November 11, 2026
CyberWorldOps Cyber Security · Threat Intelligence · CVE
Newsletter
Latest
Follow the story

Android

Android security: mobile malware, device compromises and platform vulnerabilities. Follow attack methods, affected devices and protection guidance.

Latest report:

23articles
6Reports in the past 30 days
16CVEs covered

Matching reports 23

  1. Malware

    GoldFactory Clones Android Banking Apps to Evade Fraud Controls in Indonesia

    GoldFactory uses Gigabud and Vwork to clone Indonesian banking apps inside Android Work Profiles, evading fraud controls and causing $1M losses.

  2. Malware

    Deceptive Android Apps Exploit Google Play Early Access to Hide User Warnings

    Thousands of deceptive Android applications are abusing Google Play’s Early Access program to attract installs without exposing users to public reviews or

  3. Malware

    Mantax Otax Android Malware Encrypts Files, Spies on Victims, and Weaponizes Harassment

    Mantax Otax Android malware encrypts files on Android 9 or older, steals SMS, screen data, and harasses victims. Distributed via APKs outside Google Play.

  4. Vulnerabilities

    WeChat Zero-Click Worm Hijacked Accounts Through Incoming Calls

    A zero-click WeChat flaw let contacts hijack accounts via incoming calls and spread as a worm. Fixed in August updates with server-side blocking.

  5. Malware

    StreamRat, the Android Trojan Spread Through Fake Streaming Ads on Meta

    StreamRat is an Android trojan spread via fake streaming ads on Meta targeting Spain, using a dropper APK and Accessibility abuse for remote control.

  6. Malware

    ToxicPanda 2.0 Abuses VPN to Block Google Play and Control Android Smartphones

    Discover how ToxicPanda 2.0 malware exploits VPN permissions to block Google Play, steal banking credentials, and take control of Android smartphones.

  7. Malware

    Manic: The Android Malware Creating a Mesh Network to Steal Data Offline

    Discover how Manic Android malware uses accessibility services and a store-and-forward mechanism to steal data offline via device-to-device mesh networks.

  8. Malware

    Malware in Android Car Head Units: Updates Become a Channel for Ad Fraud and Proxy Botnets

    Malware exploits Android car head unit updates for ad fraud and proxy botnets, turning vehicles into compromised network nodes.

  9. Vulnerabilities

    Unisoc Modems: A VoLTE Attack Chain Can Reach the Android Kernel

    Discover how a Unisoc modem vulnerability allows attackers to gain Android kernel access through a VoLTE video call. Affects chipsets like T606, T612, T7250.

    CVE-2022-20210CVE-2026-11645CVE-2025-48595
  10. Malware

    SpyNote and WindRelay: the Android Attack Combining Fraudulent Loans and NFC Relay

    Discover how Android users are targeted by SpyNote and WindRelay malware in a scam combining fraudulent loans and NFC relay for contactless fraud.

  11. Malware

    Operation Fuyao: Cheap Android TV Boxes Hid an Army of Ad Fraud and SOCKS5 Proxies

    Bitsight uncovers Operation Fuyao, a malware campaign turning cheap Android TV boxes into ad fraud nodes and SOCKS5 proxies, linked to Zhejiang Fengwo.

How this coverage is selected

Articles are selected by explicit entity names or reviewed aliases in their original headlines, within the last 365 days. This is a chronology of our reporting, not a complete incident history. Separate stories do not imply a shared attack campaign. Read each article for its sources, affected versions and uncertainties.