WindRelay: New Android NFC Relay Malware
WindRelay is a newly discovered Android malware family that turns victims' phones into NFC relays for contactless payment fraud. It works with…
Tag: Android
Fuyao Apps: Malicious Android TV Box Software
Fuyao apps are malicious applications pre-installed on Android TV boxes that spoof device identities to mimic popular phone brands, perform ad fraud,…
Google ML Kit: OCR Component in Fuyao
Google ML Kit is used by the Fuyao operation for optical character recognition to read screen content and assist in ad fraud…
Single Malicious Webpage Visit Can Compromise Tor Browser via Patched Firefox JIT Flaw
Nebula Security researchers have demonstrated that a single visit to a malicious webpage can compromise the Tor Browser by exploiting a patched…
IonStack: Browser-to-Kernel Exploit Chain for Android
IonStack is a browser-to-kernel exploit chain developed by Nebula Security, using CVE-2026-10702 for browser compromise and CVE-2026-43499 for root escalation on Android.
SpyNote RAT Used in WindRelay Attacks
SpyNote is a known remote access trojan (RAT) that provides Accessibility Service access, allowing fraudsters to silently sideload and activate the WindRelay…
Kimwolf Botnet: Evolution and Capabilities
Kimwolf is an Android and IoT botnet active since mid-2024, targeting Android TV boxes and Linux IoT devices. It conducts DDoS attacks…
MobA: Open-Source Android AI Agent Framework
An open-source Android AI agent framework that streams screenshots over exec-out, avoiding file race conditions, but still vulnerable to other attack vectors.
ADB Keyboard: Android Test Automation Tool
A test automation tool for Android that accepts text via broadcast intents. Its documented functionality is exploited by AI agents for input,…
Open-Source Android AI Agents Vulnerable to Invisible Screen Text Attacks Leading to Host Code Execution
Researchers have demonstrated that open-source Android AI agent frameworks are vulnerable to a novel attack chain where invisible screen text can lead…