Tag: android
-
Hackers Use Fake Streaming Apps to Spread Mirax Android Malware and Steal Bank Accounts
Hackers are using streaming app lures to distribute Mirax. This Android banking trojan lets operators remotely control victims’ phones and initiate fraudulent transfers. Estimated losses reach millions of dollars, although confirmed cases capture only part of the campaign’s impact. The operation remained active when Group-IB published its November 5 investigation. Researchers linked the infections through…
-
Hackers Target iPhones and Android Phones: Here’s What We Know
Hackers are targeting outdated iPhones and Android phones through infected websites to steal passwords and sensitive data. Here’s how to protect your device. The post Hackers Target iPhones and Android Phones: Here’s What We Know appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-iphone-android-hackers-infected-websites/
-
Android SMS of Death Flaw: How to Check If Your Phone Is Patched
Google’s November security update fixes a critical Android vulnerability that can interrupt cellular calls through a hidden message. Here’s how to check your device. The post Android SMS of Death Flaw: How to Check If Your Phone Is Patched appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-android-sms-of-death-cve-2026-58882-patch/
-
New GhostMap Android Vulnerability Can Crash Phones Permanently Without Opening an App or Granting Permissions
Bitdefender researchers have revealed a vulnerability called GhostMap that affects Android devices. This vulnerability can cause phones to become stuck in a continuous crash loop immediately after a specially crafted application is installed. The demonstration app contains no executable code, requests no permissions, and does not need to be launched. To recover, users may need…
-
Russian state-linked hackers target iPhone, Android devices in zero-click espionage campaign
Russian state-linked hackers targeted users in Ukraine, the United States and Europe in a campaign to steal sensitive information from iPhone and Android devices, researchers found. First seen on therecord.media Jump to article: therecord.media/russia-hackers-smartphone-cyberattacks
-
Kein Patch verfügbar: Gefährliche Android-Lücke kann Smartphones unbrauchbar machen
Forscher haben eine gefährliche Android-Lücke aufgedeckt, mit der sich das System dauerhaft in eine Bootschleife versetzen lässt. Es droht Datenverlust. First seen on golem.de Jump to article: www.golem.de/news/kein-start-noetig-blosse-app-installation-kann-android-geraete-unbrauchbar-machen-2611-214896.html
-
Crashgefahr für Android-Smartphones
Die Experten der Bitdefender Labs haben auf einem Google-Pixel-10-Smartphone mit Android 17 eine speziell entwickelte App entdeckt, die einen Kreislauf eines Systemzusammenbruchs auslöst. Dieser lässt sich nur durchbrechen, wenn der Nutzer das Gerät auf den Werkstatus zurücksetzt (Factory-Reset), womit alle gespeicherten Daten verloren sind. Einen Fix des Problems gibt es aktuell noch nicht. Die in…
-
Kein Start nötig: Bloße App-Installation kann Android-Geräte unbrauchbar machen
Tags: androidForscher decken eine gefährliche Android-Lücke auf. Die Installation einer App kann das System in eine Bootschleife versetzen. Es droht Datenverlust. First seen on golem.de Jump to article: www.golem.de/news/kein-start-noetig-blosse-app-installation-kann-android-geraete-unbrauchbar-machen-2611-214896.html
-
GhostMap Bug Leaves Android Phones Stuck in Reboot Loop
Bitdefender warns that unfixed GhostMap bug could force users to factory reset their device First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/ghostmap-bug-android-phones-stuck/
-
Russian APT29 Targets Mobile Users with Watering Hole Attacks
Russia-linked group APT29 targeted iOS and Android users through hijacked websites and a compromised analytics service. Sekoia says a large-scale watering hole campaign is going after iOS and Android users, and it links the campaign to APT29 (aka SVR group, Cozy Bear, Nobelium, BlueBravo, Midnight Blizzard, and The Dukes), the Russian group tied to the SVR foreign intelligence service. A watering hole…
-
GhostMap Android flaw lets malicious app trigger persistent boot loop
Attackers can force Android devices into a continuous boot loop using a specially crafted app that requires no permissions and only needs to be installed. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/ghostmap-android-flaw-lets-malicious-app-trigger-persistent-boot-loop/
-
A banking malware sample led researchers to an Android bug that can loop-crash phones
Bitdefender Labs researchers built an Android app that contains no executable code and requests no permissions, and installing it leaves a Pixel 10 in a crash loop that can … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/05/ghostmap-android-bug-research/
-
Hackers exploited iOS and Android flaws to infect phones
Researchers say group may have been Kremlin-sponsored in search of diplomatic targets. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/11/hackers-exploited-ios-and-android-flaws-to-infect-phones/
-
Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet
Google alleges that Android device manufacturer Videostrong ran the operation, which infected set-top boxes and IoT devices with a backdoor to create infrastructure for criminal activity. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/google-13-million-device-strong-xcpe-botnet
-
Microsoft Authenticator’s Android Backup Switch Is Coming in January, Google One Takes Over
Microsoft Authenticator’s Android backup switch is coming in January. Existing recovery settings may not carry over automatically. The post Microsoft Authenticator’s Android Backup Switch Is Coming in January, Google One Takes Over appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-authenticator-android-google-one-backup/
-
Google, Partners Disrupts 1.3 Million-Device-Strong XCPE Botnet
Google alleges that Android device manufacturer Videostrong ran the operation, which infected set-top boxes and IoT devices with a backdoor to create infrastructure for criminal activity. First seen on darkreading.com Jump to article: www.darkreading.com/endpoint-security/google-13-million-device-strong-xcpe-botnet
-
Russian hackers target iOS and Android users with n-day exploits
Russia’s APT29 has been using compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with exploits for patched flaws and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/11/04/apt29-watering-hole-mobile-devices-n-day-exploits/
-
APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
The Russia-linked threat actor known as APT29 is said to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker.”The injected JavaScript code collects browser and device attributes,” Sekoia researchers Amaury-Jacques Garçon and…
-
APT29 Watering Holes Target Unpatched iPhones and Android Devices
APT29 compromised Ukrainian analytics tracker Plerdy to serve n-day exploits to mobile users First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/apt29-watering-holes-iphones/
-
Russian Hackers Create Fake US and UK Websites to Target Visitors With Mobile Exploits
A large-scale watering hole campaign that it assesses, with moderate to high confidence, is the work of APT29. APT29 is also tracked as Midnight Blizzard, Cozy Bear and The Dukes, and is widely linked to Russia’s SVR foreign intelligence service. The operation hit iOS and Android users through compromised sites, cloned domains, and a poisoned…
-
Google Patches Critical Android RCE Flaws That Let Attackers Execute Code Without User Interaction
Google released its November 2026 Android Security Bulletin, which addresses critical vulnerabilities that could allow remote code execution without user interaction or additional execution privileges. Published on November 2, the bulletin highlights a framework vulnerability as the most severe issue and also documents other critical remote code execution flaws in Android’s system components. According to…
-
CVE-2026-58868: Critical Android Bug Could Let Attackers Run Remote Code
Critical Android flaw CVE-2026-58868 could allow remote code execution without user interaction on devices running Android 14 through 17. Google has fixed CVE-2026-58868, a critical Android vulnerability affecting versions 14 through 17. The flaw is a critical Android vulnerability caused by a heap buffer overflow in the onOutputReceived function of FrameDecoder.cpp. The flaw can trigger…
-
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating legitimate portals. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-use-n-day-exploits-in-zero-click-attacks-on-ios-android-devices/
-
Google Issues Patches for Critical Android Flaw That Could Allow RCE Without User Interaction
A critical Android flaw could allow an attacker to run code on a phone without any user action remotely, Google said in its November security bulletin.The flaw, CVE-2026-58868, affects Android 14 through 17. Phones get the fix with security patch level 2026-11-01 or later, which phone makers and carriers send on their own schedules.As of…
-
Russian Intel Hackers Troll Mobile Devices for Login Cookies
Tags: android, espionage, group, hacker, intelligence, login, mobile, russia, service, vulnerabilitySekoia Links Campaign to Russian Espionage Group Targeting iOS and Android Users. Russian state hackers used lookalike and compromised websites to conduct a watering hole campaign against mobile devices, using known vulnerabilities to snatch browser cookies and other data. Sekoia identifies with moderate to high confidence Russia’s Foreign Intelligence Service as the attacker. First seen…
-
Google dismantles massive botnet hidden in Android TV boxes
The overwhelming majority of the infected devices in the X.CPE botnet are Android TV set-top boxes, Google said, adding that they observed a number of other infected Android-based IoT devices, including telehealth devices, karaoke machines and digital signage devices. First seen on therecord.media Jump to article: therecord.media/google-dismantles-botnet-hidden-android-tv-boxes
-
Google dismantles botnet secretly running on 1.3 million Android TV boxes
Google has cut ties with the company behind the botnet campaign. First seen on arstechnica.com Jump to article: arstechnica.com/google/2026/11/google-dismantles-botnet-secretly-running-on-1-3-million-android-tv-boxes/
-
Schadcode-Attacken möglich: Kritische Android-Lücken gefährden unzählige Geräte
Google hat mit den neuesten Android-Updates über 200 Sicherheitslücken adressiert. Einige davon ermöglichen gefährliche Schadcode-Attacken. First seen on golem.de Jump to article: www.golem.de/news/schadcode-attacken-moeglich-kritische-android-luecken-gefaehrden-unzaehlige-geraete-2611-214793.html
-
Google’s New Android App Store Program Costs $10,000 a Year
Google’s new Android app store program brings one-tap installs and automatic updates, but US users are excluded, and marketplaces face a $10,000 annual fee. The post Google’s New Android App Store Program Costs $10,000 a Year appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-android-registered-app-stores-program/
-
TV-Boxen und mehr: 1,3 Millionen Android-Geräte mit Backdoor verkauft
Ein chinesischer Hersteller hat TV-Boxen und andere Android-Geräte heimlich mit einer Backdoor ausgestattet und den Zugang an Kriminelle verkauft. First seen on golem.de Jump to article: www.golem.de/news/tv-boxen-und-mehr-1-3-millionen-android-geraete-mit-backdoor-verkauft-2611-214785.html