{"vulnerability": "CVE-2025-4856", "sightings": [{"uuid": "8738acbe-1344-4e50-b6f1-225fd59eb98f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://bsky.app/profile/sketchynews.net/post/3m3ay6unayy2n", "content": "", "creation_timestamp": "2025-10-15T19:30:50.997317Z"}, {"uuid": "366a5a2e-a1f9-46c5-9cef-e0fb8b3084da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://bsky.app/profile/stringsvsatoms.bsky.social/post/3m35cwflqwk2m", "content": "", "creation_timestamp": "2025-10-14T08:32:18.597226Z"}, {"uuid": "02c485de-624f-49e5-bcf4-698b6e090357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://bsky.app/profile/sketchynews.net/post/3m3bx76ahmn2v", "content": "", "creation_timestamp": "2025-10-16T04:45:46.216211Z"}, {"uuid": "a355908b-d8ae-406b-8ccd-b5d4c64b51b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m35xm2c2re2i", "content": "", "creation_timestamp": "2025-10-14T14:42:18.854554Z"}, {"uuid": "5352c596-0cb9-43e4-8ebd-6d2f8dd5b50c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://bsky.app/profile/979.st/post/3m3ctn2ne3c2l", "content": "", "creation_timestamp": "2025-10-16T13:14:27.200038Z"}, {"uuid": "1965fbe1-8425-4d35-885a-6db396240de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://bsky.app/profile/979.st/post/3m3ctpjkbwk2l", "content": "", "creation_timestamp": "2025-10-16T13:15:49.672460Z"}, {"uuid": "e60f6b78-7c27-447a-bab7-98ea2a85eb83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://bsky.app/profile/intcyberdigest.bsky.social/post/3m3xcpzi6pt2q", "content": "", "creation_timestamp": "2025-10-24T16:37:58.061770Z"}, {"uuid": "b06a1e09-66f5-4103-aa29-312ebd39f21e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://bsky.app/profile/guardsquare.com/post/3m3pkgvcjis2z", "content": "", "creation_timestamp": "2025-10-21T14:34:46.372619Z"}, {"uuid": "24f64261-c74c-4d7d-adb7-0f006bc8aa67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://bsky.app/profile/979.st/post/3m3fgbyj5ss2e", "content": "", "creation_timestamp": "2025-10-17T13:53:38.715706Z"}, {"uuid": "b7df8af4-b157-4811-94ce-79b14bfa86f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-48561", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m3ac4dcfqj2i", "content": "", "creation_timestamp": "2025-10-15T12:55:42.135681Z"}, {"uuid": "55f7e441-8290-4074-8848-be86d3dcceaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://bsky.app/profile/Android.activitypub.awakari.com.ap.brid.gy/post/3m5emvkdj4ei2", "content": "", "creation_timestamp": "2025-11-11T17:09:56.616473Z"}, {"uuid": "f4b06832-98d5-43dd-b6e7-b004083bbdfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m3jxzhaquv2d", "content": "", "creation_timestamp": "2025-10-19T09:21:45.808643Z"}, {"uuid": "5319bad9-e821-4c4a-9416-504d60b0764c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48569", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m7iqh22xvy2j", "content": "", "creation_timestamp": "2025-12-08T19:14:18.330535Z"}, {"uuid": "db69bc7d-6433-4da7-85c0-2c6ca8b21a7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48567", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mg5fbg5oxz2c", "content": "", "creation_timestamp": "2026-03-03T08:51:23.488353Z"}, {"uuid": "fb408434-5114-4792-b4a1-7e880241d5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "published-proof-of-concept", "source": "Telegram/gHA3pPqgIYqaOFfyav4WOSLnHgyQd03aYnJyGl8fZrE5Jmc", "content": "", "creation_timestamp": "2025-10-27T15:00:07.000000Z"}, {"uuid": "4cc0f1c2-dbe5-468f-ba1f-54e9710daa45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "published-proof-of-concept", "source": "Telegram/eprE6-d3GXEC8ugkZGIM7SguRfIlh9GwVUXl47JoaC36bCo", "content": "", "creation_timestamp": "2026-04-14T21:00:04.000000Z"}, {"uuid": "f57cef9a-dea2-444c-97a6-6732867250ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://t.me/GithubRedTeam/57164", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPixnapping Attack: Compromising private keys and seed phrases through vulnerability CVE-2025-48561 represents a new critical threat to the Bitcoin network and Android infrastructure\nURL\uff1ahttps://github.com/Lupovis/Honeypot-for-CVE-2025-59287-WSUS\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-27T13:37:23.000000Z"}, {"uuid": "d5d60f7a-ff00-44d2-ba66-361a48cee518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/57155", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPixnapping Attack: Compromising private keys and seed phrases through vulnerability CVE-2025-48561 represents a new critical threat to the Bitcoin network and Android infrastructure\nURL\uff1ahttps://github.com/demining/Pixnapping-Attack-on-Android\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-27T12:09:14.000000Z"}, {"uuid": "d07eacb5-f3df-4939-953a-a0147e61b4c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://t.me/purp_sec/1220", "content": "\ud83d\udde1 Pixnapping \u2014 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 Android \u0434\u043b\u044f \u00ab\u043a\u0440\u0430\u0436\u0438\u00bb \u043f\u0438\u043a\u0441\u0435\u043b\u0435\u0439 \u0441 \u044d\u043a\u0440\u0430\u043d\u0430\n\n\u042d\u0442\u0430 \u0430\u0442\u0430\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-48561. \u0421 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u044e\u0431\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0432 \u043c\u0430\u043d\u0438\u0444\u0435\u0441\u0442\u0435 \u043c\u043e\u0436\u0435\u0442 \u00ab\u0441\u043d\u0438\u043c\u0430\u0442\u044c\u00bb \u043f\u0438\u043a\u0441\u0435\u043b\u0438 \u0441\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0422\u043e \u0435\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043a\u0440\u0430\u0441\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u043c\u044b\u0435 \u043d\u0430 \u044d\u043a\u0440\u0430\u043d\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, 2FA \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e.\n\n\u041e\u0431\u0449\u0435\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438: \n\n\ud83d\udd35 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 (\u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u044b\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u0432),\n\ud83d\udd35 \u0447\u0435\u0440\u0435\u0437 intent/\u0434\u0438\u043f\u043b\u0438\u043d\u043a \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0436\u0435\u0440\u0442\u0432\u0443 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043d\u0443\u0436\u043d\u044b\u0439 \u044d\u043a\u0440\u0430\u043d (\u043f\u043e\u0447\u0442\u0430, \u0430\u043a\u043a\u0430\u0443\u043d\u0442, 2FA),\n\ud83d\udd35 \u043f\u043e\u0432\u0435\u0440\u0445 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0437\u043e\u043d\u044b \u043d\u0430\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u0443\u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u044b\u0435 Activities \u0441 \u044d\u0444\u0444\u0435\u043a\u0442\u043e\u043c (window blur), \u043f\u0440\u0438\u043d\u0443\u0436\u0434\u0430\u044f GPU \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043d\u0438\u0436\u0435\u043b\u0435\u0436\u0430\u0449\u0438\u0435 \u043f\u0438\u043a\u0441\u0435\u043b\u0438,\n\ud83d\udd35 \u043f\u043e VSync-callback \u0438\u0437\u043c\u0435\u0440\u044f\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u0430\u0434\u0440\u0430 (\u0438\u0437-\u0437\u0430 GPU[.]zip \u0432\u0440\u0435\u043c\u044f \u0447\u0443\u0442\u044c \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0446\u0432\u0435\u0442\u0430 \u043f\u043e\u0434\u043b\u043e\u0436\u043a\u0438),\n\ud83d\udd35 \u043f\u043e\u0441\u043b\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u0441\u0435\u0442\u043a\u043e\u0439, \u0443\u0441\u0440\u0435\u0434\u043d\u044f\u0435\u0442 \u0448\u0443\u043c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0443.\n\n\u041f\u043e\u0432\u0442\u043e\u0440\u044f\u044f \u0448\u0430\u0433\u0438 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0442\u043e\u0447\u0435\u043a, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435, \u043a\u0430\u043a \u0431\u044b \u0441\u0434\u0435\u043b\u0430\u0432 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 \u0447\u0443\u0436\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430, \u0438 \u043f\u0440\u043e\u0433\u043e\u043d\u044f\u0435\u0442 \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 OCR (\u0434\u043b\u044f 2FA). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u043d\u0438\u043c\u043a\u0443 \u044d\u043a\u0440\u0430\u043d\u0430 \u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u0442. \n\n\u041d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u043e\u043b\u043b\u0435\u0433\u0438-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438. \u041e\u043d\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u0435\u0435 \u043d\u0430 Pixel 6\u20139 \u0438 Samsung Galaxy S25 (Android 13\u201316, \u0434\u043e \u0441\u0431\u043e\u0440\u043a\u0438 BP3A.250905.014), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 app list bypass \u0434\u044b\u0440\u0443 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435, \u043a\u0430\u043a\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b, \u0431\u0435\u0437 \u0434\u0435\u043a\u043b\u0430\u0440\u0430\u0446\u0438\u0439 \u0432 \u043c\u0430\u043d\u0438\u0444\u0435\u0441\u0442\u0435). \n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430.\n\n#blue_team #Android #Pixnapping", "creation_timestamp": "2026-08-14T16:00:05.658746Z"}, {"uuid": "655120c8-012a-4a12-b9ae-6d9d17f6693f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48561", "type": "seen", "source": "https://t.me/purp_sec/1220", "content": "\ud83d\udde1 Pixnapping \u2014 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a \u043d\u0430 Android \u0434\u043b\u044f \u00ab\u043a\u0440\u0430\u0436\u0438\u00bb \u043f\u0438\u043a\u0441\u0435\u043b\u0435\u0439 \u0441 \u044d\u043a\u0440\u0430\u043d\u0430\n\n\u042d\u0442\u0430 \u0430\u0442\u0430\u043a\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-48561. \u0421 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043b\u044e\u0431\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0432 \u043c\u0430\u043d\u0438\u0444\u0435\u0441\u0442\u0435 \u043c\u043e\u0436\u0435\u0442 \u00ab\u0441\u043d\u0438\u043c\u0430\u0442\u044c\u00bb \u043f\u0438\u043a\u0441\u0435\u043b\u0438 \u0441\u043e \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u0422\u043e \u0435\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043a\u0440\u0430\u0441\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u0435\u043c\u044b\u0435 \u043d\u0430 \u044d\u043a\u0440\u0430\u043d\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043f\u0430\u0440\u043e\u043b\u0438, 2FA \u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e.\n\n\u041e\u0431\u0449\u0435\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438: \n\n\ud83d\udd35 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 (\u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u044b\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u0432),\n\ud83d\udd35 \u0447\u0435\u0440\u0435\u0437 intent/\u0434\u0438\u043f\u043b\u0438\u043d\u043a \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0436\u0435\u0440\u0442\u0432\u0443 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043d\u0443\u0436\u043d\u044b\u0439 \u044d\u043a\u0440\u0430\u043d (\u043f\u043e\u0447\u0442\u0430, \u0430\u043a\u043a\u0430\u0443\u043d\u0442, 2FA),\n\ud83d\udd35 \u043f\u043e\u0432\u0435\u0440\u0445 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0437\u043e\u043d\u044b \u043d\u0430\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u0442 \u043f\u043e\u043b\u0443\u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u044b\u0435 Activities \u0441 \u044d\u0444\u0444\u0435\u043a\u0442\u043e\u043c (window blur), \u043f\u0440\u0438\u043d\u0443\u0436\u0434\u0430\u044f GPU \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044c \u043d\u0438\u0436\u0435\u043b\u0435\u0436\u0430\u0449\u0438\u0435 \u043f\u0438\u043a\u0441\u0435\u043b\u0438,\n\ud83d\udd35 \u043f\u043e VSync-callback \u0438\u0437\u043c\u0435\u0440\u044f\u0435\u0442 \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043a\u0430\u0434\u0440\u0430 (\u0438\u0437-\u0437\u0430 GPU[.]zip \u0432\u0440\u0435\u043c\u044f \u0447\u0443\u0442\u044c \u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442 \u0446\u0432\u0435\u0442\u0430 \u043f\u043e\u0434\u043b\u043e\u0436\u043a\u0438),\n\ud83d\udd35 \u043f\u043e\u0441\u043b\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u0441\u0435\u0442\u043a\u043e\u0439, \u0443\u0441\u0440\u0435\u0434\u043d\u044f\u0435\u0442 \u0448\u0443\u043c \u0438 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u0440\u0442\u0438\u043d\u043a\u0443.\n\n\u041f\u043e\u0432\u0442\u043e\u0440\u044f\u044f \u0448\u0430\u0433\u0438 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0442\u043e\u0447\u0435\u043a, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0435, \u043a\u0430\u043a \u0431\u044b \u0441\u0434\u0435\u043b\u0430\u0432 \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442 \u0447\u0443\u0436\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430, \u0438 \u043f\u0440\u043e\u0433\u043e\u043d\u044f\u0435\u0442 \u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 OCR (\u0434\u043b\u044f 2FA). \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u043d\u0438\u043c\u043a\u0443 \u044d\u043a\u0440\u0430\u043d\u0430 \u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0435\u0442. \n\n\u041d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 \u0430\u0442\u0430\u043a\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u043e\u043b\u043b\u0435\u0433\u0438-\u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438. \u041e\u043d\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u0435\u0435 \u043d\u0430 Pixel 6\u20139 \u0438 Samsung Galaxy S25 (Android 13\u201316, \u0434\u043e \u0441\u0431\u043e\u0440\u043a\u0438 BP3A.250905.014), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u0443\u044e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 app list bypass \u0434\u044b\u0440\u0443 (\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435, \u043a\u0430\u043a\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b, \u0431\u0435\u0437 \u0434\u0435\u043a\u043b\u0430\u0440\u0430\u0446\u0438\u0439 \u0432 \u043c\u0430\u043d\u0438\u0444\u0435\u0441\u0442\u0435). \n\n\ud83d\udd17 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430.\n\n#blue_team #Android #Pixnapping", "creation_timestamp": "2026-08-15T00:00:32.531548Z"}, {"uuid": "9f66ddef-5db0-48bc-a0ed-65bc17a8de98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-48564", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260716", "content": "", "creation_timestamp": "2026-07-16T04:45:40.719289Z"}, {"uuid": "ed7b23e3-594d-4af2-b2a9-19634c6c54eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-48565", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260716", "content": "", "creation_timestamp": "2026-07-16T04:45:42.887502Z"}, {"uuid": "90552c02-0cff-4c4a-b0f0-3a4b1a77d806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-48566", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/samsung-products-multiple-vulnerabilities_20260716", "content": "", "creation_timestamp": "2026-07-16T04:45:45.075924Z"}]}