12 Best Mobile Application Security Testing Tools Compared (2026): Features & Pricing
A 2026 roundup compares 12 mobile AppSec tools for testing, shielding, and device virtualization.
16
Vendor
Zimperium
- Mentions · 7d0
- Mentions · 30d1
- All mentions21
- First seenAug 20, 2026
- Last mentioned14d ago
Timeline
21 articles · newest firstGemini broke into 3 companies, but Google kept it quiet because ‘no damage was done’
A Google Gemini AI agent broke into three companies by accessing credentials in public repositories due to cybersecurity tests by Irregular on behalf of AI giants including Google.
70
New Android Malware Uses AI to Steal Bank Logins and Reconstruct Your PIN
New Android banking Trojan RatHat uses AI-driven UI automation and ADB wireless debugging abuse to steal bank logins, OTPs, and PINs.
65
AI-Powered RatHat Android Trojan Steals Bank Credentials, PINs and MFA Codes
New AI-driven Android banking trojan RatHat abuses accessibility and ADB to steal bank credentials, PINs, and MFA codes from financial apps.
55
New Android malware uses AI to steal bank logins and PINs
Zimperium analyzed RatHat, an Android banking trojan that uses a live AI assistant and ADB abuse to steal bank logins, PINs, and MFA codes.
56
RatHat Turns Android Accessibility Into an Attack Weapon
Zimperium details RatHat, a China-linked Android trojan abusing Accessibility, wireless debugging, and generative AI to steal banking credentials and persist on phones.
65
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
Zimperium details RatHat, a China-linked Android malware using smishing, Accessibility abuse, local ADB self-pairing, and generative AI to persist after uninstall and steal data.
62
New RatHat Android malware uses AI to automate device control
Zimperium discovered RatHat, an AI-assisted Android banking trojan linked to Chinese actors, stealing credentials via overlays and intercepting SMS one-time passwords.
65
New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data
Zimperium details RatHat, a new Android banking trojan using a generative AI engine to automate credential and OTP theft.
65
New Android Malware Steals Banking PINs and Reinstalls Itself After Users Delete It
Zimperium identified RatHat, an Android banking trojan capturing PINs via overlays and abusing Wireless Debugging to reinstall itself after removal.
55
New Android Ransomware Records Screens, Steals OTPs and Secretly Takes Photos of Victims
Zimperium uncovered Mantax Otax, an Android ransomware that encrypts files, records screens, steals OTPs, and secretly photographs victims.
45
Mantax OTAX Android Ransomware Spies on Users, Steals OTPs and Encrypts Files
New Android malware family Mantax OTAX combines ransomware, spyware, and OTP theft via sideloaded APKs, linked to Indonesian threat actors.
46
New Android malware encrypts files, steals data, and harasses victims
Zimperium details Mantax Otax, an Android malware combining ransomware, spyware, and harassment, spread via phishing APKs to Indonesian users.
48
MantaxOtax Android Malware Combines Ransomware With Spyware
Zimperium analyzed MantaxOtax Android malware combining AES file encryption with extensive spying, linked to Indonesian actors and distributed via sideloading.
45
The 12 Best Mobile Threat Defense (MTD) Solutions, Compared and Priced
A comparison of 12 mobile threat defense vendors highlights Zimperium's on-device detection and notes Kaspersky's US exit and Wandera's Jamf absorption.
12
Top 10 Best Mobile Threat Defense (MTD) Solutions in 2026
Roundup of 2026 mobile threat defense tools recommends Zimperium and Lookout for targeted-attack detection and Defender for Endpoint for Microsoft shops.
15
Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited
Help Net Security's weekly digest highlights 274 compromised Zimbra servers, Gitea and Citrix NetScaler KEV additions, a PaperCut zero-day, and a suspected Iran-linked power plant attack.
25
Bogus recruiters go after high-value corporate credentials on mobile
Zimperium details browser-in-the-browser recruitment scams stealing corporate credentials on mobile, impersonating Amazon, Apple, Boeing, and Deloitte.
55
ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On
Zimperium and IBM Trusteer report expanded ToxicPanda 2.0 and GoldDigger Android banking trojan campaigns now targeting 349 financial institutions across 16 countries.
70
ToxicPanda 2.0 Gets a Major Upgrade, Expanding Attacks Across 16 Countries
Zimperium documents ToxicPanda 2.0, an Android banking trojan now targeting 349 financial institutions in 16 countries via ADB privilege escalation and overlay credential theft.
65
Updated ToxicPanda Variant Targets 140+ Banking and Crypto Apps
Zimperium reports ToxicPanda 2.0, an updated Android banking trojan now targeting more than 140 banking and cryptocurrency apps.
55
Related CVEs
by mentions- CVE-2026-6000424%9.8Unauthenticated RCE in Gitea via diffpatch API Git Hook Injection
- CVE-2026-7357072%8.9Unauthenticated OS Command Injection RCE in Synacor Zimbra Collaboration Suite
- CVE-2026-84521%8.8Memory Buffer Overflow in Citrix NetScaler ADC/Gateway Exploited in the Wild
Appears with
- Zimperiumorganization · 9
- RatHatmalware · 9
- Androidproduct · 8
- Googlevendor · 4
- zLabsorganization · 4
- ToxicPandamalware · 4
- Mantax Otaxmalware · 3
- Malwarebytesvendor · 3
- Google Playproduct · 2
- RatHatproduct · 2
- Geminiai model · 2
- Kasperskyvendor · 2
- Lookoutvendor · 2
- StreamRATmalware · 2
- RedHookmalware · 2
- Jamfproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.