en
Feedback
Android Security & Malware

Android Security & Malware

Open in Telegram

๐Ÿ“ˆ Analytical overview of Telegram channel Android Security & Malware

Channel Android Security & Malware (@androidmalware) in the English language segment is an active participant. Currently, the community unites 43 923 subscribers, ranking 3 074 in the Technologies & Applications category and 720 in the USA region.

๐Ÿ“Š Audience metrics and dynamics

Since its creation on ะฝะตะฒั–ะดะพะผะพ, the project has demonstrated rapid growth, gathering an audience of 43 923 subscribers.

According to the latest data from 19 June, 2026, the channel demonstrates stable activity. Although there has been a change in the number of participants by 196 over the last 30 days and by -1 over the last 24 hours, overall reach remains high.

  • Verification status: Not verified
  • Engagement rate (ER): The average audience engagement rate is 13.29%. Within the first 24 hours after publication, content typically collects 3.73% reactions from the total number of subscribers.
  • Post reach: On average, each post receives 5 836 views. Within the first day, a publication typically gains 1 636 views.
  • Reactions and interaction: The audience actively supports content: the average number of reactions per post is 13.
  • Thematic interests: Content is focused on key topics such as cve-2025, exploit, rat, trojan, bypass.

๐Ÿ“ Description and content policy

The author describes the resource as a platform for expressing subjective opinions:
โ€œMobile cybersecurity channel Links: https://linktr.ee/mobilehacker Contact: mobilehackerofficial@gmail.comโ€

Thanks to the high frequency of updates (latest data received on 20 June, 2026), the channel maintains relevance and a high level of publication reach. Analytics show that the audience actively interacts with content, making it an important point of influence in the Technologies & Applications category.

43 923
Subscribers
-124 hours
+697 days
+19630 days
Posts Archive
iOS Deep Link attacks Part 2 โ€“ Exploitation https://8ksec.io/ios-deep-link-attacks-part-2-exploitation-8ksec-blogs/

HelloTeacher: New Android Malware Targeting Banking Users In Vietnam https://blog.cyble.com/2023/06/05/helloteacher-new-android-malware-targeting-banking-users-in-vietnam/

Binder Trace: Tool for intercepting and parsing Android Binder messages Think of it as "Wireshark for Binder" https://github.com/foundryzero/binder-trace

CVE-2023-20963: 0-day in Android's Parcel serialization/deserialization which was used in-the-wild by the Pinduoduo app https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-20963.html

Operation Triangulation: iOS devices targeted with previously unknown malware This malware compromised several Kaspersky employees: The target iOS device receives a message via the iMessage service, with an attachment containing an exploit. Without any user interaction, the message triggers a vulnerability that leads to code execution. https://securelist.com/operation-triangulation/109842/

Beautifying Native Android Code in Ghidra! We partially native APK, extract the native binaries, and analyze the native ELF binary https://youtu.be/sK_jsQ5bJUk

Crash WhatsApp using one message Video demo how it is possible to crash group chat using one message. If you open the chat, WhatsApp will always crash. โœ…๏ธTo temporarily fix the issue, you have to remove the crash message using WhatsApp web https://www.instagram.com/reel/Cs3iGe3ORuw/?igshid=MzRlODBiNWFlZA==

Android DogeRAT: Technical analysis of open-source Android Remote Access Trojan (RAT) https://cloudsek.com/blog/dogerat-the-android-malware-campaign-targeting-users-across-multiple-industries

Android apps containing spyware SpinOk module was discovered in 101 apps on Google Play Store with alltogether 421,000,000+ install It can exfiltrate: - list of files in specified directories, - verify the presence of a specified file or a directory on the device, - file from the device, and - copy or substitute the clipboard contents https://news.drweb.com/show/?lng=en&i=14705

Permhash: The permhash framework can be used to identify previously unknown APK, CRX, AXML samples through pivoting and clustering Tool: https://github.com/google/permhash Research: https://www.mandiant.com/resources/blog/permhash-no-curls-necessary

Daam (BouldSpy) Android Botnet recommendations from India CERT https://www.csk.gov.in/alerts/Daam_android_botnet.html

A technical analysis of Intellexa's PREDATOR mobile spyware https://blog.talosintelligence.com/mercenary-intellexa-predator/

Google introduced Mobile VRP: Mobile Vulnerability Rewards Program (Mobile VRP) focuses on first-party Android applications developed or maintained by Google https://bughunters.google.com/about/rules/6618732618186752/google-mobile-vulnerability-reward-program-rules

AhRat: Android RAT discovered on Google Play Store based on AhMyth RAT that exfiltrates files and records audio https://www.welivesecurity.com/2023/05/23/android-app-breaking-bad-legitimate-screen-recording-file-exfiltration/

Emulating Android native library to decrypt strings using Qiling Framework https://youtu.be/R1zWh3fbY24

BrutePrint: Android phones are vulnerable to fingerprint brute-force attacks https://arxiv.org/pdf/2305.10791.pdf

Racing Against the Lock: Exploiting Spinlock UAF in the Android Kernel This paper presents an exploit for a unique Binder kernel use-after-free (UAF) vulnerability which was disclosed recently (CVE-2022-20421) Write-up: https://0xkol.github.io/assets/files/Racing_Against_the_Lock__Exploiting_Spinlock_UAF_in_the_Android_Kernel.pdf Slides: https://0xkol.github.io/assets/files/OffensiveCon23_Racing_Against_the_Lock__Exploiting_Spinlock_UAF_in_the_Android_Kernel.pdf PoC: https://github.com/0xkol/badspin