Android Security & Malware
Mobile cybersecurity channel Links: https://linktr.ee/mobilehacker Contact: mobilehackerofficial@gmail.com
Show more๐ Analytical overview of Telegram channel Android Security & Malware
Channel Android Security & Malware (@androidmalware) in the English language segment is an active participant. Currently, the community unites 44 025 subscribers, ranking 3 050 in the Technologies & Applications category and 709 in the USA region.
๐ Audience metrics and dynamics
Since its creation on ะฝะตะฒัะดะพะผะพ, the project has demonstrated rapid growth, gathering an audience of 44 025 subscribers.
According to the latest data from 24 June, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 281 over the last 30 days and by 44 over the last 24 hours, overall reach remains high.
- Verification status: Not verified
- Engagement rate (ER): The average audience engagement rate is 12.77%. Within the first 24 hours after publication, content typically collects 3.64% reactions from the total number of subscribers.
- Post reach: On average, each post receives 5 618 views. Within the first day, a publication typically gains 1 601 views.
- Reactions and interaction: The audience actively supports content: the average number of reactions per post is 12.
- Thematic interests: Content is focused on key topics such as cve-2025, exploit, rat, trojan, bypass.
๐ Description and content policy
The author describes the resource as a platform for expressing subjective opinions:
โMobile cybersecurity channel
Links: https://linktr.ee/mobilehacker
Contact: mobilehackerofficial@gmail.comโ
Thanks to the high frequency of updates (latest data received on 25 June, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.
Data loading in progress...
| Date | Subscriber Growth | Mentions | Channels | |
| 25 June | +35 | |||
| 24 June | +44 | |||
| 23 June | +23 | |||
| 22 June | +12 | |||
| 21 June | +2 | |||
| 20 June | +13 | |||
| 19 June | +6 | |||
| 18 June | +6 | |||
| 17 June | +9 | |||
| 16 June | +20 | |||
| 15 June | +20 | |||
| 14 June | +11 | |||
| 13 June | +22 | |||
| 12 June | +16 | |||
| 11 June | +12 | |||
| 10 June | +33 | |||
| 09 June | +14 | |||
| 08 June | +5 | |||
| 07 June | +6 | |||
| 06 June | +13 | |||
| 05 June | +12 | |||
| 04 June | +19 | |||
| 03 June | +17 | |||
| 02 June | +32 | |||
| 01 June | +15 |
| 2 | Android Malware Disguised as Document Reader Reaches 100K Downloads on Google Play | Anatsa banker
https://x.com/Threatlabz/status/2069190345418854810 | 1 438 |
| 3 | Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter & Unity il2cpp support
https://github.com/UltraSina/androidReverse | 2 605 |
| 4 | [slides] OffensiveCon 2026: Tile-Based Deferred Rooting: When Your GPU Starts Rendering To Kernel Code Space! (CVE-2025-25180)
https://androidoffsec.withgoogle.com/slides/art_imagination_gpu_offensivecon_2026.pdf | 4 528 |
| 5 | Rokarolla : Android Banker with Complete Device Takeover Capabilities
https://zimperium.com/blog/rokarolla-android-banker-with-complete-device-takeover-capabilities | 4 164 |
| 6 | Local Privilege Escalation (LPE) vulnerability in MEmu Android Emulator 9.2.7.0 (CVE-2026-36213)
https://github.com/sec-zone/CVE-2026-36213 | 3 781 |
| 7 | I tested Nearby Glasses app to detect "spy" smart glasses - I explained why it is not working reliably and how the app can be even spoofed with fake Bluetooth signals
https://www.mobile-hacker.com/2026/06/14/smart-glasses-can-record-you-and-detecting-them-isnt-so-simple/ | 4 671 |
| 8 | FirefUXSS 0-day: Universal XSS in Firefox Focus for iOS via Redirect-Scheme Validation Race Condition - not patched yet
https://github.com/v12-security/pocs/tree/main/firefox | 9 942 |
| 9 | Tested the raw socket layer of a pre-production POS system. Found 4 critical/high vulnerabilities โ including a replay attack, cross-merchant IDOR, ghost transactions, and card identity bypass
https://m4kr0.vercel.app/posts/iso-8583-under-fire-finding-vulnerabilities-in-a-payment-socket | 5 654 |
| 10 | NFCShare evolves: from a banking phishing APK to a GitHub-hosted Android NFC fraud campaign
https://www.d3lab.net/nfcshare-evolves-from-a-banking-phishing-apk-to-a-github-hosted-android-nfc-fraud-campaign/ | 5 229 |
| 11 | Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps
https://thehackernews.com/2026/06/android-spyware-asin-targets-arabic.html | 5 240 |
| 12 | Android.MagicAd displays background ads without SYSTEM_ALERT_WINDOW.
Bypasses restrictions via system media controls abuse, vendor-specific intents, and Binder IPC abuse on Xiaomi/Vivo/Amazon devices. Distributed in 50+ apps via GetApps/Galaxy Store
https://news.drweb.com/show/?i=15262&c=5&lng=en | 5 585 |
| 13 | A $300 Creative speaker can be hacked over Bluetooth (no pairing) to install malicious firmware and silently turn into a BadUSB keyboard that can takes over USB connected PC.
Creative donโt consider it a vulnerability - it is not patched!
https://blog.nns.ee/2026/06/03/katana-badusb/ | 5 672 |
| 14 | Bypassing SSL Pinning on Play Store Android Device Emulators without Frida
https://www.mfumis.com/posts/bypassing-ssl-pinning-on-play-store-avds-without-frida/ | 5 228 |
| 15 | Bypassing Flutter TLS/SSL Verification When reFlutter Fails
https://petruknisme.medium.com/bypassing-flutter-tls-ssl-verification-when-reflutter-fails-a4c41ff758a3 | 5 197 |
| 16 | Bypassing SSL Pinning in Flutter-Based iOS Applications
https://medium.com/@drhatab/bypassing-ssl-pinning-in-flutter-based-ios-applications-54f420d2f1a1 | 10 483 |
| 17 | Technical overview of how commercial forensic tools compromise mobile devices
https://osservatorionessuno.org/blog/2026/05/demystifying-phone-unlocking-tools-a-technical-overview/ | 5 449 |
| 18 | IRIS (Intent Runtime Inspection System) - tool for observing Android Intent activity from a rooted device
https://github.com/Ch0pin/iris | 6 999 |
| 19 | BTMOB: A stealthy RAT burrowing deep into Android devices
https://www.welivesecurity.com/en/malware/btmob-stealthy-rat-burrowing-deep-android-devices/ | 6 831 |
| 20 | OverlayPhantom: The Android Banking Trojan Hiding in Plain Sight
https://cyble.com/blog/overlayphantom-android-banking-trojan/ | 7 909 |
Available now! Telegram Research 2025 โ the year's key insights 
