“Before You Follow the Data, Find Where It Came From”

At a Glance Attribute Details Actor or Group Operator tracked as UNKK Activity Type Android banking malware, credential theft, remote device control Targets or Victims Retail banking customers in …

How dismissing a push notification let any zero-permission app on the device read the OTP inside it. No root, no accessibility service, no…

I built a penetration testing system in Python over three months, and this is the result. The core features of the system include CVE, OCENT subdomain enumeration, directory and file discovery …

At a Glance Attribute Details Malware Family Android Toll Fraud family (including Messenger Pro and AqMu builds) Threat Actor Unknown (unconfirmed attribution) Target Victims Android users across …

Akwaaba! everyone. Another Android app exploit writeup. Read my previous exploits Android App RCE via Dynamic Code Loading and $3000 Deep…

The September 30 patch addresses two login records that could be mistaken for each other in shared storage.

The September 30 patch addresses two login records that could be mistaken for each other in shared storage.

Most people never think their phone could be monitored until something feels off. The battery drains faster than usual. Data usage spikes…