How does defend.network track Mobile Malware?

defend.network publishes a daily threat briefing synthesized from ten authoritative security feeds, with every CVE verified against the NVD and CISA KEV catalog. Briefings tagged Mobile Malware are aggregated on this page and updated daily; 7 currently cover Mobile Malware.

Mobile Malware Threat Intelligence

Mobile malware targets smartphones and tablets through malicious apps, fake app stores, and SMS-based attack vectors. Banking trojans, spyware, and adware campaigns increasingly target both Android and iOS platforms. defend.network tracks mobile threats that pose risks to enterprise environments through BYOD policies and mobile device management gaps.

briefings

critical

high

of all briefings

Threat Briefings

2026-09-18

Microsoft patches 974 CVEs; Check Point RCE; Docker Sandboxes escape on macOS

Microsoft released 974 patches in its largest single batch; Check Point Security Management servers vulnerable to unauthenticated RCE; Docker Sandboxes can be escaped on macOS.

high Vulnerability Exploit Supply Chain Mobile Malware Technology

2026-09-11

Android malware surge; AI-powered PaperCut campaign hits 395+ orgs

Mantax Otax and Gigabud banking trojans spread across Android, Russian-speaking actors deployed hundreds of AI agents to exploit PaperCut flaws on 395 organizations

critical Mobile Malware Vulnerability Exploit Credential Theft Technology Finance

2026-08-24

Microsoft patches 398 flaws; Zimbra exploitation deadline looms; Android cars compromised

Microsoft released 398 security patches including one actively exploited flaw; Zimbra command injection (CVE-2026-73570) in CISA KEV with Aug 24 federal deadline; Android vehicle head units infected via supply-chain attack distributing proxy botnet malware.

high Vulnerability Exploit Supply Chain Mobile Malware Technology Transportation Finance

2026-08-23

Android vehicles, AWS keys, Snowflake extortionist: Active threats escalate

Android car head units infected via malware-laden firmware updates; 9,300+ AWS keys remain active; Snowflake extortionist pleads guilty after compromising 165+ organizations.

high Mobile Malware Credential Theft Supply Chain Transportation Technology Finance

2026-07-08

GitHub, Gitea, Google Dialogflow hit by active exploits; RedWing Android malware-as-service

GitHub Agentic Workflows leak private repo data via public issues; Gitea CVE-2026-20896 authentication bypass actively exploited; RedWing Android malware rented as fraud service on Telegram.

high Vulnerability Exploit Mobile Malware Technology Finance

2026-06-17

Fortinet actively exploited; Rokarolla targets 217 banking apps; Google Vertex AI flaw

Fortinet FortiSandbox faces active in-the-wild exploitation of three CVEs. Android banking trojan Rokarolla targets 217 financial apps with 137 remote commands. Google Vertex AI SDK bucket-squatting flaw enables unauthorized model hijacking.

high Vulnerability Exploit Mobile Malware Finance Technology

2026-06-04

Google Gemini prompt injection, Microsoft 365 token theft, Redis RCE patched

Google Gemini voice assistant hijackable via poisoned notifications; Microsoft 365 Android apps leak tokens; Redis RCE (CVE-2026-23479) patched; critical fuel tank systems under active attack.

low Mobile Malware Credential Theft Technology Energy