en
Feedback

Don't get caught by a cheater! Telemetrio finds and tags such channels 👉 If you want to see the tag, subscribe

Android Security & Malware

Android Security & Malware

Open in Telegram

📈 Analytical overview of Telegram channel Android Security & Malware

Channel Android Security & Malware (@androidmalware) in the English language segment is an active participant. Currently, the community unites 44 569 subscribers, ranking 3 001 in the Technologies & Applications category and 931 in the USA region.

📊 Audience metrics and dynamics

Since its creation on невідомо, the project has demonstrated rapid growth, gathering an audience of 44 569 subscribers.

According to the latest data from 31 October, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by -251 over the last 30 days and by -7 over the last 24 hours, overall reach remains high.

  • Verification status: Not verified
  • Engagement rate (ER): The average audience engagement rate is 13.20%. Within the first 24 hours after publication, content typically collects 3.74% reactions from the total number of subscribers.
  • Post reach: On average, each post receives 5 882 views. Within the first day, a publication typically gains 1 668 views.
  • Reactions and interaction: The audience actively supports content: the average number of reactions per post is 43.
  • Thematic interests: Content is focused on key topics such as cve-2025, exploit, rat, trojan, bypass.

📝 Description and content policy

The author describes the resource as a platform for expressing subjective opinions:
“Mobile cybersecurity channel Links: https://linktr.ee/mobilehacker Contact: mobilehackerofficial@gmail.com”

Thanks to the high frequency of updates (latest data received on 01 November, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.

Buy Ad
44 569
Subscribers
-724 hours
-417 days
-25130 days
Posts Archive
BlueToolkit - automated Bluetooth vulnerability testing framework ✅Can test 43 exploits ✅Runs on rooted Android, which makes it a portable Bluetooth vulnerability scanner ✅It already helped to find 64 new vulnerabilities in 22 products https://www.mobile-hacker.com/2024/07/02/uncover-bluetooth-vulnerabilities-with-bluetoolkit/

Transparent Tribe (aka APT 36, Operation C-Major) Android Spyware Targeting Gamers, Weapons Enthusiasts https://www.sentinelone.com/labs/capratube-remix-transparent-tribes-android-spyware-targeting-gamers-weapons-enthusiasts/

BADUnboxing: Automated Android unpacker It works by locating and decompiling code inside the APK that is relevant to the unpacking process. Once Bad Unboxing detects packing, it automatically generates a new Java application based on the decompiled code https://github.com/LaurieWired/BadUnboxing

Snowblind: A new Android malware abuses security feature to bypass security Blog: https://promon.co/app-threat-reports/snowblind Demo: https://youtu.be/zUqZQlQ0ZzQ?si=oZhSdfR1w_SlNjSA

Clone and emulate RFID access card in a second using Proxmark3 in a standalone mode https://www.mobile-hacker.com/2024/06/26/rfid-hacking-with-proxmark3-cloning-emulating-and-standalone-mode/

Android Medusa (TangleBot) banking trojan reborn: A New Compact Variant Discovered https://www.cleafy.com/cleafy-labs/medusa-reborn-a-new-compact-variant-discovered

Monitor file system changes using fsmon ▪️supports Linux, iOS, OS X, Android ▪️identify when are binaries loaded (root) ▪️get dropped payloads (root) ▪️identify when are which files opened at app's runtime (db, txt, log, temp...) (non-root) https://www.mobile-hacker.com/2024/06/24/monitoring-android-file-system-with-fsmon/

Android Rafel RAT - from Espionage to Ransomware Operations campaigns - attributed to APT-C-35 / DoNot Team APT group https://blog.checkpoint.com/research/rafel-rat-android-malware-from-espionage-to-ransomware-operations/

Mobile OAuth Attacks - iOS URL Scheme Hijacking Revamped 30 popular apps, vulnerable to attack in which any installed iOS app from the Apple App Store could perform an account takeover of victim users https://evanconnelly.github.io/post/ios-oauth/

Exfiltrate WhatsApp chat, or internal data of any Android app, running on Android 12 or 13 by exploiting CVE-2024-0044 vulnerability [video] https://www.mobile-hacker.com/2024/06/17/exfiltrate-sensitive-user-data-from-apps-on-android-12-and-13-using-cve-2024-0044-vulnerability/

Exploiting embedded mitel phones for unauthenticated remote code execution Achieving a fully unauthenticated RCE exploit as root in a Mitel IP phone. Several 0-days were discovered which chained together gives the privilege of completely owning the phone https://baldur.dk/blog/embedded-mitel-exploitation.html

Operation Celestial Force employs mobile and desktop malware to target Indian entities (GravityRAT, HeavyLift) https://blog.talosintelligence.com/cosmic-leopard/

Five campaigns targeting Android users in Egypt and Palestine, most probably operated by the Arid Viper APT group. Three of the campaigns are active, distributing Android spyware AridSpy via dedicated websites https://www.welivesecurity.com/en/eset-research/arid-viper-poisons-android-apps-with-aridspy/

QR code SQL injection and other vulnerabilities in a popular biometric terminal (CVE-2023-3938, CVE-2023-3939, CVE-2023-3940, CVE-2023-3941, CVE-2023-3942, CVE-2023-3943) https://securelist.com/biometric-terminal-vulnerabilities/112800/

DoS McAfee VPN app via deeplink McAfee Security: Antivirus VPN for Android before 8.3.0 could allow an attacker to cause a denial of service through the use of a malformed deep link (CVE-2024-34406) https://www.mcafee.com/support/?articleId=000002403&page=shell&shell=article-view

Wpeeper: New Android malware hides behind hacked WordPress sites https://blog.xlab.qianxin.com/playing-possum-whats-the-wpeeper-backdoor-up-to/