uz
Feedback
Android Security & Malware

Android Security & Malware

Kanalga Telegram’da o‘tish

📈 Telegram kanali Android Security & Malware analitikasi

Android Security & Malware (@androidmalware) Ingliz til segmentidagi kanali faol ishtirokchi. Hozirda hamjamiyat 43 891 obunachidan iborat bo'lib, Texnologiyalar & Aralashmalar toifasida 3 094-o'rinni va AQSH mintaqasida 727-o'rinni egallagan.

📊 Auditoriya ko‘rsatkichlari va dinamika

невідомо sanasidan buyon loyiha tez o‘sib, 43 891 obunachiga ega bo‘ldi.

14 Iyun, 2026 dagi oxirgi ma’lumotlarga ko‘ra kanal barqaror faollikka ega. Oxirgi 30 kunda obunachilar soni 168 ga, so‘nggi 24 soatda esa 10 ga o‘zgardi va umumiy qamrov yuqori darajada qolmoqda.

  • Tasdiqlash holati: Tasdiqlanmagan
  • Jalb etish (ER): Auditoriya o‘rtacha 11.91% darajada jalb etiladi. Nashrdan keyingi dastlabki 24 soatda kontent odatda umumiy obunachilar sonining 4.63% ini tashkil etuvchi reaksiyalarni to‘playdi.
  • Post qamrovi: Har bir post o‘rtacha 5 227 marta ko‘riladi; birinchi sutkada odatda 2 032 ta ko‘rish yig‘iladi.
  • Reaksiyalar va o‘zaro ta’sir: Auditoriya faol: har bir postga o‘rtacha 12 ta reaksiya keladi.
  • Tematik yo‘nalishlar: Kontent cve-2025, exploit, rat, trojan, bypass kabi asosiy mavzularga jamlangan.

📝 Tavsif va kontent siyosati

Muallif resursni shaxsiy fikrni ifoda etish maydoni sifatida ta’riflaydi:
Mobile cybersecurity channel Links: https://linktr.ee/mobilehacker Contact: mobilehackerofficial@gmail.com

Yuqori yangilanish chastotasi (oxirgi ma’lumot 15 Iyun, 2026 da olingan) sababli kanal doimo dolzarb va katta qamrovli bo‘lib qoladi. Analitika auditoriya kontent bilan faol hamkorlik qilishini, uni Texnologiyalar & Aralashmalar toifasidagi muhim ta’sir nuqtasiga aylantirishini ko‘rsatadi.

43 891
Obunachilar
+1024 soatlar
+887 kunlar
+16830 kunlar
Postlar arxiv
A vulnerability in DuckDuckGo’s Android browser allows file exfiltration via malicious intent:// URLs to gain access to a vic
A vulnerability in DuckDuckGo’s Android browser allows file exfiltration via malicious intent:// URLs to gain access to a victim’s Sync account data such as account credentials and email protection information (CVE-2025-48464) https://tuxplorer.com/posts/dont-leave-me-outdated/

EnFeSTDroid: Ensembled feature selection techniques based Android malware detection https://www.sciencedirect.com/science/article/pii/S0045790625007062

MCGDroid: An Android Malware Classification Method Based on Multi-Feature Class-Call Graph Characterization https://www.sciencedirect.com/science/article/abs/pii/S016740482500402X

0-click vulnerability in Dolby's DDPlus decoder affected Android (CVE-2025-54957) A malformed audio file can trigger an out-o
0-click vulnerability in Dolby's DDPlus decoder affected Android (CVE-2025-54957) A malformed audio file can trigger an out-of-bounds write due to integer overflow in evolution data handling—leading to memory corruption and crashes. Android decodes audio messages locally, making this exploitable without user interaction. Reproduction: Just send a crafted RCS voice message (dolby_android_crash.mp4) Details: https://project-zero.issues.chromium.org/issues/428075495

New Android BEERUS framework for dynamic analysis & reverse engineering BEERUS brings Frida auto-injection, sandbox exfiltrat
+3
New Android BEERUS framework for dynamic analysis & reverse engineering BEERUS brings Frida auto-injection, sandbox exfiltration, memory dumps, Magisk integration and more for on device app analysis. https://github.com/hakaioffsec/beerus-android

Modern iOS Security Features – A Deep Dive into SPTM, TXM, and Exclaves https://arxiv.org/pdf/2510.09272

GhostBat RAT: Inside the Resurgence of RTO-Themed Android Malware https://cyble.com/blog/ghostbat-rat-inside-the-resurgence-of-rto-themed-android-malware/

APK Tool GUI: GUI for apktool, signapk, zipalign and baksmali utilities https://github.com/AndnixSH/APKToolGUI
APK Tool GUI: GUI for apktool, signapk, zipalign and baksmali utilities https://github.com/AndnixSH/APKToolGUI

New Pixnapping Attack allows any Android app without permissions to leak info displayed by other apps exploiting Android APIs and a hardware side channel (CVE-2025-48561). Pixnapping is not fixed and probably affects all Androids. PoC: Not available yet. Video demonstrates stealing 2FA codes from Google Authenticator.

Android Physical Memory: CVE-2025-21479 Rights Elevation Record https://dawnslab.jd.com/android_gpu_attack_cve_2025_21479/

Patch Diffing CVE-2024-23265: An iOS Kernel Memory Corruption Vulnerability https://8ksec.io/patch-diffing-ios-kernel/

Exploit for a vulnerability in the Nothing Phone 2a/CMF Phone 1 secure boot chain (and possibly other MediaTek devices) Info
Exploit for a vulnerability in the Nothing Phone 2a/CMF Phone 1 secure boot chain (and possibly other MediaTek devices) Info + PoC: https://github.com/R0rt1z2/fenrir

iOS Crypto Heist: iMessage Zero-Click RCE Chain (CVE-2025-31200, CVE-2025-31201) CVE-2025-31200 is a zero-day, zero-click RCE in iOS CoreAudio’s AudioConverterService, triggered by a malicious audio file via iMessage/SMS. Exploitation bypassed Blastdoor, enabled kernel escalation (CVE-2025-31201), and allowed token theft until patched in iOS 18.4.1 (Apr 16, 2025) Info: https://github.com/JGoyd/iOS-Attack-Chain-CVE-2025-31200-CVE-2025-31201 PoC exploit: https://www.dropbox.com/scl/fi/oerpnhq1ui3xfswsszfh2/Audio-clip.amr?rlkey=7n54m1o84poezyipxvd2f9slx&e=3&st=b1tkonvr&dl=0

Two spyware strains - ProSpy & ToSpy - masquerade as Signal and ToTok to infect Androids https://www.welivesecurity.com/en/eset-research/new-spyware-campaigns-target-privacy-conscious-android-users-uae/

Attacking telecom: security bugs from 2G to 5G, SMS exploits, and SS7 & Diameter protocols [presentation] https://www.youtube
Attacking telecom: security bugs from 2G to 5G, SMS exploits, and SS7 & Diameter protocols [presentation] https://www.youtube.com/watch?v=364R1SoGGJ4

Phones auto-connecting to "FreeWiFi_Secure" Wi-Fi network leak full IMSI in cleartext during EAP-SIM exchange Anyone nearby w
Phones auto-connecting to "FreeWiFi_Secure" Wi-Fi network leak full IMSI in cleartext during EAP-SIM exchange Anyone nearby with sniffer could capture it → track users, or correlate identities. Fixed pushed disabling FreeWiFi_Secure on legacy boxes starting Oct 1, 2025. https://7h30th3r0n3.fr/the-vulnerability-that-killed-freewifi_secure/

Silent Smishing : The Hidden Abuse of Cellular Router APIs Cellular router’s API was exploited to send malicious SMS messages containing phishing URLs https://blog.sekoia.io/silent-smishing-the-hidden-abuse-of-cellular-router-apis/

Klopatra: exposing a new Android banking trojan operation with roots in Turkey https://www.cleafy.com/cleafy-labs/klopatra-exposing-a-new-android-banking-trojan-operation-with-roots-in-turkey