Deceptive Android apps are exploiting Google Play’s Early Access program, using fake rewards, deepfake ads and misleading listings to generate ad revenue.

A team of academic researchers has uncovered a new Android security exploit that raises a lot of questions about the platform’s permission system. The technique, named TapTrap, uses user interface ...

Pixnapping could be used to steal private data, including 2FA codes. Side-channel attack abuses Google Android APIs to steal data on display. Flaw is partially patched, although a more complete fix is ...

A WeChat worm demo took over iPhone and Android accounts through incoming calls from existing contacts; Calif says Tencent ...

Like any other computer, smartphones are prone to some nasty malware, and the latest exploit discovered in Android is equal parts ingenious and horrifying. The last thing most Android users worry ...

Caribou is an Android app that does what RFID cardkeys do with locked doors. Caribou remotely connects to a server managing the locks at a supposedly secure location, and exploits the servers’ poor ...

A security vulnerability in WhatsApp for Android allows access to private photos during an incoming video call without ...

On March 26, Symantec discovered 11 Android applications that were all made to appear like they were legitimate apps related to tracking cases in the Covid-19 pandemic, but which were in fact secretly ...

Google detailed the issue in a security advisory published Friday. The exploit actually derives from a much larger bug in the Linux kernel that Android relies on. Google has discovered malicious apps ...

Pixnapping begins when a victim unknowingly installs a malicious app on their Google or Samsung phone. A new attack method demonstrated by researchers could lead to the theft of two-factor ...