#android-malware

Ransomware & Malware

TrickMo Uses TON for Android Network Pivots

Android banking trojans just got more devious. TrickMo's latest iteration weaponizes your phone into a network pivot using TON and SOCKS5.

Ransomware & Malware

TrickMo Banker Hides on TON Blockchain: A New C2 Game

Android banker TrickMo has adopted The Open Network (TON) blockchain for covert command-and-control, making it harder to detect and block. This isn't just an update; it's an architectural shift in how malware operates.

Nation-State Threats

North Korea's BirdCall Malware Hits Android Via Games

Who knew your favorite mobile game could be a gateway to North Korean surveillance? ScarCruft's latest play uses a compromised game platform to deliver an Android variant of their notorious BirdCall malware.

Ransomware & Malware

Telegram Scams Exploit Mini Apps

Think Telegram's neat little Mini Apps are all fun and games? Think again. Scammers are turning them into Trojan horses.

Explainers

[First] PromptSpy: Android Malware Hijacks Gemini AI

Imagine malware that's not just smart—it's *conversing* with AI to outsmart your phone's swipes. PromptSpy does exactly that, marking the dawn of generative AI in Android threats.