ThreatVectr
Tag

#Android

27 stories taggedAndroid.

Illustration: a modern black Android smartphone lying face up on a dark matte surface
Vulnerabilities

OnePlus phones leak text messages to any installed app, researchers warn

A flaw tracked as CVE-2025-10184 lets any app on affected OxygenOS handsets read SMS content and metadata silently, breaking one-time code security.

4 min read
A smartphone sitting in a home environment with Wi-Fi router visible nearby, connected by illustrated malicious code pathways, suggesting over-the-air exploitat
Vulnerabilities

Google Patches 180 Android Flaws, Including a Wi-Fi Bug That Needs No Tap to Exploit

September 2026's Android security update is the largest in months. One flaw lets attackers run malicious code over Wi-Fi without the phone's owner doing anything.

3 min read
An Android smartphone interface showing a hidden work profile nested within the phone's settings, with a fake banking app icon visible inside the concealed prof
Threat Intelligence

Gigabud Banking Malware Hides Inside Android Work Profiles to Dodge Security Checks

A new Gigabud variant sets up a separate Android work profile and installs a fake banking app inside it, keeping malicious activity hidden from the phone's normal security scans.

3 min read
A smartphone displaying a fake casino or gaming app store interface with fraudulent ratings and reviews, social media ads visible in the background, inside a di
Threat Intelligence

Fake Apps Are Hiding in Google Play's Beta Program to Dodge Public Reviews

Scammers are uploading sham casino and gaming apps to Google Play's Early Access program, where there are no public ratings or warnings, then buying social media ads to pull in victims.

3 min read
An Android phone screen showing locked files with a ransom demand popup, aggressive warning screens cycling with alarm-like visuals and hostile messaging design
Threat Intelligence

Mantax Otax: The Android Malware That Locks Your Files, Then Screams At You Until You Pay

Indonesian operators are pushing an unusual Android malware that combines file-locking ransomware with spyware, screen recording and jumpscare harassment tactics designed to bully victims into paying.

4 min read
A Pixel smartphone sitting on a desk with a security update notification displayed on its screen, surrounded by digital representations of modem vulnerabilities
Vulnerabilities

Google patches a Pixel phone flaw that hackers are already using

September update fixes 110 bugs in Pixel devices, including a modem weakness attackers can hit from nearby without a tap from the owner.

3 min read
A smartphone screen showing the Chrome browser interface with a warning alert overlaid, surrounded by blurred cybersecurity monitoring dashboards and threat det
Vulnerabilities

Google Patches Fifth Chrome Zero-Day of 2022 as Attacks Continue

A flaw in how Chrome handles Android deep links is being actively exploited. It's the fifth Chrome vulnerability criminals have used in the wild this year, and the patch window is tight.

3 min read
A smartphone screen displaying a fake TV streaming app advertisement from Facebook, with banking app icons visible and a trojan installation prompt in progress
Threat Intelligence

Fake TV Streaming Ads on Facebook Pushed a New Android Banking Trojan to Spanish Users

StreamRat, spread through Meta ads that reached more than half a million EU accounts, hands attackers near-total control of the phone it lands on.

4 min read
A car dashboard infotainment system screen showing an update notification and suspicious network activity, with the vehicle's interior visible around it
Threat Intelligence

New Android malware slips into cars through the dashboard's own update system

Kaspersky says the DoFun head unit malware turns infected vehicles into ad-fraud engines and proxy relays for cybercrime.

4 min read
Multiple smartphones arranged on a surface with bluetooth and wifi symbols appearing between them, showing data flowing wirelessly from one device to others, Uk
Threat Intelligence

Manic Android malware hops between infected phones to steal Ukrainian banking data

Researchers at ThreatFabric say the spyware, active since February, targets 169 apps and can relay stolen data through nearby infected devices over Wi-Fi Direct or Bluetooth when the internet is unavailable.

4 min read
A smartphone displaying an active video call on its screen, while security analysis diagrams on a laptop behind it reveal the multi-stage exploit path to kernel
Vulnerabilities

A Video Call Can Now Hand Attackers the Keys to Your Android Phone

Researchers say a two-stage exploit against Unisoc modem chips turns a VoLTE video call into full kernel access, and there's no patch.

4 min read
A smartphone screen showing banking and payment applications, with malware process chains visualized as overlay graphics and fraudulent transaction confirmation
Threat Intelligence

SpyNote and WindRelay: the Android malware combo that empties bank accounts over a single phone call

Group-IB documents a 13-minute attack chain that installs a remote-access tool, takes out a loan, then relays the victim's contactless card to a criminal at a real payment terminal.

4 min read
A mobile phone screen showing Google Chrome browser with notification popups being blocked and filtered, junk notification examples appearing and disappearing,
Threat Intelligence

Chrome Now Blocks 7 Billion Junk Notifications a Day on Android

Google's browser is quietly killing off scam pop-ups at the source, using layered checks that yank permissions from sites behaving badly.

4 min read
Network traffic visualization showing data streams disguised as normal HTTP/2 sessions, with hidden malicious packets highlighted within legitimate-looking web
Threat Intelligence

New Kimwolf v7 Botnet Disguises DDoS Attacks as Normal Web Traffic

Palo Alto Networks says the upgraded Android and smart-device botnet hides its floods inside HTTP/2 sessions that look like ordinary browsing.

3 min read
A Samsung Galaxy phone screen showing the Bixby voice assistant interface activated, with visible Samsung account login screens in the background, multiple app
Vulnerabilities

Researchers Cracked Samsung Phones Wide Open by Turning Bixby Against Its Own Device

A five-step exploit chain using Bixby, Samsung Members, and Samsung Account could hand a stranger complete control of your Galaxy phone. Patches are out, but older devices may still be exposed.

4 min read
© 2026 Threat Vectr