Major #MediaTek security flaw could expose data on millions of #Android phones

https://www.androidauthority.com/mediatek-chip-vulnerability-3648555/

AWAKE: A Guide to Android Attacks and Exploitation

I found a really awesome resource - AWAKE: Android Wiki of Attacks, Knowledge & Exploits - essentially a one-stop shop for those involved in malware analysis, reverse engineering, and vulnerability hunting on Android.

It includes descriptions of attack techniques, exploits, and methods for analyzing APKs and the platform itself. It's aimed at analysts, reverse engineers, penetration testers, and threat intelligence researchers.

In other words, it's not just abstract theory, but a very practical reference with specific details. What I particularly liked is the "offense-first" approach. Everything is presented from the attacker's perspective, not the defender's. For those of us involved in mobile security analysis, this is exactly what we need: understanding how attacks work so we can know how to defend against them. And as a reference for our own research - it's perfect!


#Android #Malware #Research #Security #Exploitation
@mobile_appsec_world

#waydroid in Linux is the best way to run Android apps on your PC, and it's not close

Running Android apps on my PC used to feel wrong, but Linux makes them feel right at home, and it's better than any Windows solution.

🔗 Source: https://www.xda-developers.com/linux-best-way-run-android-apps-on-pc-until-gaming/

#linux #android

#iphone #ios #apple #Android #propaganda #women

MicroGPlus

Easy #MicroG #installer

https://bitgapps.io/extra.html

https://t.me/MicroGPlusChat

microG is a free and open-source implementation of Google Play Services. It aims to provide a functional replacement for proprietary Google services on #Android devices. It allows users to run applications that depend on Google Play Services.

Morpheus: A new Spyware linked to IPS Intelligence |Osservatorio Nessuno

We have analyzed a sample of a previously unknown Android spyware, likely developed in Italy. It is named “Morpheus”, version 2025.3.0, and we describe its capabilities, including abusing accessibility features, automatically enabling ADB and issuing commands, disabling microphone and camera indicators, pairing additional WhatsApp devices, taking screenshots, recording audio and video, and more. We link part of the infrastructure to IPS Intelligence, and discover some potentially related companies, Rever Servicenet and Iris Telecomunicazioni.

see also :
Italian spyware maker SIO still developing and distributing Spyrtacus | Osservatorio Nessuno

#Italy #Android #Spyware #Morpheus #SIO #Spyrtacus

A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens | Project Zero

"We recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to root on Android in just two exploits.

The Dolby 0-click vulnerability existed across all of Android, until it was patched in January 2026. While we had an exploit chain for the Pixel 9, we wanted to see if it was possible to write a similar exploit chain for Pixel 10."


#Android

🔥 European Union (EU) has ordered Google to open #Android features to rival AI assistants, including the camera, microphone, screen contents, locked-screen hotwords, and background app control.

Consent still applies. For six features, Google cannot require certification.

Here's what changes, and when - https://thehackernews.com/2026/07/eu-orders-google-to-open-android-mic.html

Revealed: French Cyber spies used malware from GitHub to hack EncroChat cryptophone network | Computer Weekly

Computer Weekly reveals for the first time how French cyber spies hacked EncroChat phones, used by organised crime groups, in 2020. In the first of two major articles, we describe how a Czech spyware company rehacked the French hack and found that French malware – described as a national security secret – had been copied from popular code-sharing platform GitHub.

The secret French state hacking group that broke into tens of thousands of encrypted secure phones in Europe used an Android exploit first spotted in 2017, CW can reveal. For two years, a fatal security vulnerability, known as the Bad Binder bug, was left unpatched inside 2.5 billion phones, leaving users at maximum risk. The exploit allowed cyber spies to take complete control of infected phones and copy or change users’ data, programs and files at will.

via @androidMalware
#France #Android #EnroChat #GitHub #BudBinderBug

And in this thread they explain how goolag are violating the GPL and making it harder and slower to get the source code for android in pixels.

They say this won't happen with their Motorola graphene OS devices starting in 2027

https://grapheneos.social/@GrapheneOS/117078064184215730

#google #Android #GPL #pixel #sources #why

"Google is throwing away tens of millions of dollars of hardware revenue over a couple of years and hundreds of millions over the longer term. They simply have a lot of very incompetent people in management shooting themselves in the foot. They're also doing many anti-competitive things which are clearly illegal. Android gained the market share it did because it's an open platform and open source. Google is not actually legally allowed to pull the rug."

https://grapheneos.social/@GrapheneOS/117140280321362204

pixel11 harder to port...
don't hold your breath waiting for GOS on it..

#why #google #Motorola #android #aosp #gos #grapheneos

🍿 Google Secretly Installed a New App on Your Phone Again — Check It Now!

🔗 https://www.youtube.com/watch?v=EhDWMrAYw2g

#debloat #Android #Google #how #why

How to block it from installing

Same way as the safetycore blocker.

https://github.com/daboynb/developer-verifier-placeholder

And if you didn't have it for safetycore, it can be found here:
https://github.com/daboynb/Safetycore-placeholder

If you have any issues theres a issue tracker with some that had issues on some brands

https://github.com/daboynb/developer-verifier-placeholder/issues/1

@NoGoolag @LibreWare
#debloat #Android #Google #how #why

If you're having trouble on android 17, try this

🍿 Can't Remove Bloatware in Android 17 with ADB? Try This Instead

🔗 https://www.youtube.com/watch?v=GaJs9vuSnqc

#debloat #Android #Google #how #why #adb

#GrapheneOS:

#Android 17 QPR1 is the first release since Android Honeycomb (3.x) adding new APIs for app developers without a release to the Android Open Source Project. The new APIs are currently exclusive to the Pixel OS and aren't available to other Android OEMs. [Thread]

https://grapheneos.social/@GrapheneOS/117282080803799576

#aosp #Google #why

RatHat can keep shell access to an #Android device even after the malicious app is uninstalled.

It abuses Accessibility and local #ADB pairing to establish persistent operator access, with AI used to help navigate the device.

How it survives removal: https://thehackernews.com/2026/09/rathat-android-malware-abuses-adb-to.html


@thehackernews
#RatHat

2026 DeGoogle Mobile Telemetry Study: 72-Hour Packet Capture Dataset

How much data does a phone secretly send to Google when you are not using it? Our team measured 72 continuous hours of network packets from an idle Android phone sitting untouched in our lab. Here is our raw dataset, our test setup, and what it means for your privacy.

https://www.praveentechworld.com/research/degoogle-telemetry-2026

#Google #why #Android #gapps #stalking #tracking #location #surveillance

#Valve has open-sourced #Lepton, its tool to bring #Android games to #Steam

https://www.theverge.com/tech/997315/valve-has-open-sourced-lepton-its-tool-to-bring-android-games-to-steam

Breaking Up with #Google Play: Why #Conversations Is Now Free

https://gultsch.de/posts/breaking-up-with-google-play/

Comments

#why #android

SteamOS on Android is Finally Here
https://www.youtube.com/watch?v=fqJ-iM_fTdQ

DroidDeck is a new app that brings #SteamOS to #Android, allowing you to play PC games through #Valve's ARM64 Proton and FEX translation. Here's a look at how this app is unique among other similar solutions.

DroidDeck: https://github.com/Droid-Deck/DroidDeck
#gaming #games