en
Feedback
Android Security & Malware

Android Security & Malware

Open in Telegram

πŸ“ˆ Analytical overview of Telegram channel Android Security & Malware

Channel Android Security & Malware (@androidmalware) in the English language segment is an active participant. Currently, the community unites 43 915 subscribers, ranking 3 078 in the Technologies & Applications category and 727 in the USA region.

πŸ“Š Audience metrics and dynamics

Since its creation on Π½Π΅Π²Ρ–Π΄ΠΎΠΌΠΎ, the project has demonstrated rapid growth, gathering an audience of 43 915 subscribers.

According to the latest data from 17 June, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 194 over the last 30 days and by 4 over the last 24 hours, overall reach remains high.

  • Verification status: Not verified
  • Engagement rate (ER): The average audience engagement rate is 13.17%. Within the first 24 hours after publication, content typically collects 5.02% reactions from the total number of subscribers.
  • Post reach: On average, each post receives 5 782 views. Within the first day, a publication typically gains 2 204 views.
  • Reactions and interaction: The audience actively supports content: the average number of reactions per post is 12.
  • Thematic interests: Content is focused on key topics such as cve-2025, exploit, rat, trojan, bypass.

πŸ“ Description and content policy

The author describes the resource as a platform for expressing subjective opinions:
β€œMobile cybersecurity channel Links: https://linktr.ee/mobilehacker Contact: mobilehackerofficial@gmail.com”

Thanks to the high frequency of updates (latest data received on 18 June, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.

43 915
Subscribers
+424 hours
+897 days
+19430 days
Posts Archive

Bypassing the "run-as" debuggability check on Android via newline injection (CVE-2024-0044) Attack scenario: A local attacker with ADB shell access to an Android 12 or 13 device with Developer Mode enabled can exploit the vulnerability to run code in the context of any non-system-UID app. From there, the attacker can do anything the app can, like access its private data files or read the credentials it’s stored in AccountManager https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.html

NetHunter now supports #BadBluetooth HID attacks to inject keystrokes wirelessly It is also possible to modify spoofed Bluetooth device class ID to visually mimick any device, no just a keyboard https://www.mobile-hacker.com/2024/03/06/kali-nethunter-now-supports-bad-bluetooth-hid-attacks-to-inject-keystrokes-wirelessly/

AndroidDriveSignity: a Python utility designed to bypass driver signature verification in Android kernel(ARMv8.3), facilitating the loading of custom drivers https://github.com/gmh5225/AndroidDriveSignity

On-Device Fraud on the rise: exposing a recent Android Copybara fraud campaign https://www.cleafy.com/cleafy-labs/on-device-fraud-on-the-rise-exposing-a-recent-copybara-fraud-campaign

Unveiling iOS Vulnerabilities: A Deep Dive into Attacking iOS system https://blog.devsecopsguides.com/attacking-ios

NetHunter Hacker XV: Use Nmap for network scanning Nmap can also reveal open ports of file manager apps that are running local file sharing servers to allow local attacker to access files on device (video) https://www.mobile-hacker.com/2024/03/01/nethunter-hacker-xv-use-nmap-for-network-scanning/

NetHunter Hacker XIV: Find exploits using SearchSploit and setup Wi-Fi Pineapple connector https://www.mobile-hacker.com/2024/02/27/nethunter-hacker-xiv-find-exploits-using-searchsploit-and-setup-wi-fi-pineapple-connector/

Auto DNS poisoning While charging Android smartphone via computer it is possible to perform automated and even remotely controlled DNS poisoning without any user interaction Blog and video explains how it works, when it doesn't work and how to prevent it https://www.mobile-hacker.com/2024/02/20/automated-dns-poisoning-using-android-while-charging-via-computer/

Android file wiper implemented in native library as part of malware campaign https://harfanglab.io/en/insidethelab/samecoin-malware-hamas/

Anatsa (TeaBot) Android Trojan Returns: Targeting Europe and Expanding Its Reach Trojan reached on Google Play 10,000 installs, impersonating Phone Cleaner app. The current campaign involves five droppers with over 100,000 total installations https://www.threatfabric.com/blogs/anatsa-trojan-returns-targeting-europe-and-expanding-its-reach

New WiFi authentication vulnerabilities discovered affecting Android, ChromeOS and Linux devices CVE-2023-52160 (β€œPhase-2 bypass”): This vulnerability can be exploited by an attacker to deceive the victim into connecting to a fake Wi-Fi network set up by the adversary. Once connected, the attacker can intercept and monitor the victim’s network traffic CVE-2023-52161 (β€œ4-way bypass”): It allows an adversary to gain full access to an existing protected WiFi network, exposing existing users and devices PoC exploit is not available. https://www.top10vpn.com/research/wifi-vulnerabilities/

Dusting Off Old Fingerprints: NSO Group’s Unknown MMS Hack https://www.enea.com/insights/dusting-off-old-fingerprints-nso-groups-unknown-mms-hack/

iOS and Android Trojan harvesting facial recognition data used for unauthorized access to bank accounts https://www.group-ib.com/blog/goldfactory-ios-trojan/