Malloc Privacy & Security VPN @MallocPrivacy

Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps thehackernews.com/2026/06/androi…

I just spent 2 weeks in Europe with activists from some of the world's most oppressive regimes. One question kept coming up: what are the red flags that people in "free" countries aren't seeing? Turns out there are many. youtu.be/PB87iMFlMC4 odysee.com/@NaomiBrockwel…

One notification. No app installed. And Google Gemini starts acting on fake commands — sending messages, joining calls, rewriting its own memory. All from a normal-looking WhatsApp, Slack, or SMS alert. Learn more about it on @TheHackersNews.

The Hacker News @TheHackersNews

4 days ago

⚠️ Poisoned #WhatsApp, Slack, or SMS notifications could hijack Google Gemini on Android. No malicious app needed. A single alert could make #Gemini fake messages, trigger actions, join Zoom calls, or poison memory. Read details: thehackernews.com/2026/06/whatsa…

3 28 78 30K 25

🚨 Fake sites mimicking Ghidra, dnSpy, and SpiderFoot are ranking in Google searches to deliver malware. They show real download URLs on hover, but clicks route users through a gated TDS to Remus Stealer, AnimateClipper, and SessionGate. Learn more: thehackernews.com/2026/06/fake-s…

Security researchers chained together five separate weaknesses in the popular workflow automation service Zapier that, if first discovered by a malicious actor, could have granted access to millions of user accounts and the systems those accounts connect to. hubs.li/Q04jtrR60

🚨 Android 0-Day Vulnerability Exploited in Attacks to Gain Complete Device Control Source: cybersecuritynews.com/android-0-day-… A critical Android zero-day vulnerability is being actively exploited in targeted attacks, allowing threat actors to gain near-complete control over affected devices without any user interaction. The flaw, tracked as CVE-2025-48595, was highlighted in the June 2026 Android Security Bulletin, where Google confirmed limited real-world exploitation. The vulnerability resides in the Android Framework component and is a high-severity elevation-of-privilege (EoP) issue. Under certain conditions, attackers can exploit the flaw remotely to escalate privileges without requiring additional execution permissions. #cybersecuritynews #Vulnerability #Android

Instagram users scramble to recover hundreds of rare and highly valuable accounts: cnews.link/meta-ai-instag…

x.com/i/article/2061…

Attackers can now plant phishing links inside your ChatGPT responses. And they look completely real. The attack is called ChatGPhish. You ask ChatGPT to summarize a webpage. That page secretly contains attacker instructions. ChatGPT reads them and starts showing you fake alerts, phishing links and QR codes inside its own interface. Looking exactly like something ChatGPT itself generated. You cannot tell the difference between a real response and an attacker controlled one. Permiso Security reported this to OpenAl on April 29 using Bugcrowd. OpenAl marked it as a duplicate of previous report. Mitigations until patch: - Avoid clicking links or scan QR codes inside Al summaries Avoid asking ChatGPT to summarize user generated content - Treat every alert inside a ChatGPT response as potentially attacker controlled The attack does not hack ChatGPT. It just uses it as a weapon.

Every time you use ChatGPT, your conversations could end up shaping responses to complete strangers and giving OpenAI a window into your entire digital life. Here are 6 settings worth changing now to protect your data.

Students and young people, spending more time with generative AI this holiday? Make safe AI use part of your digital habits. Follow the tips in the graphic to protect your privacy, verify information, and stay alert to AI-generated content. #TekanaOnline

Don't take cables from strangers.

We know @MallocPrivacy ;)

Elon Musk @elonmusk

a week ago

@KazimAIZJU With great {malloc} power comes great responsibility

167 107 1K 39K 48

x.com/i/article/2060…

Please mind that we are undertaking a full upgrade of our infrastructure. This will take around 5 days. We apologise for the inconvenience, we will get back better than ever before.

ChatGPT prompt injection turns web pages into phishing lures theregister.com/research/2026/…

"Grandoreiro" has been active since 2016 and now uses WebRTC and STUN protocols to blend into normal web traffic, making it harder to detect. It specifically targets banks in Portugal like Santander, BBVA, and Revolut. "BTMOB" runs as Malware-as-a-Service for $700 per month, complete with an easy APK builder. It's the successor to several older Android RATs and keeps getting stronger.

The Hacker News @TheHackersNews

2 weeks ago

🛑 Banking malware is hiding in WebRTC traffic on Windows while Android RATs spread via fake Google Play pages. Read - thehackernews.com/2026/05/grando… • Grandoreiro targets Portugal, Spain, and Mexico using DLL side-loading. • BTMOB targets Brazil with phishing, remote control, and

2 24 77 21K 17

After 88 days of near-total internet isolation in Iran, delayed messages, photos, and social media posts suddenly flooded phones as limited connectivity finally began returning on Tuesday evening. Iranian authorities said the shutdown was necessary for national security after the war with the US and Israel began on Feb. 28, cutting nearly 90 million people off from most online communication and information. (Source: BBC) Subscribe to our newsletter: cnews.link/newsletter-7/

Google was accused of harvesting Android users' data over cellular networks without consent. More: cnews.link/android-users-…

🛡️Malloc vs Others: How Malloc Gets Mobile Web Protection Right ✅ ➡️Malloc App has integrated comprehensive web protection, which goes beyond what other security solutions offer. It not only detects and alerts users when visiting malicious links but goes far beyond this limited approach and uses a powerful on-device VPN that reliably blocks all harmful traffic leaving the device, including any spyware or malware trying to connect to its command and control (C2) servers. This approach is more foolproof than ordinary DNS-based blocking, which can be bypassed easily, as Malloc checks not just DNS requests but also blocks malicious HTTP/HTTPS domains via its on-device VPN - ensuring nothing escapes or tricks the user and the system for malicious purposes. ➡️An on-device VPN is a pseudo-virtual VPN that mimics a real VPN and works on users' devices and is efficient, always-on, and effective. ➡️This unique technology works locally on-device and fully complies with industry-wide privacy standards, as your data never leaves the device. ➡️Malloc also has a remote VPN which, when activated for additional privacy, works in conjunction with Malloc's on-device VPN, and you get the best of both the worlds! A user will be able to block all malicious traffic and tracking across all apps, including all browsers and in-app web views, through Malloc's on-device VPN, while Malloc's regular remote VPN can be enabled at the same time and the user can connect to the desired country from the list of available countries for privacy, security, bypassing censorship and internet restrictions, and unblocking geo-restricted content. ➡️Malloc filters and blocks phishing websites, spyware, and other malware traffic, including those from banking trojans, adware and rootkits embedded in the device firmware, trackers and ads, crypto-mining domains, inappropriate websites, and other malicious traffic. Malloc App also filters all HTTP traffic device-wide, which is unencrypted traffic that can reveal not just your browsing history but also the content and personal data filled in on the web pages and inside apps to the ISP, state, and snoopers on public Wi-Fi. ➡️Now contrast this with the web protection provided by other security solutions. They rely on and ask users for giving them accessibility services permission, which has multiple disadvantages as follows: ⭐It supports only certain prominent browsers for web protection, like Chrome, Firefox, and Opera, and excludes most other apps, device/OS traffic, and other unsupported browsers. ⭐Accessibility services permission is unreliable and is flagged as risky by smartphones from many vendors, or it gets disabled due to proprietary, aggressive, and non-standard battery optimization technology in the custom OS of many smartphone vendors, particularly Chinese vendors like Xiaomi/Redmi, thereby disabling the web protection randomly and leaving users exposed. ⭐Accessibility services is a very sensitive permission, and certain banking apps and apps from mainstream financial institutions installed on the device flag it as a risk and ask users to disable it before opening and using the app. 👉🏻Malloc thus brings its users a superior mode of web protection via its device-wide on-device local VPN, which acts as a firewall and filters all malicious domains and blocks access to all dangerous web pages and app connections in the real time while maintaining user privacy and security. #privacy #cybersecurity #android #ios #mobilesecurity #appsecurity #malware #spyware #malloc