The Hacker News

🚨 28 fraudulent apps on the Google Play Store racked up over 7.3 million downloads before removal. They promised call, SMS, and #WhatsApp histories for any phone number — but delivered only fake data after users paid up to $80. The CallPhantom scam mainly hit #Android users in India and Asia-Pacific. Full read → https://thehackernews.com/2026/05/fake-call-history-apps-stole-payments.html

🚨 A Mirai-based botnet dubbed xlabs_v1 is exploiting exposed #Android Debug Bridge (ADB) services on port 5555 to hijack IoT devices. It enables 21 DDoS attack methods and uses bandwidth profiling to tier attacks, targeting game servers. Read: https://thehackernews.com/2026/05/mirai-based-xlabsv1-botnet-exploits-adb.html

🛑 ALERT - A flaw in EngageLab’s #Android SDK exposed 30M+ crypto wallet installs to potential data access. The intent redirection bug allowed sandbox bypass via a malicious app on the same device. No active exploitation found. 🔗Read → https://thehackernews.com/2026/04/engagelab-sdk-flaw-exposed-50m-android.html

⚡ Google adding a 24-hour delay for installing #Android apps from unverified developers. Users must enable developer mode, reboot, and confirm again after a day. This is meant to stop #malware and scams that trick users into disabling Play Protect or giving access. 🔗 Details here → https://thehackernews.com/2026/03/google-adds-24-hour-wait-for-unverified.html

⚡ 25,000 U.S. businesses already use macOS, and the number keeps growing. Yet macOS threats are still flying under the radar for most security teams. Attackers know this. 👀 And they're quietly adding more cross-platform threats to take advantage of it, targeting sensitive data. That's exactly why #ANYRUN just levelled up. The sandbox now supports #macOS alongside #Windows, #Linux, and #Android — one unified place, full visibility, faster verdicts. 👉 Close the gap before it becomes a costly one: https://thn.news/mac-threat-analysis

🛑 Perseus, a new #Android malware, enables full device takeover via Accessibility abuse. It runs live remote sessions, steals banking credentials, and scans notes apps for sensitive data. It spreads through IPTV-style apps delivered via phishing and sideloading. 🔗 Read → https://thehackernews.com/2026/03/new-perseus-android-banking-malware.html