es
Feedback
Android Security & Malware

Android Security & Malware

Ir al canal en Telegram

📈 Análisis del canal de Telegram Android Security & Malware

El canal Android Security & Malware (@androidmalware) en el segmento lingüístico de Inglés es un actor destacado. Actualmente la comunidad reúne a 43 917 suscriptores, ocupando la posición 3 070 en la categoría Tecnologías y Aplicaciones y el puesto 723 en la región EEUU.

📊 Métricas de audiencia y dinámica

Desde su creación el невідомо, el proyecto ha mostrado un crecimiento acelerado, reuniendo a 43 917 suscriptores.

Según los últimos datos del 18 junio, 2026, el canal mantiene una actividad estable. En los últimos 30 días la variación de miembros fue de 192, y en las últimas 24 horas de -1, conservando un alto alcance.

  • Estado de verificación: No verificado
  • Tasa de interacción (ER): El promedio de interacción de la audiencia es 13.11%. Durante las primeras 24 horas tras publicar, el contenido suele obtener 4.02% de reacciones respecto al total de suscriptores.
  • Alcance de las publicaciones: Cada publicación recibe en promedio 5 757 visualizaciones. En el primer día suele acumular 1 764 visualizaciones.
  • Reacciones e interacción: La audiencia responde de forma activa: el promedio de reacciones por publicación es 12.
  • Intereses temáticos: El contenido se centra en temas clave como cve-2025, exploit, rat, trojan, bypass.

📝 Descripción y política de contenido

El autor describe el recurso como un espacio para expresar opiniones subjetivas:
Mobile cybersecurity channel Links: https://linktr.ee/mobilehacker Contact: mobilehackerofficial@gmail.com

Gracias a la alta frecuencia de actualizaciones (últimos datos recibidos el 19 junio, 2026), el canal mantiene la vigencia y un amplio alcance. La analítica demuestra que la audiencia interactúa activamente con el contenido, lo que lo convierte en un punto de referencia dentro de la categoría Tecnologías y Aplicaciones.

43 917
Suscriptores
-124 horas
+827 días
+19230 días
Archivo de publicaciones
Unmasking the Godfather - Reverse Engineering the Latest Android Banking Trojan Talk: https://youtu.be/jNQmc2REwFg Slides: https://github.com/LaurieWired/StrangeLoop

Well explained blog on how to find and exploit XSS in Android apps in WebViews and Deep Links https://securityboulevard.com/2023/10/execution-of-arbitrary-javascript-in-android-application/

Get external IP address of the user during Telegram call. Now it works well and returns public instead of local IP https://twitter.com/androidmalware2/status/1711313647576686621

Trigger iOS proximity paring messages from over 50 meters using Android phone The update of the blog explains how to boost transmitted signal from Android nRF Connect app, demonstrates running AppleJuice on iOS17 and using cheap Arduino ESP32 board https://www.mobile-hacker.com/2023/09/07/spoof-ios-devices-with-bluetooth-pairing-messages-using-android/

NetHunter Hacker IX: How to use MANA Toolkit to create Wi-Fi rogue access point and intercept HTTP traffic https://www.mobile-hacker.com/2023/10/05/nethunter-hacker-ix-use-mana-toolkit-to-create-wi-fi-rogue-access-point-and-intercept-traffic/

BADBOX: a firmware backdoored trojan found in 74,000 Chinese Android phones, tablets, and TV boxes in 227 counties and territories There are confirmed 8 devices with backdoors installed — seven TV boxes, the T95, T95Z, T95MAX, X88, Q9, X12PLUS, and MXQ Pro 5G, and a tablet J5-W. BADBOX functionality: -Ad Fraud, -Uses backdoored devices as proxy, -Create fake accounts, -Downloads and runs additional modules. Report: https://www.humansecurity.com/hubfs/HUMAN_Report_BADBOX-and-PEACHPIT.pdf

Analysis of LightSpy mAPT Mobile Payment System Attack attributed to APT-41 group https://www.threatfabric.com/blogs/lightspy-mapt-mobile-payment-system-attack

Android banking trojan Zanubis, first appeared around August 2022, targeting financial institution and cryptocurrency exchange users in Peru Zanubis’s main infection path is through impersonating legitimate Peruvian Android applications and then tricking the user into enabling the Accessibility permissions in order to take full control of the device https://securelist.com/crimeware-report-asmcrypt-loader-lumma-stealer-zanubis-banker/110512/

Use silent SMS messages to track LTE users’ locations https://mandomat.github.io/2023-09-21-localization-with-silent-SMS/

iOS 15 Image Forensics Analysis and Tools Comparison - Processing details and general device information https://blog.digital-forensics.it/2023/09/ios-15-image-forensics-analysis-and.html

How it is possible to get persistent reverse shell from Android app without visible permissions to make device unusable via annoying DoS https://www.mobile-hacker.com/2023/09/27/get-persistent-reverse-shell-from-android-app-without-visible-permissions-to-make-device-unusable/

NVIDIA GeForce Now for Android contains a vulnerability where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial of service, and code execution (CVE‑2023‑31014) https://nvidia.custhelp.com/app/answers/detail/a_id/5476

Android Xenomorph Malware Strikes Again: Over 30+ US Banks Now Targeted https://www.threatfabric.com/blogs/xenomorph

Working solution on how to inject system CA certificates in Android 14 https://httptoolkit.com/blog/android-14-install-system-ca-certificate/

0-days exploited by Predator spyware were delivered via man-in-the-middle (MITM) attack and 0-click vulnerability against iOS and Android https://blog.google/threat-analysis-group/0-days-exploited-by-commercial-surveillance-vendor-in-egypt/

"The WebP 0day" - a full technical analysis the recently patched vulnerability in the WebP image library that was exploited in the wild (CVE-2023-4863) https://blog.isosceles.com/the-webp-0day/

How to bypass 5 advanced root detection techniques using Frida https://8ksec.io/advanced-root-detection-bypass-techniques/

Transparent Tribe’s (APT36) Android CapraRAT Mimics YouTube to Hijack Android Phones https://www.sentinelone.com/labs/capratube-transparent-tribes-caprarat-mimics-youtube-to-hijack-android-phones/

In December 2022, Google discovered in-the-wild exploit chain targeting Samsung Android devices used by commercial mobile spyware vendor Variston. It appears that n-day exploits that were fixed in Google products in 2022 (Chrome), were not fixed yet in Samsung (Samsung browser) and because of that exploited by espionage software in early exploitation stages. Final stage, describes how attacker achieved execution as system_server (CVE-2023-0266, CVE-2023-26083) https://googleprojectzero.blogspot.com/2023/09/analyzing-modern-in-wild-android-exploit.html