Hirudo Android trojan swaps real banking apps for patched copies
ThreatFabric details Hirudo, an Android banker that uninstalls the real banking app and reinstalls a patched copy with a hooking engine to steal PINs, SMS, and screen data.
Stories tagged: #android
Midnight Mimosa: preinstalled malware on cheap Android phones, 150+ countries
Bitdefender found firmware-level malware preinstalled on low-cost MediaTek Android phones across 150+ countries. It runs ad fraud and can enrol devices as proxy relays. Removal needs a firmware fix.
Android Framework zero-day CVE-2025-48595 added to CISA KEV
Google's June 2026 Android Security Bulletin fixes 124 flaws, including a Framework integer overflow under limited, targeted exploitation. CISA wants federal agencies patched by 5 June.