[{"channel_id":1164747047,"post_id":2942,"date":1785731571000,"forwards":"50","views":"2.4K","comments":"1","text":"Root My Pixel: is an Android application designed to automate root access on Google Pixel 10 devices leveraging the NebuSec IonStack exploit (CVE-2026-43499) and integrating ReSukiSU \/ KernelSU<br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/github.com\/alex193a\/Root-My-Pixel\">https:\/\/github.com\/alex193a\/Root-My-Pixel<\/a>","text_length":235,"media":{"root":null,"webpage":{"url":"https:\/\/github.com\/alex193a\/Root-My-Pixel","type":"article","title":"alex193a\/Root-My-Pixel","site_name":"GitHub","display_url":"github.com\/alex193a\/Root-My-Pixel","description":"Jailbreak supported Google Pixel phones with CVE-2026-43499 - alex193a\/Root-My-Pixel"}}},{"channel_id":1164747047,"post_id":2941,"date":1785399959000,"forwards":"14","views":"4.2K","comments":"1","text":"Inside an N26 Impersonation Campaign: From Vishing and Fake Control 1.0 to the Copybara Android RAT<br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/www.d3lab.net\/inside-an-n26-impersonation-campaign-from-vishing-and-fake-control-1-0-to-the-copybara-android-rat\">https:\/\/www.d3lab.net\/inside-an-n26-impersonation-campaign-from-vishing-and-fake-control-1-0-to-the-copybara-android-rat\/<\/a>","text_length":221,"media":{"root":null,"webpage":{"url":"https:\/\/www.d3lab.net\/inside-an-n26-impersonation-campaign-from-vishing-and-fake-control-1-0-to-the-copybara-android-rat","type":"article","title":"Inside an N26 Impersonation Campaign: From Vishing and Fake Control 1.0 to the Copybara Android RAT \u2013 D3Lab","site_name":"www.d3lab.net","display_url":"d3lab.net\/inside-an-n26-impersonation-campaign-from-vishing-and-fake-control-1-0-to-the-copybara-android-rat","description":"From a fake N26 support call to the Copybara Android RAT: inside a human-operated phishing campaign designed for on-device financial fraud."}}},{"channel_id":1164747047,"post_id":2940,"date":1785333022000,"forwards":"27","views":"4.3K","comments":"7","text":"Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon<br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/hunt.io\/blog\/flying-eagle-android-rat-170-servers-night-dragon\">https:\/\/hunt.io\/blog\/flying-eagle-android-rat-170-servers-night-dragon<\/a>","text_length":175,"media":{"root":"\/002\/fAsAACehbEUAAAAA5Ebmij8m7ek","webpage":{"url":"https:\/\/hunt.io\/blog\/flying-eagle-android-rat-170-servers-night-dragon","type":"photo","title":"Flying Eagle Android RAT: Leaked Source Code, 170 Active Servers, and a New Platform Called Night Dragon","site_name":"hunt.io","display_url":"hunt.io\/blog\/flying-eagle-android-rat-170-servers-night-dragon","description":"Hunt.io and NetAskari trace a leaked Android RAT framework across 170 active servers, analyze the APK builder internals, and document a successor platform called Night Dragon targeting Chinese users.","thumbs":{"m":{"w":320,"h":320,"hash":"89A31J7X12PnImUNATkSlA&ts=1785915715"},"x":{"w":540,"h":540,"hash":"pgTM4S12NTfQVo0tukKdyg&ts=1785915715"},"i":{"bytes":"AoACg|DIKkUY5qUjNIqgk59KuxNyPFGKmGAMe9Jx7fjRYLkOKKkZcHj9KKLBceRigHGeOvelAx82RtqdJgIQNi+5x1qriKbZBNLGAxw350r7M8CkVgD0qLFXJpE2xn5z7DHWio2l3AjAANFMQ99i5IP0AqM4A60UUANNIBzzxRRSAVggHysT9RiiiikM\/9k="}}}}},{"channel_id":1164747047,"post_id":2939,"date":1784878122000,"forwards":"19","views":"6.1K","comments":"4","text":"Fake Bahrain Civil-Defense App Turns a Phone Into a Listening Post <br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/dreamgroup.com\/blog\/how-a-fake-bahrain-civil-defense-app-turns-a-phone-into-a-listening-post\">https:\/\/dreamgroup.com\/blog\/how-a-fake-bahrain-civil-defense-app-turns-a-phone-into-a-listening-post<\/a>","text_length":168,"media":{"root":"\/00d\/ewsAACehbEUAAAAAHmRy1rq11eY","webpage":{"url":"https:\/\/dreamgroup.com\/blog\/how-a-fake-bahrain-civil-defense-app-turns-a-phone-into-a-listening-post","type":"photo","title":"How a Fake Bahrain Civil-Defense App Turns a Phone Into a Listening Post  |  | Dream Security Blog","site_name":"Dreamgroup","display_url":"dreamgroup.com\/blog\/how-a-fake-bahrain-civil-defense-app-turns-a-phone-into-a-listening-post","thumbs":{"m":{"w":320,"h":184,"hash":"7f2I7MhYvSOnlsSXqHPwug&ts=1785915715"},"x":{"w":800,"h":461,"hash":"LZoUBCW50BbqNflqD77NwA&ts=1785915715"},"y":{"w":1280,"h":738,"hash":"9uZ7R649NAQQ7dD7h5SpQA&ts=1785915715"},"w":{"w":1921,"h":1108,"hash":"M0CCwz0FvMcVMQyJGl20Vg&ts=1785915715"},"i":{"bytes":"AXACg|DWopnmH+7R5h\/u0gH1HL1FL5h\/u\/rTGJbHGKAJE6UUJ0ooAXAo2iiikAYFGKKKADFFFFAH\/9k="}}}}},{"channel_id":1164747047,"post_id":2938,"date":1784127235000,"forwards":"95","views":"9.0K","comments":"1","text":"List of 140 vulnerabilities in Samsung preinstalled Android apps reported in 2022<br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/github.com\/oversecured\/Samsung_Vulnerabilities\">https:\/\/github.com\/oversecured\/Samsung_Vulnerabilities<\/a>","text_length":136,"media":{"root":"\/013\/egsAACehbEUAAAAAyJ9xaISq-sQ","webpage":{"url":"https:\/\/github.com\/oversecured\/Samsung_Vulnerabilities","type":"photo","title":"GitHub - oversecured\/Samsung_Vulnerabilities: 140 vulnerabilities in Samsung preinstalled Android apps","site_name":"GitHub","display_url":"github.com\/oversecured\/Samsung_Vulnerabilities","description":"140 vulnerabilities in Samsung preinstalled Android apps - oversecured\/Samsung_Vulnerabilities","thumbs":{"m":{"w":320,"h":160,"hash":"-legDZrfyGuedxT2ALSzKA&ts=1785915715"},"x":{"w":800,"h":400,"hash":"PyMsaIdO0uvQZBpbEwkxHg&ts=1785915715"},"y":{"w":1200,"h":600,"hash":"GseY2-DUgpRwIs8CtWWKQw&ts=1785915715"},"i":{"bytes":"AUACg|DWdyrYA\/Q00S89Dx1+U\/4VJjnrRge\/50AN81fR\/wDvg04HIzz+IxRgev60uKAIYZvNLfIVwcc0VNxRQBQ+2yei\/rS\/bJPRf1ooqRh9sk\/ur+tJ9tk\/up+RoooABeSf3U\/KiiikB\/\/Z"}}}}},{"channel_id":1164747047,"post_id":2937,"date":1784036467000,"forwards":"26","views":"7.5K","comments":"1","fwd_from":[],"text":"Reading Contact Photos Without READ_CONTACTS: A Google Messages Confused Deputy Bug<br><br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/blog.devploit.dev\/posts\/google-messages-avatarcontentprovider-contacts-bypass\/\">https:\/\/blog.devploit.dev\/posts\/google-messages-avatarcontentprovider-contacts-bypass\/<\/a>","text_length":171,"media":{"root":"\/00e\/eQsAACehbEUAAAAAUqDopu9Vvl4","webpage":{"url":"https:\/\/blog.devploit.dev\/posts\/google-messages-avatarcontentprovider-contacts-bypass","type":"photo","title":"Reading Contact Photos Without READ_CONTACTS: A Google Messages Confused Deputy Bug","site_name":"devploit \/ blog","display_url":"blog.devploit.dev\/posts\/google-messages-avatarcontentprovider-contacts-bypass","description":"What happens if an app without READ_CONTACTS asks Google Messages for Android to load a Contacts photo for it?","thumbs":{"m":{"w":320,"h":104,"hash":"XzYt26z5TstoMC8FyMIObg&ts=1785915715"},"x":{"w":800,"h":259,"hash":"k_vAhpwGcwEaXb5Qon6zcg&ts=1785915715"},"y":{"w":909,"h":294,"hash":"-2AyjM6Bs1704EIEmsNE4Q&ts=1785915715"},"i":{"bytes":"ANACg|DWxjuaUD0alIye35Ubfp+VAC0UnPqPyo5z1H5UALRRz6j8qKAP\/9k="}}}}},{"channel_id":1164747047,"post_id":2936,"date":1783949670000,"forwards":"35","views":"6.8K","comments":"3","text":"RedHook Android malware abuses ADB Wireless Debugging and Shizuku to get shell-level privileges<br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/www.group-ib.com\/blog\/redhook-android-rat-upgraded\/\">https:\/\/www.group-ib.com\/blog\/redhook-android-rat-upgraded\/<\/a>","text_length":155,"media":{"root":"\/00b\/eAsAACehbEUAAAAAQNNxPm8jjjI","webpage":{"url":"https:\/\/www.group-ib.com\/blog\/redhook-android-rat-upgraded","type":"photo","title":"RedHook Returns with a Dangerous Upgrade","site_name":"Group-IB","display_url":"group-ib.com\/blog\/redhook-android-rat-upgraded","description":"Group-IB analysts examine this resurfaced Android Remote Access Trojan, demonstrating new, sophisticated and malicious functionalities including autonomous privilege abuse, expanded command-and-control capabilities, and a robust persistence stack.","thumbs":{"m":{"w":320,"h":168,"hash":"eEwB_q_cOYm_PoMxQ2RqjQ&ts=1785915715"},"x":{"w":800,"h":420,"hash":"YkjhMfL0D8xe2EqMkTzxBQ&ts=1785915715"},"y":{"w":1280,"h":672,"hash":"GDmYKGjLeOwktLbJtFdlHg&ts=1785915715"},"w":{"w":1800,"h":945,"hash":"LBb81TQpFXM9TkNj4k9VAw&ts=1785915715"},"i":{"bytes":"AVACg|DIDADGxT+dISCegH0qRYlKg5bOOm2lMIGOW\/75oAiQbnA9TUioD2\/KnpEA4OW4\/wBmpcJFGCPm9Qy4oBK5BJEFTcCfoaKfM6tECoxnqBRT0AgD4GMUeYaKKQCiQg8UhcmiigAJ+XFFFFAH\/9k="}}}}},{"channel_id":1164747047,"post_id":2935,"date":1783836841000,"forwards":"71","views":"6.7K","comments":"2","text":"How to Bypass mTLS on Android with Frida<br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/kiratliygt.medium.com\/how-to-bypass-mtls-on-android-with-frida-45c5e71373e8\">https:\/\/kiratliygt.medium.com\/how-to-bypass-mtls-on-android-with-frida-45c5e71373e8<\/a>","text_length":124,"media":{"root":"\/00e\/dwsAACehbEUAAAAAUqDopu9Vvl4","webpage":{"url":"https:\/\/kiratliygt.medium.com\/how-to-bypass-mtls-on-android-with-frida-45c5e71373e8","type":"photo","title":"How to Bypass mTLS on Android with Frida","site_name":"Medium","display_url":"kiratliygt.medium.com\/how-to-bypass-mtls-on-android-with-frida-45c5e71373e8","description":"Keywords: mTLS bypass Android, Frida mTLS, Android mutual TLS bypass, Burp Suite mTLS Android, Android mTLS pentest, PKCS12 Android\u2026","author":"Yi\u011fit K\u0131ratl\u0131","thumbs":{"m":{"w":217,"h":320,"hash":"9XDBEJip0PSyMJOLIHBJKg&ts=1785915715"},"x":{"w":505,"h":746,"hash":"UHF3Npqo2lAaNZoTY-c1XQ&ts=1785915715"},"i":{"bytes":"AoABs|CyNNiAxvf9P8KYdNtsn94\/5j\/CrLSyhiBCSPXNHmy\/88f1pXK5WVxpduRw8h\/Ef4Uf2VB\/fk\/Mf4VP50v\/ADwP\/fVTIzFQShB9M0XFylZ2TzDlnzmkDp3Z\/wA6sEnPWlz\/ALVTyoLvuVy0f96Sp4ypQYLYpcn+9TlJ29aajYLsZxn74o4\/viiiqEHH98UuV\/vCiigZ\/9k="}}}}},{"channel_id":1164747047,"post_id":2934,"date":1783681616000,"forwards":"18","views":"6.2K","comments":"1","text":"GoldPickaxe Returns: When Your Biometric Information is as Important as Your Money <br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/zimperium.com\/blog\/goldpickaxe-returns-when-your-biometric-information-is-as-important-as-your-money\">https:\/\/zimperium.com\/blog\/goldpickaxe-returns-when-your-biometric-information-is-as-important-as-your-money<\/a>","text_length":192,"media":{"root":"\/002\/dgsAACehbEUAAAAA5Ebmij8m7ek","webpage":{"url":"https:\/\/zimperium.com\/blog\/goldpickaxe-returns-when-your-biometric-information-is-as-important-as-your-money","type":"photo","title":"GoldPickaxe Returns: When Your Biometric Information is as Important as Your Money","site_name":"Zimperium","display_url":"zimperium.com\/blog\/goldpickaxe-returns-when-your-biometric-information-is-as-important-as-your-money","description":"true","thumbs":{"m":{"w":320,"h":178,"hash":"7YSrqH_KHIfvHBhkPHhBPQ&ts=1785915715"},"x":{"w":800,"h":444,"hash":"oJ0F2ucgXiJh1ak67CLNRQ&ts=1785915715"},"y":{"w":900,"h":500,"hash":"CbQnDvfs1UdklnOou-Xudg&ts=1785915715"},"i":{"bytes":"AWACg|DPFIaVGIOQeasiUHGW59MmtrmdimRSEH0q4ZFGAW\/U0NKoAw\/bgZNIZSIIop8rbupyaKQxu40bv1oopiF38c8+lMzk80UUmNCnbjqfyooopDP\/2Q=="}}}}},{"channel_id":1164747047,"post_id":2933,"date":1783491780000,"forwards":"24","views":"6.9K","comments":"3","text":"RedWing: A Mobile Malware-as-a-Service Operation <br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/zimperium.com\/blog\/redwing-a-mobile-malware-as-a-service-operation\">https:\/\/zimperium.com\/blog\/redwing-a-mobile-malware-as-a-service-operation<\/a>","text_length":124,"media":{"root":"\/002\/dQsAACehbEUAAAAA5Ebmij8m7ek","webpage":{"url":"https:\/\/zimperium.com\/blog\/redwing-a-mobile-malware-as-a-service-operation","type":"photo","title":"RedWing: A Mobile Malware-as-a-Service Operation","site_name":"Zimperium","display_url":"zimperium.com\/blog\/redwing-a-mobile-malware-as-a-service-operation","description":"true","thumbs":{"m":{"w":320,"h":178,"hash":"pic7j1lgDE0XK6oeObCAZw&ts=1785915715"},"x":{"w":800,"h":444,"hash":"cqgL1JUwb5oz0VlFcZd4_A&ts=1785915715"},"y":{"w":900,"h":500,"hash":"p-g9CJU09x1LpdLW5MVHJQ&ts=1785915715"},"i":{"bytes":"AWACg|DKFKBQpwRVgSpxkD\/vmtCCHFLipfMj6f8AsopSyleAM\/7ooER7TRT0PHXpRQQ2VaWiikai04HsaKKYh3ygdT+VFFFAj\/\/Z"}}}}},{"channel_id":1164747047,"post_id":2932,"date":1782895075000,"forwards":"26","views":"9.2K","comments":"15","text":"Glitch SPY: New Android RAT Distributed Through a Fake Polish Rental App<br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/cyble.com\/blog\/glitch-spy-rat-distributed-via-fake-polish-app\/\">https:\/\/cyble.com\/blog\/glitch-spy-rat-distributed-via-fake-polish-app\/<\/a>","text_length":143,"media":{"root":"\/006\/dAsAACehbEUAAAAAR3fUtUy9DME","webpage":{"url":"https:\/\/cyble.com\/blog\/glitch-spy-rat-distributed-via-fake-polish-app","type":"photo","title":"Glitch SPY RAT Distributed Via Fake Polish Rental App","site_name":"Cyble","display_url":"cyble.com\/blog\/glitch-spy-rat-distributed-via-fake-polish-app","description":"CRIL analyzes Glitch SPY, an Android RAT with 70+ commands, crypto-clipping, and a silent remote browser, giving attackers full device control.","thumbs":{"m":{"w":320,"h":160,"hash":"i8t3ZYJbn_QFPbe5LoQW4Q&ts=1785915715"},"x":{"w":800,"h":400,"hash":"oJznABxiNeprELS5EcI2yg&ts=1785915715"},"y":{"w":1200,"h":600,"hash":"dj6oZGhaDydbWjcacdmvqg&ts=1785915715"},"i":{"bytes":"AUACg|DKCkhT5ROe\/PNJ5Ug\/gbj2qWN4xGA2Mjtjn+VIZUXgKre4A\/woAYqMpG5SB7irRihMWQxLkdMdKgMnmHAAUdeg\/wAKlSRwoXeQBnAzimJohZFCn1opZOM5PUduaKYFeiiipGKCQeKeCT1oooAQnNFFFMR\/\/9k="}}}}},{"channel_id":1164747047,"post_id":2931,"date":1782370773000,"forwards":"267","views":"15.4K","comments":"4","text":"Android 17 root: full chain browser-to-kernel exploit with two 0-day vulnerabilities affecting Firefox before v151.0.2 (CVE-2026-10702)<br><b>Click on the link -&gt; root Android<\/b><br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/x.com\/nebusecurity\/status\/2069707520160227688\">https:\/\/x.com\/nebusecurity\/status\/2069707520160227688<\/a>","text_length":223,"media":{"root":"\/001\/cwsAACehbEUAAAAArFLx4HnW5s4","video":{"duration":60,"w":1186,"h":1080,"is_animation":false,"is_round":false,"mime_type":"video\/mp4","size":5208986,"thumbs":{"m":{"w":320,"h":291,"hash":"2qoiCFlsabDluius1w6RlQ&ts=1785915715"},"i":{"bytes":"AkACg|DHOKdEu58ZxUlvGCNzLn05p0Zj+dgpLHI2k0DsQnqcdKSiimIKKKKALEEZjXeSRkZ9v88U\/eHkBCsBkEkDrUsMzeUqPLGP3ZwQeg9D70QyPjaZY2Cphee1SUmUG4Y0lKeppKokKKKKABWJIGaVmYHGeKKKQxKKKKYgooooA\/\/Z"}},"streamable":true,"televisor_hash":"xf3NFKMileP_V1YXvzaGJw&ts=1785915715"}}},{"channel_id":1164747047,"post_id":2930,"date":1782369545000,"forwards":"32","views":"9.2K","text":"Android Malware Disguised as Document Reader Reaches 100K Downloads on Google Play | Anatsa banker<br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/x.com\/Threatlabz\/status\/2069190345418854810\">https:\/\/x.com\/Threatlabz\/status\/2069190345418854810<\/a>","text_length":150,"media":{"root":"\/00d\/cgsAACehbEUAAAAAHmRy1rq11eY","webpage":{"url":"https:\/\/x.com\/Threatlabz\/status\/2069190345418854810","type":"article","title":"Zscaler ThreatLabz (@Threatlabz) on X","site_name":"X (formerly Twitter)","display_url":"x.com\/Threatlabz\/status\/2069190345418854810","description":"\u26a0\ufe0f ThreatLabz discovered another fake document reader in the Google Play Store with more than 100K downloads, which delivers the Anatsa Android trojan.  \n\nAnatsa installer MD5 hash: f72b1a333fa28b133df6476561142d6a\nPayload URL: http:\/\/66.206.6[.]6:8080\/disclaimer.txt\nAnatsa","thumbs":{"m":{"w":320,"h":253,"hash":"W93O4wTE4WR1ws5XfSE-UQ&ts=1785915715"},"x":{"w":800,"h":632,"hash":"de5fc7uo8RupxGRO6ACo3A&ts=1785915715"},"y":{"w":1280,"h":1011,"hash":"5qh2nUZWNTYhHhYYSr7WJg&ts=1785915715"},"w":{"w":1329,"h":1050,"hash":"Bxvdfiuo_34G67wvxnrvIw&ts=1785915715"},"i":{"bytes":"AgACg|DVDIW2+bz6ZFOC8\/eNMCxh+I+QeuKezqoyTj8KAQbD\/eb86dTPM5+6cetKrblzg0AUDJL5w5PTpu96Kv4HXAzRQm0iZRcndDNvzEA5BOTzTtnPQYp2PejB9aChoU0jnG0Yzk0\/HvTJBlk4zg+maAHj8PwopR0ooA\/\/2Q=="}}}}},{"channel_id":1164747047,"post_id":2929,"date":1782113272000,"forwards":"67","views":"9.8K","comments":"3","text":"Android reverse engineering entirely on-device. Radare2 binary analysis, 8 Java decompilers, Flutter &amp; Unity il2cpp support <br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/github.com\/UltraSina\/androidReverse\">https:\/\/github.com\/UltraSina\/androidReverse<\/a>","text_length":168,"media":{"root":null,"webpage":{"url":"https:\/\/github.com\/UltraSina\/androidReverse","type":"article","title":"GitHub - UltraSina\/androidReverse: A high-performance, mobile-centric decompiler and reverse engineering suite for Android.","site_name":"GitHub","display_url":"github.com\/UltraSina\/androidReverse","description":"A high-performance, mobile-centric decompiler and reverse engineering suite for Android. - UltraSina\/androidReverse"}}},{"channel_id":1164747047,"post_id":2928,"date":1781680599000,"forwards":"43","views":"10.0K","comments":"2","text":"[slides] OffensiveCon 2026: Tile-Based Deferred Rooting: When Your GPU Starts Rendering To Kernel Code Space! (CVE-2025-25180)<br><a target=\"_blank\" rel=\"noreferrer nofollow\" href=\"https:\/\/androidoffsec.withgoogle.com\/slides\/art_imagination_gpu_offensivecon_2026.pdf\">https:\/\/androidoffsec.withgoogle.com\/slides\/art_imagination_gpu_offensivecon_2026.pdf<\/a>","text_length":212,"media":{"root":null,"document":{"file_name":"art_imagination_gpu_offensivecon_2026.pdf","mime_type":"application\/pdf","size":13551863}}}]