Hirudo Tries to Replace Banking Apps With Modified APKs, ThreatFabric Warns
The new Android banking Trojan Hirudo lures users with fake updates and tries to replace their banking app with a modified version.
Tag Android
Google DeepMind and GovTech Introduce On-Device Conversation Scam Detection for Android
Google DeepMind and Singapore’s GovTech introduced a Gemma-based model designed to detect scams directly on Android devices without sending conversation content to servers.
Three Remote Attacks on Pixel 10 Succeed at Pwn2Own Ireland
Three teams at Pwn2Own Ireland successfully compromised fully updated Google Pixel 10 devices remotely. ZDI has not yet released technical details or a timeline for fixes.
Bitdefender Uncovers Midnight Mimosa Campaign with Malware in Android Device Firmware
Bitdefender described the Midnight Mimosa campaign, involving malware embedded in the firmware of some low-cost, multi-brand Android devices using the MediaTek platform.
Google Introduces AISeal Architecture for On-Device AI in Android
Google has described AISeal in greater detail, an Android architecture designed to separate sensitive context used by on-device AI features from the host system.
Google Releases Stable AndroidX Security State Libraries for Patch Checks
New stable AndroidX libraries allow applications to programmatically assess the security patch status of the system, kernel, and Project Mainline modules.
Google Fixes Pixel Modem Flaw With Signs of Targeted Exploitation
Google’s September update for supported Pixel devices addresses the CVE-2026-58704 vulnerability in the mobile modem. Google says there are signs of limited, targeted exploitation.
Anthropic: Alleged ShinyHunters Affiliates Scanned 1.8 Million Android APKs
Anthropic describes financially motivated activity by alleged ShinyHunters affiliates in which an operator downloaded, decompiled and checked 1.8 million Android applications. The target was hardcoded credentials.
Calif Demonstrates WeWorm, a Zero-Click Attack on WeChat Accounts via an Incoming Call
Researchers at Calif demonstrated the WeWorm laboratory attack, which took over a WeChat account through an incoming call without victim interaction. Tencent said it fixed the vulnerability.
GrapheneOS Releases Alpha Build 2026090700 With Fixes and Security Updates
The new GrapheneOS 2026090700 build is currently available only in the Alpha channel. It fixes Private Space, updates hardened_malloc, and includes an extensive list of security fixes.