#mobilethreats — Public Fediverse posts

New objective added: block sideloading on corporate devices, treat any accessibility service grant as a red-alert privileged access event, and monitor for wireless debugging activation through your MDM before ToxicPanda completes its fetch quest through your accounts.

Reward: You've received a Hollow Bank Chest. It is empty. ToxicPanda got here first.

#AndroidMalware #BankingTrojan #ToxicPanda #CyberSecurity #MobileThreats #LevelUpThreat (3/3)

New objective added: block sideloading on corporate devices, treat any accessibility service grant as a red-alert privileged access event, and monitor for wireless debugging activation through your MDM before ToxicPanda completes its fetch quest through your accounts.

Reward: You've received a Hollow Bank Chest. It is empty. ToxicPanda got here first.

#AndroidMalware #BankingTrojan #ToxicPanda #CyberSecurity #MobileThreats #LevelUpThreat (3/3)

New objective added: block sideloading on corporate devices, treat any accessibility service grant as a red-alert privileged access event, and monitor for wireless debugging activation through your MDM before ToxicPanda completes its fetch quest through your accounts.

Reward: You've received a Hollow Bank Chest. It is empty. ToxicPanda got here first.

#AndroidMalware #BankingTrojan #ToxicPanda #CyberSecurity #MobileThreats #LevelUpThreat (3/3)

TrickMo Trojan Adopts TON Blockchain for Evasive C2 Routing

A new variant of the TrickMo Trojan, tracked as TrickMo C, has emerged, cleverly using The Open Network (TON) blockchain to disguise its command-and-control traffic, making it even harder to detect. This sneaky malware targets banking and wallet users in France, Italy, and Austria through convincing TikTok-themed lures on Facebook…

https://osintsights.com/trickmo-trojan-adopts-ton-blockchain-for-evasive-c2-routing?utm_source=mastodon&utm_medium=social

#TrickmoTrojan #TonBlockchain #AndroidMalware #MobileThreats #EvasiveC2Routing

Your iPhone can be hacked in minutes and DarkSword shows how easy it is

https://web.brid.gy/r/https://nerds.xyz/2026/03/darksword-ios-exploit/

Your iPhone can be hacked in minutes and DarkSword shows how easy it is

https://fed.brid.gy/r/https://nerds.xyz/2026/03/darksword-ios-exploit/

Your iPhone can be hacked in minutes and DarkSword shows how easy it is

https://web.brid.gy/r/https://nerds.xyz/2026/03/darksword-ios-exploit/

Your iPhone can be hacked in minutes and DarkSword shows how easy it is

https://fed.brid.gy/r/https://nerds.xyz/2026/03/darksword-ios-exploit/

Your iPhone can be hacked in minutes and DarkSword shows how easy it is

https://web.brid.gy/r/https://nerds.xyz/2026/03/darksword-ios-exploit/

RedAlert Trojan spreads via SMS spoofing in Israel.
Fake emergency APK harvests GPS, contacts & SMS.
Uses proxy hooks & reflection to evade Android checks.
Enforce MDM. Block sideloading.
Full report:
https://www.technadu.com/redalert-trojan-campaign-disseminates-fake-emergency-app-targeting-israel-via-sms-spoofing-steals-contacts-gps-data/622048/

#InfoSec #AndroidSecurity #MobileThreats

RedAlert Trojan spreads via SMS spoofing in Israel.
Fake emergency APK harvests GPS, contacts & SMS.
Uses proxy hooks & reflection to evade Android checks.
Enforce MDM. Block sideloading.
Full report:
https://www.technadu.com/redalert-trojan-campaign-disseminates-fake-emergency-app-targeting-israel-via-sms-spoofing-steals-contacts-gps-data/622048/

#InfoSec #AndroidSecurity #MobileThreats

RedAlert Trojan spreads via SMS spoofing in Israel.
Fake emergency APK harvests GPS, contacts & SMS.
Uses proxy hooks & reflection to evade Android checks.
Enforce MDM. Block sideloading.
Full report:
https://www.technadu.com/redalert-trojan-campaign-disseminates-fake-emergency-app-targeting-israel-via-sms-spoofing-steals-contacts-gps-data/622048/

#InfoSec #AndroidSecurity #MobileThreats

RedAlert Trojan spreads via SMS spoofing in Israel.
Fake emergency APK harvests GPS, contacts & SMS.
Uses proxy hooks & reflection to evade Android checks.
Enforce MDM. Block sideloading.
Full report:
https://www.technadu.com/redalert-trojan-campaign-disseminates-fake-emergency-app-targeting-israel-via-sms-spoofing-steals-contacts-gps-data/622048/

#InfoSec #AndroidSecurity #MobileThreats

RedAlert Trojan spreads via SMS spoofing in Israel.
Fake emergency APK harvests GPS, contacts & SMS.
Uses proxy hooks & reflection to evade Android checks.
Enforce MDM. Block sideloading.
Full report:
https://www.technadu.com/redalert-trojan-campaign-disseminates-fake-emergency-app-targeting-israel-via-sms-spoofing-steals-contacts-gps-data/622048/

#InfoSec #AndroidSecurity #MobileThreats

📣⚠️ New Q4 2025 malware report reveals a rise in Android banking trojans, resurgence of Joker malware on Google Play, and widespread use of backdoored apps.

Read: https://hackread.com/q4-2025-malware-telegram-backdoor-joker-google-play/

#CyberSecurity #Android #Malware #MobileThreats #Trojan

📣⚠️ New Q4 2025 malware report reveals a rise in Android banking trojans, resurgence of Joker malware on Google Play, and widespread use of backdoored apps.

Read: https://hackread.com/q4-2025-malware-telegram-backdoor-joker-google-play/

#CyberSecurity #Android #Malware #MobileThreats #Trojan

📣⚠️ New Q4 2025 malware report reveals a rise in Android banking trojans, resurgence of Joker malware on Google Play, and widespread use of backdoored apps.

Read: https://hackread.com/q4-2025-malware-telegram-backdoor-joker-google-play/

#CyberSecurity #Android #Malware #MobileThreats #Trojan

📣⚠️ New Q4 2025 malware report reveals a rise in Android banking trojans, resurgence of Joker malware on Google Play, and widespread use of backdoored apps.

Read: https://hackread.com/q4-2025-malware-telegram-backdoor-joker-google-play/

#CyberSecurity #Android #Malware #MobileThreats #Trojan

📣⚠️ New Q4 2025 malware report reveals a rise in Android banking trojans, resurgence of Joker malware on Google Play, and widespread use of backdoored apps.

Read: https://hackread.com/q4-2025-malware-telegram-backdoor-joker-google-play/

#CyberSecurity #Android #Malware #MobileThreats #Trojan

CISA has added two Android Framework 0-days (CVE-2025-48572 & CVE-2025-48633) to the KEV list, confirming active exploitation.

Together, they enable privilege escalation and information disclosure, forming a potentially complete compromise path for targeted devices.

Federal agencies have a December 23 patch deadline, and wider organizations are encouraged to roll out updates and monitor for related indicators.

💬 Mobile ecosystems remain a critical attack surface - what best practices have worked for your teams?

Source: https://cybersecuritynews.com/android-0-day-vulnerability-exploited/

Follow us for ongoing vulnerability and threat intelligence updates.

#Cybersecurity #AndroidSecurity #KEV #CISA #ZeroDay #MobileThreats #ThreatIntel #Infosec #SecurityUpdates #DeviceSecurity

CISA has added two Android Framework 0-days (CVE-2025-48572 & CVE-2025-48633) to the KEV list, confirming active exploitation.

Together, they enable privilege escalation and information disclosure, forming a potentially complete compromise path for targeted devices.

Federal agencies have a December 23 patch deadline, and wider organizations are encouraged to roll out updates and monitor for related indicators.

💬 Mobile ecosystems remain a critical attack surface - what best practices have worked for your teams?

Source: https://cybersecuritynews.com/android-0-day-vulnerability-exploited/

Follow us for ongoing vulnerability and threat intelligence updates.

#Cybersecurity #AndroidSecurity #KEV #CISA #ZeroDay #MobileThreats #ThreatIntel #Infosec #SecurityUpdates #DeviceSecurity

CISA has added two Android Framework 0-days (CVE-2025-48572 & CVE-2025-48633) to the KEV list, confirming active exploitation.

Together, they enable privilege escalation and information disclosure, forming a potentially complete compromise path for targeted devices.

Federal agencies have a December 23 patch deadline, and wider organizations are encouraged to roll out updates and monitor for related indicators.

💬 Mobile ecosystems remain a critical attack surface - what best practices have worked for your teams?

Source: https://cybersecuritynews.com/android-0-day-vulnerability-exploited/

Follow us for ongoing vulnerability and threat intelligence updates.

#Cybersecurity #AndroidSecurity #KEV #CISA #ZeroDay #MobileThreats #ThreatIntel #Infosec #SecurityUpdates #DeviceSecurity

A single WhatsApp message sent a disguised image that unlocked a zero-day vulnerability in Samsung devices, letting attackers install a covert surveillance kit. How safe is your smartphone when a simple image can change everything?

https://thedefendopsdiaries.com/landfall-spyware-exploiting-a-samsung-zero-day-via-whatsapp/

#landfallspyware
#samsungzeroday
#whatsappsecurity
#mobilethreats
#androidvulnerabilities

A single WhatsApp message sent a disguised image that unlocked a zero-day vulnerability in Samsung devices, letting attackers install a covert surveillance kit. How safe is your smartphone when a simple image can change everything?

https://thedefendopsdiaries.com/landfall-spyware-exploiting-a-samsung-zero-day-via-whatsapp/

#landfallspyware
#samsungzeroday
#whatsappsecurity
#mobilethreats
#androidvulnerabilities

A single WhatsApp message sent a disguised image that unlocked a zero-day vulnerability in Samsung devices, letting attackers install a covert surveillance kit. How safe is your smartphone when a simple image can change everything?

https://thedefendopsdiaries.com/landfall-spyware-exploiting-a-samsung-zero-day-via-whatsapp/

#landfallspyware
#samsungzeroday
#whatsappsecurity
#mobilethreats
#androidvulnerabilities

A single WhatsApp message sent a disguised image that unlocked a zero-day vulnerability in Samsung devices, letting attackers install a covert surveillance kit. How safe is your smartphone when a simple image can change everything?

https://thedefendopsdiaries.com/landfall-spyware-exploiting-a-samsung-zero-day-via-whatsapp/

#landfallspyware
#samsungzeroday
#whatsappsecurity
#mobilethreats
#androidvulnerabilities

Your smartphone might soon be acting on its own. Herodotus Android malware is learning your every tap to outsmart security. How safe is your mobile life?

https://thedefendopsdiaries.com/herodotus-android-malware-the-next-evolution-in-cyber-deception/

#androidmalware
#cyberdeception
#mobilethreats
#aiincybersecurity
#malwareevasion

Your smartphone might soon be acting on its own. Herodotus Android malware is learning your every tap to outsmart security. How safe is your mobile life?

https://thedefendopsdiaries.com/herodotus-android-malware-the-next-evolution-in-cyber-deception/

#androidmalware
#cyberdeception
#mobilethreats
#aiincybersecurity
#malwareevasion

Your smartphone might soon be acting on its own. Herodotus Android malware is learning your every tap to outsmart security. How safe is your mobile life?

https://thedefendopsdiaries.com/herodotus-android-malware-the-next-evolution-in-cyber-deception/

#androidmalware
#cyberdeception
#mobilethreats
#aiincybersecurity
#malwareevasion

Your smartphone might soon be acting on its own. Herodotus Android malware is learning your every tap to outsmart security. How safe is your mobile life?

https://thedefendopsdiaries.com/herodotus-android-malware-the-next-evolution-in-cyber-deception/

#androidmalware
#cyberdeception
#mobilethreats
#aiincybersecurity
#malwareevasion

Android spyware ClayRat uses Telegram & fake WhatsApp/TikTok/YouTube sites to spread.
Abuses SMS handler to steal data & self-propagate via contacts.

Full breakdown: https://www.technadu.com/clayrat-spyware-campaign-targets-android-users-via-telegram-and-fake-whatsapp-tiktok-youtube-sites/611123/

#AndroidSecurity #Spyware #ClayRat #MobileThreats

Android spyware ClayRat uses Telegram & fake WhatsApp/TikTok/YouTube sites to spread.
Abuses SMS handler to steal data & self-propagate via contacts.

Full breakdown: https://www.technadu.com/clayrat-spyware-campaign-targets-android-users-via-telegram-and-fake-whatsapp-tiktok-youtube-sites/611123/

#AndroidSecurity #Spyware #ClayRat #MobileThreats

Android spyware ClayRat uses Telegram & fake WhatsApp/TikTok/YouTube sites to spread.
Abuses SMS handler to steal data & self-propagate via contacts.

Full breakdown: https://www.technadu.com/clayrat-spyware-campaign-targets-android-users-via-telegram-and-fake-whatsapp-tiktok-youtube-sites/611123/

#AndroidSecurity #Spyware #ClayRat #MobileThreats

Imagine your phone being hijacked like a remote desktop—Klopatra malware uses VNC to let hackers control your Android in real time. Could your device be next?

https://thedefendopsdiaries.com/klopatra-the-vnc-enabled-android-malware-redefining-mobile-threats/

#androidmalware
#klopatra
#vncsecurity
#mobilethreats
#cybersecurity2025

Imagine your phone being hijacked like a remote desktop—Klopatra malware uses VNC to let hackers control your Android in real time. Could your device be next?

https://thedefendopsdiaries.com/klopatra-the-vnc-enabled-android-malware-redefining-mobile-threats/

#androidmalware
#klopatra
#vncsecurity
#mobilethreats
#cybersecurity2025

Imagine your phone being hijacked like a remote desktop—Klopatra malware uses VNC to let hackers control your Android in real time. Could your device be next?

https://thedefendopsdiaries.com/klopatra-the-vnc-enabled-android-malware-redefining-mobile-threats/

#androidmalware
#klopatra
#vncsecurity
#mobilethreats
#cybersecurity2025

⚠️ Android malware shift → droppers now push spyware & SMS stealers, not just banking trojans.
- Fake apps (gov’t + banking) are spreading in India & Asia.
- Droppers bypass Play Protect until the user clicks Update.
- Also: Facebook Ads abused to spread fake TradingView apps with/ Brokewell trojan in the EU.

💬 Are app store protections keeping up, or is this still user-error driven?
Follow @technadu for mobile threat intel.

#AndroidMalware #CyberSecurity #Spyware #MobileThreats

⚠️ Android malware shift → droppers now push spyware & SMS stealers, not just banking trojans.
- Fake apps (gov’t + banking) are spreading in India & Asia.
- Droppers bypass Play Protect until the user clicks Update.
- Also: Facebook Ads abused to spread fake TradingView apps with/ Brokewell trojan in the EU.

💬 Are app store protections keeping up, or is this still user-error driven?
Follow @technadu for mobile threat intel.

#AndroidMalware #CyberSecurity #Spyware #MobileThreats

IT threat evolution in Q1 2025. Mobile statistics – Source: securelist.com https://ciso2ciso.com/it-threat-evolution-in-q1-2025-mobile-statistics-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #CyberSecurityNews #MalwareStatistics #Malwarereports #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #TrojanBanker #TrojanSpy #Malware #Mamont #Triada #Trojan

IT threat evolution in Q1 2025. Mobile statistics – Source: securelist.com https://ciso2ciso.com/it-threat-evolution-in-q1-2025-mobile-statistics-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #CyberSecurityNews #MalwareStatistics #Malwarereports #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #TrojanBanker #TrojanSpy #Malware #Mamont #Triada #Trojan

IT threat evolution in Q1 2025. Mobile statistics – Source: securelist.com https://ciso2ciso.com/it-threat-evolution-in-q1-2025-mobile-statistics-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #CyberSecurityNews #MalwareStatistics #Malwarereports #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #TrojanBanker #TrojanSpy #Malware #Mamont #Triada #Trojan

IT threat evolution in Q1 2025. Mobile statistics – Source: securelist.com https://ciso2ciso.com/it-threat-evolution-in-q1-2025-mobile-statistics-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #CyberSecurityNews #MalwareStatistics #Malwarereports #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #TrojanBanker #TrojanSpy #Malware #Mamont #Triada #Trojan

🚨 Researchers found unvetted #iOS app, especially sideloaded or from 3rd-party stores, exploiting permissions to steal data with tools like TrollStore and MacDirtyCow adding even more risk.

Read: https://hackread.com/40000-ios-apps-found-exploiting-private-entitlements/

#CyberSecurity #MobileThreats #Security #Zimperium

🚨 Researchers found unvetted #iOS app, especially sideloaded or from 3rd-party stores, exploiting permissions to steal data with tools like TrollStore and MacDirtyCow adding even more risk.

Read: https://hackread.com/40000-ios-apps-found-exploiting-private-entitlements/

#CyberSecurity #MobileThreats #Security #Zimperium

🚨 Researchers found unvetted #iOS app, especially sideloaded or from 3rd-party stores, exploiting permissions to steal data with tools like TrollStore and MacDirtyCow adding even more risk.

Read: https://hackread.com/40000-ios-apps-found-exploiting-private-entitlements/

#CyberSecurity #MobileThreats #Security #Zimperium

🚨 Researchers found unvetted #iOS app, especially sideloaded or from 3rd-party stores, exploiting permissions to steal data with tools like TrollStore and MacDirtyCow adding even more risk.

Read: https://hackread.com/40000-ios-apps-found-exploiting-private-entitlements/

#CyberSecurity #MobileThreats #Security #Zimperium

🚨 Researchers found unvetted #iOS app, especially sideloaded or from 3rd-party stores, exploiting permissions to steal data with tools like TrollStore and MacDirtyCow adding even more risk.

Read: https://hackread.com/40000-ios-apps-found-exploiting-private-entitlements/

#CyberSecurity #MobileThreats #Security #Zimperium

Triada strikes back – Source: securelist.com https://ciso2ciso.com/triada-strikes-back-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #InstantMessengers #Cryptocurrencies #Financialthreats #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #backdoor #Facebook #Telegram #WhatsApp #Dropper #Malware #Trojan #Skype

Triada strikes back – Source: securelist.com https://ciso2ciso.com/triada-strikes-back-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #InstantMessengers #Cryptocurrencies #Financialthreats #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #backdoor #Facebook #Telegram #WhatsApp #Dropper #Malware #Trojan #Skype

Triada strikes back – Source: securelist.com https://ciso2ciso.com/triada-strikes-back-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #InstantMessengers #Cryptocurrencies #Financialthreats #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #backdoor #Facebook #Telegram #WhatsApp #Dropper #Malware #Trojan #Skype

Triada strikes back – Source: securelist.com https://ciso2ciso.com/triada-strikes-back-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #InstantMessengers #Cryptocurrencies #Financialthreats #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #backdoor #Facebook #Telegram #WhatsApp #Dropper #Malware #Trojan #Skype

Your phone might be your biggest target. Cybercriminals are firing off fake “urgent” texts to steal your info, and these scams are spreading worldwide. Are you ready to spot the red flags?

https://thedefendopsdiaries.com/the-growing-threat-of-sms-phishing-scams/

#smsphishing
#cybersecurity
#smishing
#mobilethreats
#phishingprotection

Your phone might be your biggest target. Cybercriminals are firing off fake “urgent” texts to steal your info, and these scams are spreading worldwide. Are you ready to spot the red flags?

https://thedefendopsdiaries.com/the-growing-threat-of-sms-phishing-scams/

#smsphishing
#cybersecurity
#smishing
#mobilethreats
#phishingprotection

Lucid: A New Era in Phishing Threats

https://thedefendopsdiaries.com/lucid-a-new-era-in-phishing-threats/

#phishing
#cybersecurity
#lucidplatform
#phishingasaservice
#mobilethreats

Lucid: A New Era in Phishing Threats

https://thedefendopsdiaries.com/lucid-a-new-era-in-phishing-threats/

#phishing
#cybersecurity
#lucidplatform
#phishingasaservice
#mobilethreats

Understanding the Threat: How .NET MAUI is Changing Android Malware

https://thedefendopsdiaries.com/understanding-the-threat-how-net-maui-is-changing-android-malware/

#dotnetmaui
#androidmalware
#cybersecurity
#mobilethreats
#malwaredetection

Understanding the Threat: How .NET MAUI is Changing Android Malware

https://thedefendopsdiaries.com/understanding-the-threat-how-net-maui-is-changing-android-malware/

#dotnetmaui
#androidmalware
#cybersecurity
#mobilethreats
#malwaredetection

Mobile malware evolution in 2024 – Source: securelist.com https://ciso2ciso.com/mobile-malware-evolution-in-2024-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #CyberSecurityNews #MalwareStatistics #Malwarereports #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #TrojanBanker #SparkCat #Malware #adware #Mamont #Trojan

Mobile malware evolution in 2024 – Source: securelist.com https://ciso2ciso.com/mobile-malware-evolution-in-2024-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #CyberSecurityNews #MalwareStatistics #Malwarereports #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #TrojanBanker #SparkCat #Malware #adware #Mamont #Trojan

Mobile malware evolution in 2024 – Source: securelist.com https://ciso2ciso.com/mobile-malware-evolution-in-2024-source-securelist-com/ #rssfeedpostgeneratorecho #MalwareDescriptions #CyberSecurityNews #MalwareStatistics #Malwarereports #GoogleAndroid #MobileMalware #Mobilethreats #securelistcom #TrojanBanker #SparkCat #Malware #adware #Mamont #Trojan