android
9 live · 11 on record · last incident 1 day ago
Live9
- liveArcticRAT ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
Breaches & attacks · Exploited · since 13 Nov 2026
The ArcticRAT Android malware campaign expanded to include full device control and AI-driven analysis of stolen financial information. The attackers leverage these capabilities to profile victim assets for targeted theft.
AI - liveAndroid GhostMap Android flaw lets malicious app trigger boot loop
Research · since 5 Nov 2026
Researchers discovered an Android vulnerability dubbed GhostMap that permits malicious applications to trap devices in an endless boot loop. The flaw can be triggered by apps requiring zero permissions following installation.
- liveAndroid CVE-2026-58868: Google Issues Patches for Critical Android Flaw
Patch now · Disclosed · Patched · since 4 Nov 2026 · CVE-2026-58868
Google disclosed a critical remote code execution vulnerability affecting Android versions 14 through 17. The issue requires no user interaction, and users must apply the November security patch level to receive the fix.
Do:Update to security patch level 2026-11-01 or later.
- liveiOS APT29 Conducts Watering Hole Campaign Against iOS and Android Users
Breaches & attacks · Exploited · since 15 Oct 2026 · updated 5 Nov 2026
APT29 used compromised websites, lookalike domains and a hijacked web analytics service to target iOS and Android users with n-day exploits. The campaign stole cookies, messages and Wi-Fi passwords from targeted mobile devices.
- liveAndroid Framework Android November 2026 Updates Patch Critical Framework Flaw
Patch now · Disclosed · Patched · since 3 Nov 2026
Google released the November 2026 security updates for Android, addressing over 200 vulnerabilities including a critical remote code execution flaw in the Framework component. The critical vulnerability can be exploited without user interaction.
Do:Update Android devices to the November 2026 security patch level.
- liveVideostrong Android TV boxes Google Disrupts 1.3 Million-Device Android Botnet Linked to TV Box Maker
Breaches & attacks · Exploited · since 30 Oct 2026 · updated 4 Nov 2026
Google successfully disrupted a 1.3 million-device Android botnet operating primarily on TV set-top boxes. Investigators attribute the botnet to device maker Videostrong, which allegedly integrated backdoors to sell unauthorized network access.
- liveXCPE malware Google disrupts XCPE botnet and bans Videostrong Technology
Breaches & attacks · Real loss · since 2 Nov 2026
Google dismantled the infrastructure of the XCPE botnet, which infected over 1.3 million Android TV set-top boxes via embedded firmware backdoors. The hardware manufacturer allegedly sold unauthorized access to criminal affiliates.
- liveXCPE backdoor XCPE botnet dismantled after infecting 1.3 million set-top boxes
Breaches & attacks · Real loss · since 25 Oct 2026 · updated 3 Nov 2026
Google and industry partners dismantled the XCPE backdoor which infected over 1.3 million set-top boxes. The OEM Videostrong Technology operated the botnet for financial gain by loading ad-fraud modules.
Do:Disconnect or replace affected compromised set-top boxes.
- liveAndroid CVE-2026-58882: Android SMS of Death Proof-of-Concept Released
Research · since 31 Oct 2026 · CVE-2026-58882
A security researcher published a proof-of-concept exploit for CVE-2026-58882, an Android vulnerability enabling remote crashes via crafted SMS messages. The flaw affects unpatched devices running vulnerable versions of the operating system.
Do:Apply the latest Android security updates.
Earlier2
- closedMicrosoft Authenticator CVE-2026-80097: Microsoft Authenticator flaw allowed permissionless Android apps to steal work tokens
Patch now · Disclosed · Patched · since 27 Oct 2026 · CVE-2026-80097
- closedTelegram uCreator Android Spyware Steals Telegram Credentials and Clones WeChat Accounts
Breaches & attacks · Exploited · since 26 Oct 2026