Android Security & Malware
Link
click to show
click to show
JADX MCP: a MCP (Model Context Protocol) server as a jadx-gui plugin
https://github.com/0xdad0/jadx-mcp
85 · 5.3K · Android Security & Malware
Link
click to show
click to show
How to Install Proxmark3 on the uConsole to read, write and clone some of RFID and NFC tokens
https://www.mobile-hacker.com/2026/08/31/how-to-install-proxmark3-on-the-clockworkpi-uconsole/
31 · 6K · Link
click to show
click to show
PolicyGapper: A Multi-Prompt LLM-Based App Privacy Compliance Analysis
https://github.com/Mobile-IoT-Security-Lab/PolicyGapper
31 · 4.8K · Android Security & Malware
Link
click to show
click to show
Beware of fake Indeed interview apps used to install spyware
https://www.malwarebytes.com/blog/scams/2026/08/beware-of-fake-indeed-interview-apps-used-to-install-spyware
17 · 5.4K · Android Security & Malware
Link
click to show
click to show
Reproducing the Acode Zero-Day Vulnerability
-ACode is a simple code editor for Android
https://hackmd.io/@sal/Reproducing-the-Acode-Zero-Day-Vulnerability
34 · 6K · Link
click to show
click to show
Uncovering StreamRat: From Meta Ads to Full Device Takeover
https://www.threatfabric.com/blogs/from-meta-ads-to-full-device-takeover-uncovering-streamrat
34 · 5.9K · Link
click to show
click to show
Your photos can be accessed without unlocking your Android when you receive a WhatsApp video call [not fixed]
https://www.mobile-hacker.com/2026/09/02/whatsapp-lets-you-view-photos-without-unlocking-smartphone/
74 · 6.7K · Android Security & Malware
Link
click to show
click to show
How to Copy and Backup RFID Access Cards and NFC Key Fobs with Chameleon Ultra
https://www.mobile-hacker.com/2026/09/07/chameleon-ultra-guide-to-rfid-reading-emulation-and-testing/
39 · 4.4K · Photo
click to show
click to show
1-click could expose every contact saved on your Android, even if you never gave permission to access them (CVE-2026-28576)
Blog: https://www.mobilehackinglab.com/blog/cve-2026-28576-contacts-provider-sqli
Demo: https://www.youtube.com/shorts/nWzdx0uuULM
PoC APK: https://github.com/mobilehackinglab/CVE-2026-28576-poc
76 · 5.4K · Link
click to show
click to show
TeleGapper is a black-box dynamic analysis tool for Telegram Mini Apps on Android devices
https://github.com/Mobile-IoT-Security-Lab/TeleGapper
43 · 6K · Android Security & Malware
Link
click to show
click to show
Hagaseca: Inside a Packed Android RAT Loader
https://darkatlas.io/blog/hagaseca-inside-a-packed-android-rat-loader
25 · 5.3K · Link
click to show
click to show
WeWorm: The first zero-click worm to spread through WeChat calls across iOS and Android
https://calif.io/research/weworm
42 · 6.9K · Link
click to show
click to show
RCE in mexc Android app via Bypass URL validation to access the WebView, JS-Bridge with Path Traversal leads to Native-Library Cache Overwrite.
https://itis911.github.io/writeups/RCE-Mexc-Andriod-App.html
54 · 7K · Android Security & Malware
Link
click to show
click to show
Vwork: Weaponized Open-source Software as an Addon for Gigabud
https://www.group-ib.com/blog/vwork-app-cloning-gigabud-goldfactory/
18 · 6K · Link
click to show
click to show
Mantax Otax: Indonesian Mobile Ransomware with Spyware Integration
https://zimperium.com/blog/mantax-otax-indonesian-mobile-ransomware-with-spyware-integration
25 · 7.2K · Android Security & Malware
Link
click to show
click to show
RatHat: AI-Powered Mobile Threat is Here for Your Credentials & Bank Accounts
https://zimperium.com/blog/rathat-ai-powered-mobile-threat-is-here-for-your-credentials-bank-accounts
28 · 6.4K · Android Security & Malware
Link
click to show
click to show
Turn a Rooted Android Phone into an NFC Authenticator and Automation Tool for Your PC
https://www.mobile-hacker.com/2026/09/21/turn-a-rooted-android-phone-into-an-nfc-authenticator-and-automation-tool-for-your-pc/
55 · 5.4K · Android Security & Malware
Link
click to show
click to show
Getting root on OnePlus 15 from an untrusted app, via an audio debug service and a vendor HAL
https://blog.nns.ee/2026/09/24/oneplus-root/
37 · 3.9K · Android Security & Malware
Link
click to show
click to show
RemControl: AI Built the Overlays. Victims Lose their PINs
https://www.group-ib.com/blog/remcontrol-android-banking-trojan/
19 · 3.3K · Link
click to show
click to show
A native APK and DEX decompiler written in Rust
https://github.com/Ch0pin/rdx
71 · 3.6K · Link
click to show
click to show
apk-reverse: An Agent Skill for Android APK reverse engineering, debloating, ad removal, surgical dex patching, repacking, and runtime/server analysis
https://github.com/newliver666/apk-reverse
84 · 3.2K · Android Security & Malware
Link
click to show
click to show
From BlackCat to Panda Workshop: Inside the Evolving C2 Panel Behind RATHat
https://www.cleafy.com/cleafy-labs/from-blackcat-to-panda-workshop-inside-the-evolving-c2-panel-behind-rathat
15 · 3K · Link
click to show
click to show
How we found 24 Android vulnerabilities using our open source AI security agent
https://github.blog/security/how-we-found-24-android-vulnerabilities-using-our-open-source-ai-security-agent/
53 · 3.1K · Link
click to show
click to show
CVE-2026-20687: AppleJPEGDriver startDecoder Timeout UAF — iOS/macOS kernel vulnerability leading to deferred panic (A19 Pro, iOS 26.3 RC) https://github.com/0xjohnnydev/CVE-2026-20687-AppleJPEGDriver-UAF
36 · 3.1K · Android Security & Malware
Link
click to show
click to show
CVE-2026-86950: The Great Glyph Grift
An in-the-wild iOS bug with a possible WhatsApp zero-click path
Blog: https://calif.io/research/the-great-glyph-grift
PoC: https://github.com/califio/publications/tree/main/MADBugs/CVE-2026-86950
23 · 2.1K ·