Collecting Cyber-News from over 60 sources

Tag: android

Microsoft will kill the Lens PDF scanner app for iOS, Android

Aug 8, 2025 1:11 PM

Tags: android, microsoft

Microsoft announced that it will phase out the Microsoft Lens PDF scanner app for Android and iOS devices starting September 15, 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/microsoft/microsoft-will-kill-the-microsoft-lens-pdf-scanner-app-for-ios-android-in-september/
Android gets patches for Qualcomm flaws exploited in attacks

Aug 5, 2025 1:28 PM

Tags: android, attack, exploit, flaw, google, update, vulnerability

Google has released security patches for six vulnerabilities in Android’s August 2025 security update, including two Qualcomm flaws exploited in targeted attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/android-gets-patches-for-qualcomm-flaws-exploited-in-attacks/
MediaTek Chip Vulnerabilities Allow Attackers to Gain Elevated Access

Aug 5, 2025 1:28 PM

Tags: access, android, cyber, vulnerability

MediaTek has disclosed three critical security vulnerabilities affecting dozens of its chipsets, potentially allowing attackers to gain elevated system privileges on affected devices. The vulnerabilities, detailed in the company’s August 2025 Product Security Bulletin, impact a wide range of MediaTek processors used in smartphones, tablets, and other connected devices running Android, openWRT, Yocto, RDK-B, and…
New Android Malware Poses as SBI Card and Axis Bank Apps to Steal Financial Data

Aug 5, 2025 12:28 PM

Tags: android, banking, cyber, data, finance, india, malicious, malware, mobile, phishing

McAfee’s Mobile Research Team has identified a sophisticated Android malware campaign primarily aimed at Hindi-speaking users in India, masquerading as legitimate financial applications from institutions like SBI Card, Axis Bank, and IndusInd Bank. This operation distributes malicious APKs through dynamically created phishing websites that mimic official banking portals, leveraging real assets such as images and…
Google addresses six vulnerabilities in August’s Android security update

Aug 5, 2025 12:28 AM

Tags: android, google, update, vulnerability

Android partners and customers have experienced a temporary respite from double-digit vulnerabilities this summer. Google issued no security patches in its update last month. First seen on cyberscoop.com Jump to article: cyberscoop.com/android-security-update-august-2025/
PlayPraetor Android RAT expands rapidly across Spanish and French-speaking regions

Aug 4, 2025 4:28 PM

Tags: android, malware, rat

PlayPraetor Android RAT has hit 11K+ devices, spreading fast via campaigns targeting Spanish and French speakers, say Cleafy researchers. Cleafy researchers have identified a new Android RAT called PlayPraetor, which has infected over 11,000 devices, mainly in Portugal, Spain, France, Morocco, Peru, and Hong Kong. The malware is spreading rapidly, with more than 2,000 new…
PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

Aug 4, 2025 10:28 AM

Tags: access, android, botnet, cybersecurity, google, infection

Cybersecurity researchers have discovered a nascent Android remote access trojan (RAT) called PlayPraetor that has infected more than 11,000 devices, primarily across Portugal, Spain, France, Morocco, Peru, and Hong Kong.”The botnet’s rapid growth, which now exceeds 2,000 new infections per week, is driven by aggressive campaigns focusing on Spanish and French speakers, indicating a strategic…
Chinese Threat Actors Hack 11,000 Android Devices to Deploy PlayPraetor Malware

Aug 1, 2025 5:28 PM

Tags: access, android, china, cyber, fraud, google, intelligence, malware, service, threat

Chinese-speaking threat actors have used the PlayPraetor Remote Access Trojan (RAT) to infiltrate more than 11,000 Android devices globally in a sophisticated Malware-as-a-Service (MaaS) operation. This allows for on-device fraud (ODF) by controlling the device in real time. First investigated by Cleafy Threat Intelligence in June 2025, the campaign impersonates legitimate Google Play Store pages…
Anubis Ransomware Targets Android and Windows Users to Encrypt Files and Steal Credentials

Jul 31, 2025 8:28 PM

Tags: android, credentials, cyber, group, leak, ransomware, threat, windows

Ransomware activity has skyrocketed in the ever-evolving cyber threat landscape, with Bitsight’s State of the Underground 2025 study indicating a 53% increase in ransomware group-operated leak sites and a roughly 25% increase in unique victims reported on leak sites throughout 2024. Amid this escalation, the Anubis ransomware variant has emerged as a formidable player, first…
Android Malware Targets Banking Users Through Discord Channels

Jul 31, 2025 6:28 PM

Tags: android, banking, malware

The DoubleTrouble Android banking Trojan has evolved, using Discord for delivery and introducing several new features First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/android-malware-targets-banks-via/
Proton launches free standalone cross-platform Authenticator app

Jul 31, 2025 5:28 PM

Tags: android, authentication, linux, macOS, mfa, windows

Proton has launched Proton Authenticator, a free standalone two-factor authentication (2FA) application for Windows, macOS, Linux, Android, and iOS. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/proton-launches-free-standalone-cross-platform-authenticator-app/
NordVPN Rolls Out Scam Call Protection for Android Users in the US

Jul 30, 2025 7:29 PM

Tags: android, fraud, scam, vpn

NordVPN’s new Scam Call Protection alerts US Android users of suspicious calls, helping prevent fraud, no separate app or VPN connection needed. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/nordvpn-scam-call-protection-android/
Keeper Security Releases Mobile Platform Updates for iOS and Android

Jul 30, 2025 5:28 PM

Tags: android, data, mobile, passkey, password, update

Keeper Security has announced significant updates to its mobile apps for iOS and Android. The updates will bring users a smarter, smoother and more secure way to manage passwords, passkeys and sensitive data on the go. The updated Keeper mobile apps will be available in app stores soon. As smartphones become a primary point of…
Senator warns of new UK surveillance risks to US citizens following Apple ‘back door’ row

Jul 29, 2025 9:28 PM

Tags: android, apple, backdoor, google, phone, risk

US lawmarker raises concerns that UK may have ordered Google to introduce ‘backdoors’ into end-to-end encrypted back-ups impacting billions of Android phone users First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366628083/Senator-warns-of-new-UK-surveillance-risks-to-US-citizens-following-Apple-back-door-row
Android Banking Malware Masquerades as Government Agencies to Attack Users

Jul 29, 2025 8:27 PM

Tags: android, attack, banking, cyber, exploit, finance, government, intelligence, malware, phishing

Cyble Research and Intelligence Labs (CRIL) has uncovered a sophisticated Android banking trojan dubbed RedHook, which disguises itself as legitimate applications from Vietnamese government and financial institutions to deceive users. This malware, first observed in the wild around January 2025, exploits phishing websites mimicking entities like the State Bank of Vietnam, Sacombank, Central Power Corporation,…
ToxicPanda Android Banking Malware Compromises Over 4,500 Devices to Harvest Banking Credentials

Jul 29, 2025 6:27 PM

Tags: android, banking, credentials, cyber, malware, threat, unauthorized

The ToxicPanda Android banking trojan has emerged as a significant threat, compromising over 4,500 devices primarily in Portugal and Spain as of early 2025, with a focus on stealing banking credentials, overlaying PIN and pattern codes, and enabling unauthorized transactions. Initially identified by Trend Micro in 2022 targeting Southeast Asia, the malware shifted to Europe…
Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asia’s Mobile Networks

Jul 29, 2025 2:28 PM

Tags: android, cloud, cybercrime, cybersecurity, data, korea, malware, mobile, network, service, threat

Cybersecurity researchers have discovered a new, large-scale mobile malware campaign that’s targeting Android and iOS platforms with fake dating, social networking, cloud storage, and car service apps to steal sensitive personal data.The cross-platform threat has been codenamed SarangTrap by Zimperium zLabs. Users in South Korea appear to be the primary focus.”This extensive campaign involved First…
Cyble Uncovers RedHook Android Trojan Targeting Vietnamese Users

Jul 29, 2025 9:28 AM

Tags: android, banking, cybersecurity, finance, government, intelligence, malware, mobile, phishing

Cybersecurity researchers at Cyble Research and Intelligence Labs (CRIL) have uncovered a new Android banking trojan called RedHook that is actively targeting Vietnamese mobile users. The malware is distributed via carefully crafted phishing sites impersonating trusted financial and government agencies. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/redhook-android-banking-trojan-exploiting/
Android Malware-as-a-Service Gets Cheaper, Packing 2FA Interception

Jul 28, 2025 3:27 PM

Tags: 2fa, android, attack, cyber, cybercrime, malware, mfa, service

Malware-as-a-service (MaaS) platforms like PhantomOS and Nebula are democratizing Android device attacks because they provide pre-built, subscription-based malware kits for as little as $300 per month, marking a fundamental shift in the cybercrime scene. These services eliminate the need for coding expertise, providing cybercriminals with fully functional Android trojans equipped with advanced capabilities like two-factor…
Betrugsfälle: iPhone-Nutzer häufiger Opfer als Android-Anwender

Jul 27, 2025 1:27 AM

Tags: android, iphone

First seen on datensicherheit.de Jump to article: www.datensicherheit.de/betrug-iphone-nutzer-opfer-android
Fake Indian Banking Apps on Android Steal Login Credentials from Users

Jul 25, 2025 3:27 PM

Tags: android, banking, credentials, cyber, detection, finance, india, login, malicious, malware, theft, unauthorized

A malicious Android application has been uncovered, impersonating legitimate Indian banking apps to orchestrate credential theft, surveillance, and unauthorized financial transactions. This malware employs a modular architecture featuring a dropper and a primary payload, leveraging deceptive user interfaces, silent installation techniques, and extensive abuse of Android permissions to evade detection and ensure persistence. In-Depth Malware…
DCHSpy Android Spyware Linked to Iran’s MuddyWater APT, Targets Geopolitical Foes with Starlink Lures

Jul 23, 2025 9:12 PM

Tags: android, apt, iran, spyware

The post DCHSpy Android Spyware Linked to Iran’s MuddyWater APT, Targets Geopolitical Foes with Starlink Lures appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/dchspy-android-spyware-linked-to-irans-muddywater-apt-targets-geopolitical-foes-with-starlink-lures/
New DCHSpy Android Malware Targets WhatsApp, Call Logs, Audio, and Photos

Jul 22, 2025 2:40 PM

Tags: android, cyber, group, intelligence, iran, malware, threat

Security researchers at Lookout have identified four novel samples of DCHSpy, an advanced Android surveillanceware attributed to the Iranian threat actor group MuddyWater, believed to be affiliated with Iran’s Ministry of Intelligence and Security (MOIS). These samples emerged approximately one week following the onset of the Israel-Iran conflict, highlighting the rapid adaptation of malware tooling…
Cybercriminals Merge Android Malware with Click Fraud Apps to Harvest Credentials

Jul 22, 2025 11:42 AM

Tags: android, credentials, cyber, cybercrime, data, exploit, fraud, login, malicious, malware, social-engineering, tactics

Researchers uncovered an active Android malware cluster that ingeniously combines brand impersonation with traffic monetization tactics, targeting users across multiple regions. These malicious Android Package Kit (APK) files exploit social engineering and off-market distribution channels to evade traditional security measures, preying on user trust to exfiltrate sensitive data such as login credentials. The campaign deploys…
MuddyWater deploys new DCHSpy variants amid Iran-Israel conflict

Jul 21, 2025 9:40 PM

Tags: android, apt, group, iran, spyware

Iran-linked APT MuddyWater is deploying new DCHSpy spyware variants to target Android users amid the ongoing conflict with Israel. Lookout researchers observed Iran-linked APT MuddyWater (aka SeedWorm, TEMP.Zagros, and Static Kitten) is deploying a new version of the DCHSpy Android spyware in the context of the Israel-Iran conflict. The firstMuddyWatercampaign wasobservedin late 2017, when the APT group targeted entities in…
Iran-Linked DCHSpy Android Malware Masquerades as VPN Apps to Spy on Dissidents

Jul 21, 2025 8:40 PM

Tags: android, cybersecurity, intelligence, Internet, iran, malware, service, spy, spyware, tool, vpn

Cybersecurity researchers have unearthed new Android spyware artifacts that are likely affiliated with the Iranian Ministry of Intelligence and Security (MOIS) and have been distributed to targets by masquerading as VPN apps and Starlink, a satellite internet connection service offered by SpaceX.Mobile security vendor Lookout said it discovered four samples of a surveillanceware tool it…
Iranian Hackers Deploy New Android Spyware Version

Jul 21, 2025 7:40 PM

Tags: android, apt, group, hacker, iran, spyware

New samples of DCHSpy, a spyware implant linked to Iranian APT group MuddyWater, were detected by Lookout one week after the start of the Israel-Iran conflict First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/iran-hackers-new-android-spyware/
Four new Android spyware samples linked to Iran’s intel agency

Jul 21, 2025 2:41 PM

Tags: android, iran, spyware

Persians added snooping capabilities to DCHSpy after Israeli bombs fell First seen on theregister.com Jump to article: www.theregister.com/2025/07/21/muddywaters_android_iran/
Google Sues BadBox 2.0 Botnet Operators Behind 10 Million+ Infected Devices

Jul 18, 2025 3:40 PM

Tags: android, botnet, cyber, cybersecurity, google, Internet, open-source

Google has initiated legal proceedings against the operators of BadBox 2.0, identified as the largest botnet comprising internet-connected televisions and other devices. This botnet, uncovered through a collaborative effort with cybersecurity firms HUMAN Security and Trend Micro, has infected over 10 million uncertified devices running the Android Open Source Project (AOSP). Unlike certified Android systems…
Google Sues 25 Chinese Entities Over BADBOX 2.0 Botnet Affecting 10M Android Devices

Jul 18, 2025 1:40 PM

Tags: android, botnet, china, google, open-source, software

Google on Thursday revealed it’s pursuing legal action in New York federal court against 25 unnamed individuals or entities in China for allegedly operating BADBOX 2.0 botnet and residential proxy infrastructure.”The BADBOX 2.0 botnet compromised over 10 million uncertified devices running Android’s open-source software (Android Open Source Project), which lacks Google’s security protections,” First seen…