute to DragonJAR/Android-Pentesting-Skill development by creating an account on GitHub.

ESET researchers uncovered fraudulent apps on Google Play that claim to provide the call history “for any number” and had been downloaded more than seven million times before being taken down.

ESET researchers have investigated an ongoing attack by the ScarCruft APT group that targets the Yanbian region via backdoor-laced Windows and Android games.

A publicly exposed debug build unraveled xlabs_v1, a commercial game-server DDoS-for-hire botnet with 21 flood variants running on bulletproof infrastructure.

CTM360 report on FEMITBOT abuse of Telegram Mini Apps for large-scale fraud campaigns targeting crypto and financial platforms. Download the full report.

APK full-featured parser. Contribute to delvinru/apk-info development by creating an account on GitHub.