Tag: Android

Google is expanding Android scam protection with AI-powered message analysis, suspicious-link checks and safeguards against unauthorized call forwarding. The features are rolling out to eligible devices, although availability varies by feature. The update targets increasingly convincing fraud attempts, including fake bank alerts, spoofed phone numbers and AI-generated voices. According to Google, its existing Phone and…

Hirudo Android malware steals financial credentials by replacing genuine banking apps with modified copies. These replacements retain most original functionality while interfering with security checks designed to protect customer accounts. Researchers identified malicious versions of eight banking apps. Beyond stealing login details, the malware lets attackers remotely control infected phones, read messages and record audio.…

Some low-cost Android smartphones have reached customers with Midnight Mimosa malware embedded in their firmware. The malicious software can silently install applications, generate fraudulent advertising activity and turn infected phones into residential proxies. Bitdefender researchers identified thousands of affected devices across more than 150 countries over roughly two years. Mexico, France, Italy, the United States,…

A security researcher has demonstrated how an Android app with no permissions can gain root access on flagship phones from several major manufacturers. The attack bypasses the operating system’s sandbox and gives the app almost complete control of the device. The vulnerabilities affect software and kernel drivers added by phone manufacturers. Therefore, the researcher says…

An Android VPN leak can expose a user’s real IP address even when VPN lockdown and “Block all connections without VPN” remain active. Researchers have identified two unpatched flaws that allow apps to send certain traffic outside the encrypted tunnel. The more recent issue abuses Wi-Fi keepalive packets and can transmit data every 10 seconds.…

Researchers have identified an Android toolkit that can make saved photos, prerecorded videos or remote video feeds appear to come from a phone’s live camera. The tool could create risks for services that rely on selfie checks and document scans to verify users. The Android KYC bypass toolkit appears designed to interfere with identity-verification processes…

Researchers have uncovered car head unit malware that infects Android-based infotainment systems through a legitimate device-update app. The campaign appears designed to turn compromised systems into proxy botnet nodes and support advertising fraud. Kaspersky attributed the activity to the MoYu group, which researchers have previously linked to the BadBox malware botnet. The company described it…

The Manic Android malware can steal sensitive data from compromised phones and send it through nearby infected devices when it cannot reach its command-and-control server directly. The threat combines banking fraud, spyware features and remote-control tools in one Android package. Researchers say Manic has operated since at least February. It targets users across several European…

Android users have reported intrusive ads appearing immediately after calls end. Researchers say deceptive utility apps on the Google Play Store drive the problem by abusing permissions that let them display content over other apps. These apps often disguise themselves as harmless alarm clocks, calendars, messaging tools or other everyday utilities. Once installed, they can…

Android scam protection is receiving new AI-focused security upgrades as Google moves to defend users against deepfake voice scams and fraudulent phone calls. The company announced new protections designed to detect suspicious behavior during calls and reduce the risk of AI-powered impersonation attacks targeting Android users. The update reflects growing concerns surrounding voice-cloning technology and…