Security Research

Droidwatch Blog

Technical analysis of Android malware families, threat intelligence, and platform updates from the Droidwatch research team.

All Static Analysis Deep-Dives 10 Threat Research 3
· 3 min read · Static Analysis Deep-Dives

Static Analysis Deep-Dive #2: Installer — Malicious (65/100)

Installer (google.Jk7H.PwcD) scored Malicious 65/100 in Droidwatch's static pipeline — 1 critical and 4 high findings, led by exported activity without permis

#android-malware
· 4 min read · Static Analysis Deep-Dives

Static Analysis Deep-Dive #1:  极游市场 — Malicious (74/100)

极游市场 (cn.ggg.market) scored Malicious 74/100 in Droidwatch's static pipeline — 7 critical and 27 high findings, led by sms read + send capability (otp theft

#sms-stealer #ransomware #privacy #banking-trojan
· 6 min read · Threat Research

Hook RAT Variants That Google Play Protect Misses — A Technical Analysis

Hook is an Ermac-derived Android banking RAT. We break down the variant signals that slip past Play Protect but light up Droidwatch's static and dynamic analysi

#hook #banking-trojan #rat #play-protect
· 5 min read · Threat Research

How Droidwatch Detects Anatsa Banking Trojans in 3 Seconds

Anatsa (TeaBot) is one of the most sophisticated Android banking trojans in the wild. Droidwatch flags it Malicious in under 3 seconds — here are the exact stat

#anatsa #teabot #banking-trojan #overlay

Get new threat research in your inbox

Real malware deep-dives and detection write-ups from the Droidwatch team. No spam, unsubscribe anytime.