An unprivileged Android app can leak the user's real IP past Always-On VPN + lockdown by handing system_server a UDP payload to fire on its behalf.

Cleafy's TIR team identified and analyzed two previously undocumented Android NFC relay malware families, DevilNFC and NFCMultiPay, actively targeting European and LATAM banking customers.

I pointed an autonomous coding agent at a $35 projector. It found a big RAT.

true

Flipper OneBigger. More powerful. Way more capable.Flipper One is...

Cyble analyzes OverlayPhantom, an Android banking trojan targeting 180+ apps across 10 countries, stealing credentials via fake overlays and real-time screen streaming.

The BTMOB malware pairs remote access capabilities with ready-made campaign tools, lowering the barrier for full device compromise.

Intent Runtime Inspection System. Contribute to Ch0pin/iris development by creating an account on GitHub.

Demystifying phone unlocking tools: A technical overview

Hello folks,

During Flutter mobile application assessments, reFlutter is often the fastest option for bypassing TLS/SSL verification and redirecting…

📲 🔓 Bypassing SSL Pinning on Play Store Android Device Emulators without Frida

Abusing an unauthenticated Bluetooth protocol to turn a PC speaker into a Rubber Ducky.

A new NFCShare Android malware campaign distributed through an Intesa Sanpaolo-themed phishing flow, short URLs, and GitHub-hosted APKs. The recent samples keep the same NFC card-theft logic but introduce stronger anti-analysis packaging, brand rotation,…

A hands-on walkthrough of security testing an ISO 8583 payment socket — from reversing the app and enabling hidden debug mode, to finding four critical vulnerabilities in the processor layer

poc it like it's hot. Contribute to v12-security/pocs development by creating an account on GitHub.