Android Security & Malware

11 February 2026 12:07

Intro to Android WebViews and deep links…and how to exploit them
https://djini.ai/intro-to-android-webviews-and-deep-links-and-how-to-exploit-them/

Android Security & Malware

08 February 2026 17:37

IPATool: command line tool that allows to download iOS apps on the App Store
https://github.com/majd/ipatool

Android Security & Malware

06 February 2026 09:31

Understanding and Experimenting with Apple's Pointer Authentication Codes (PAC) on iOS
https://blog.reversesociety.co/blog/2026/pointer-authentication-code-for-ios

Android Security & Malware

05 February 2026 12:37

Inside a Multi-Stage Android Malware Campaign Leveraging RTO-Themed Social Engineering
https://www.seqrite.com/blog/inside-a-multi-stage-android-malware-campaign-leveraging-rto-themed-social-engineering/

Android Security & Malware

03 February 2026 14:01

Sapsan Terminal: new AI‑powered HID scripting tool that speeds up payload creation and handles the syntax for 15 supported devices (video test)
https://www.mobile-hacker.com/2026/02/03/sapsan-terminal-ai-powered-badusb-script-generator/

Android Security & Malware

02 February 2026 11:19

Android Game Hacking (Part I)
justmobilesec/android-mobile-game-hacking-f428aef8eb98" rel="nofollow">https://medium.com/@justmobilesec/android-mobile-game-hacking-f428aef8eb98

Android Security & Malware

01 February 2026 21:19

Analysing a Pegasus 0-click Exploit for iOS
Recreated the "Blastpass" iOS exploit in a faked target process, to understand the heap shaping strategy first-hand
https://youtu.be/0JFcDCW3Sis

Android Security & Malware

31 January 2026 09:43

Modern iOS Security Features – A Deep Dive
into SPTM, TXM, and Exclaves
https://arxiv.org/pdf/2510.09272

Android Security & Malware

29 January 2026 17:29

The Rise of Android Arsink Rat
https://zimperium.com/blog/the-rise-of-arsink-rat

Android Security & Malware

29 January 2026 13:24

NFCShare (SuperCard X) Android Trojan: NFC card data theft via malicious APK
https://www.d3lab.net/nfcshare-android-trojan-nfc-card-data-theft-via-malicious-apk/

Android Security & Malware

28 January 2026 15:25

Android and authentication: The Evolution of FIDO Experiences on Android
https://bughunters.google.com/blog/fido

Android Security & Malware

23 January 2026 13:10

Samsung S23 Ultra: The Ultimate NetHunter Setup(Android 14 Fix)
JanCSG/samsung-s23-ultra-the-ultimate-nethunter-setup-31c1105201d9" rel="nofollow">https://medium.com/@JanCSG/samsung-s23-ultra-the-ultimate-nethunter-setup-31c1105201d9

Android Security & Malware

21 January 2026 07:37

Firebase APK Security Scanner
Scan Android APKs for Firebase security misconfigurations including open databases, exposed storage buckets, and authentication bypasses
https://github.com/trailofbits/skills/tree/main/plugins/firebase-apk-scanner

Android Security & Malware

20 January 2026 03:07

Frida-based tool to dump decrypted iOS apps as .ipa from a jailbroken device supports App Store, sideloaded and system
https://github.com/lautarovculic/frida-ipa-extract

Android Security & Malware

16 January 2026 16:11

WhisperPair: Hijacking Bluetooth Accessories
Using Google Fast Pair.
You can also check if your device is vulnerable
https://whisperpair.eu/

Android Security & Malware

11 February 2026 10:40

How to install OpenClaw on Android and control it via WhatsApp using automated script
Blog: https://www.mobile-hacker.com/2026/02/11/how-to-install-openclaw-on-an-android-phone-and-control-it-via-whatsapp/
Installer script: https://github.com/androidmalware/OpenClaw_Termux

Android Security & Malware

06 February 2026 18:39

Android Dynamic Class Dumper — dump all DEX files from running Android apps using Frida
https://github.com/TheQmaks/clsdumper

Android Security & Malware

06 February 2026 08:05

MobSF has Stored XSS via Manifest Analysis of uploaded APK (CVE-2026-24490 )
https://github.com/advisories/GHSA-8hf7-h89p-3pqj

Android Security & Malware

03 February 2026 19:16

FIRST Ever Online Mobile Hacking Conference
Free, worldwide online event bringing the mobile security community together for sessions on mobile hacking, AI, malware, forensics, live mobile‑focused CTF with prizes!
When: March 3 and 4, 2026
Register here: https://www.mobilehackinglab.com/mobile-hacking-conference-registration

Android Security & Malware

02 February 2026 12:32

Practical Mobile Traffic Interception
justmobilesec/practical-mobile-traffic-interception-1481e33d974e" rel="nofollow">https://medium.com/@justmobilesec/practical-mobile-traffic-interception-1481e33d974e

Android Security & Malware

01 February 2026 23:41

Deep-C: Android Deep Link misconfiguration detector and exploitation tool
https://github.com/KishorBal/deep-C

Android Security & Malware

31 January 2026 10:58

Carbonara: The MediaTek exploit nobody served
https://shomy.is-a.dev/blog/article/serving-carbonara
Penumbra is a tool for interacting with Mediatek devices.
It provides flashing and readback capabilities, as well as bootloader unlocking and relocking on vulnerable devices: https://github.com/shomykohai/penumbra

Android Security & Malware

30 January 2026 07:54

Android Trojan Campaign Uses Hugging Face Hosting for RAT Payload Delivery
https://www.bitdefender.com/en-us/blog/labs/android-trojan-campaign-hugging-face-hosting-rat-payload

Android Security & Malware

29 January 2026 14:16

Disrupting the World's Largest Residential Proxy Network
https://cloud.google.com/blog/topics/threat-intelligence/disrupting-largest-residential-proxy-network

Android Security & Malware

28 January 2026 20:07

Android spyware campaign targeting users in Pakistan via romance scam tactics, revealing links to a broader spy operation
https://www.welivesecurity.com/en/eset-research/love-actually-fake-dating-app-used-lure-targeted-spyware-campaign-pakistan/

Android Security & Malware

28 January 2026 14:50

A Frida-based utility for dynamically extracting native (.so) libraries from Android applications
https://github.com/TheQmaks/soSaver

Android Security & Malware

22 January 2026 07:17

Android.Phantom trojans are bundled with modded games and popular apps to infiltrate smartphones. They use machine learning and video broadcasts to engage in click fraud
https://news.drweb.com/show/?i=15110&lng=en

Android Security & Malware

21 January 2026 05:35

Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari
https://github.com/zeroxjf/WebKit-UAF-ANGLE-OOB-Analysis

Android Security & Malware

18 January 2026 13:39

WPair: app for testing Bluetooth WhisperPair vulnerability in Google's Fast Pair protocol (CVE-2025-36911) https://github.com/zalexdev/wpair-app

Android Security & Malware

15 January 2026 20:08

A 0-click exploit chain for the Pixel 9 Part 3: Where do we go from here?
https://projectzero.google/2026/01/pixel-0-click-part-3.html