fa
Feedback

فریب کلاهبرداران را نخورید! تل‌متریو این کانال‌ها را شناسایی و برچسب‌گذاری می‌کند 👉 برای مشاهده برچسب، اشتراک تهیه کنید

Android Security & Malware

Android Security & Malware

رفتن به کانال در Telegram

📈 تحلیل کانال تلگرام Android Security & Malware

کانال Android Security & Malware (@androidmalware) در بخش زبانی انگلیسی بازیگری فعال است. در حال حاضر جامعه شامل 44 569 مشترک است و جایگاه 3 001 را در دسته فناوری و برنامه‌ها و رتبه 931 را در منطقه الولايات المتحدة الأمريكية دارد.

📊 شاخص‌های مخاطب و پویایی

از زمان ایجاد در невідомо، پروژه رشد سریعی داشته و 44 569 مشترک جذب کرده است.

بر اساس آخرین داده‌ها در تاریخ 31 اکتبر, 2026، کانال فعالیت پایداری دارد. در ۳۰ روز گذشته تغییر اعضا برابر -251 و در ۲۴ ساعت گذشته برابر -7 بوده و همچنان دسترسی گسترده‌ای حفظ شده است.

  • وضعیت تأیید: تأیید نشده
  • نرخ تعامل (ER): میانگین تعامل مخاطب 13.20% است و در ۲۴ ساعت نخست پس از انتشار، محتوا معمولاً 3.74% واکنش نسبت به کل مشترکان کسب می‌کند.
  • دسترسی پست‌ها: هر پست به طور میانگین 5 882 بازدید دریافت می‌کند. در اولین روز معمولاً 1 668 بازدید جمع‌آوری می‌شود.
  • واکنش‌ها و تعامل: مخاطبان به‌طور فعال حمایت می‌کنند؛ میانگین واکنش به هر پست 43 است.
  • علایق موضوعی: محتوا بر موضوعات کلیدی مانند cve-2025, exploit, rat, trojan, bypass تمرکز دارد.

📝 توضیح و سیاست محتوایی

نویسنده این فضا را محل بیان دیدگاه‌های شخصی توصیف می‌کند:
“Mobile cybersecurity channel Links: https://linktr.ee/mobilehacker Contact: mobilehackerofficial@gmail.com”

به لطف به‌روزرسانی‌های پرتکرار (آخرین داده در تاریخ 01 نوامبر, 2026)، کانال همواره به‌روز و دارای دسترسی بالاست. تحلیل‌ها نشان می‌دهد مخاطبان به‌طور فعال با محتوا تعامل دارند و آن را به نقطه اثرگذاری مهم در دسته فناوری و برنامه‌ها تبدیل کرده‌اند.

Buy Ad
44 569
مشترکین
-724 ساعت
-417 روز
-25130 روز
آرشیو پست ها
ANDROID SUPPLY CHAIN VALIDATION CHEAT SHEET This cheat sheet is based on the work performed on Android TV devices (we documented our steps in the post Android TV Devices: Pre-0wned Supply Chain Security Threats) https://eclypsium.com/blog/android-supply-chain-validation-cheat-sheet/

Active Android espionage campaign targeting users mainly in India and Pakistan with apps bundled with the XploitSPY malware posing mostly as messaging services - even available on Google Play Store https://www.welivesecurity.com/en/eset-research/exotic-visit-campaign-tracing-footprints-virtual-invaders/

Threat actor "Starry Addax" targets human rights defenders in North Africa with new Android malware https://blog.talosintelligence.com/starry-addax/

Hornet dating app with over 10 million installs had vulnerabilities, allowing precise location determination of their users, even with distance display being disabled https://research.checkpoint.com/2024/the-illusion-of-privacy-geolocation-risks-in-modern-dating-apps/

How charging your phone can compromise your data using three types of Juice Jacking attack https://www.mobile-hacker.com/2024/04/04/how-charging-your-phone-can-compromise-your-data-using-juice-jacking-attack/

Google fixed 2 Pixel vulnerabilities which are being actively exploited in the wild by forensic companies CVE-2024-29745 refers to a vulnerability in the fastboot firmware used to support unlocking/flashing/locking. Forensic companies are rebooting devices in After First Unlock state into fastboot mode on Pixels and other devices to exploit vulnerabilities there and then dump memory. CVE-2024-29748 refers to a vulnerability providing the ability to interrupt a factory reset triggered by a device admin app. It appears they've implemented a partial solution in firmware. https://discuss.grapheneos.org/d/11860-vulnerabilities-exploited-in-the-wild-fixed-based-on-grapheneos-reports

After almost 7 years, new version of drozer compatible with Python 3 and modern Java was released. If you don't know, drozer
After almost 7 years, new version of drozer compatible with Python 3 and modern Java was released. If you don't know, drozer was a very popular security testing framework for Android https://github.com/WithSecureLabs/drozer

Demonstration of using BlueDucky to exploit 0-click Bluetooth vulnerability of unpatched Android smartphone (CVE-2023-45866) Exploit was triggered by Raspberry Pi 4 and then by Android running NetHunter https://youtu.be/GOGW7U1f2RA

A Year in Review of Zero-Days Exploited In-the-Wild in 2023 -In 2023, there were 97 zero-day vulnerabilities exploited, a significant rise of over 50% compared to 2022 (62 vulnerabilities) -Espionage was the primary motive behind 48 out of 58 zero-day vulnerabilities analyzed -Most of the zero-day vulnerabilities found last year were in phones, operating systems, and web browsers https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/Year_in_Review_of_ZeroDays.pdf

Malicious proxy malware was found in 28 apps available on Google Play Store. These trojanized apps were overall installed over 3,240,000 times https://www.humansecurity.com/learn/blog/satori-threat-intelligence-alert-proxylib-and-lumiapps-transform-mobile-devices-into-proxy-nodes

Address Sanitizer for Bare-metal Firmware This led to early discovery of memory corruption issues that were easily remediated due to the actionable reports produced by KASan. These builds can be used with fuzzers to detect edge case bugs https://security.googleblog.com/2024/03/address-sanitizer-for-bare-metal.html

BlueDucky automates exploitation of Bluetooth pairing vulnerability that leads to 0-click code execution ▪️automatically scans for devices ▪️store MAC addresses of devices that are no longer visible but have enabled Bluetooth ▪️uses Rubber Ducky payloads https://www.mobile-hacker.com/2024/03/26/blueducky-automates-exploitation-of-bluetooth-pairing-vulnerability-that-leads-to-0-click-code-execution/

SSRF in Mobile Security Framework (MobSF) version 3.9.5 Beta and prior (CVE-2024-29190) MobSF does not perform any input validation when extracting the hostnames in android:host, so requests can also be sent to local hostnames. This can lead to server-side request forgery (SSRF). An attacker can cause the server to make a connection to internal-only services within the organization's infrastructure https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-wfgj-wrgh-h3r3

Bluetooth vulnerability allows unauthorized user to record & play audio on Bluetooth speaker via #BlueSpy Prevention section explains how you can check if your Bluetooth LE speakers/headsets are vulnerable to this attack using nRF Connect app https://www.mobile-hacker.com/2024/03/22/bluetooth-vulnerability-allows-unauthorized-user-to-record-and-play-audio-on-bluetooth-speakers/

Oversecured published vulnerability scan reports for 225 Google-owned apps https://blog.oversecured.com/Oversecured-Apps-Care-Part-1-Vulnerability-disclosure-of-225-Google-apps/

Android crimeware reports on Tambir, Dwphon and Gigabud malware families https://securelist.com/crimeware-report-android-malware/112121/

[Questionnaire] We are writing here to get some insights from dedicated malware analysis experts. We are a group of experienced researchers, and we developed a state-of-the-art sandbox for Android malware. We are absolutely convinced that it makes sense to bring this technology to the market, but we need to picture your biggest sandbox needs in your daily work. The idea is to grasp what are, in your eyes, the must-haves of a sandbox. Our goal is to shape the product accordingly and make it available in the forthcoming months/next few months. To this end, we prepared a quick (approximately 15-minutes) questionnaire, and it would really mean a lot to us if you could share your valuable feedback. Thanks to this, we hope to offer you soon a gain of efficiency, time and energy in your job. Questionnaire: https://forms.gle/qJ9ck8UH5WQK6jAZ8