Loading malware…
Android.MobiDash is an Android ad-displaying trojan family reported by Dr.Web as one of the most widespread Android threats across 2025 and into 2026. Its primary behavior is to display intrusive advertisements on infected devices. Dr.Web repeatedly cited Android.MobiDash alongside Android.HiddenAds as a leading Android threat family, including being the most widespread threat in Q3 2025 and remaining among the most common threats in Q4 2025, Q1 2026, and Q2 2026. The family’s activity later declined: detections increased by 18.19% in Q3 2025, then decreased by 43.24% in Q4 2025 and by 32.70% in Q1 2026, with further declines noted in subsequent 2026 reporting. Dr.Web also noted that Android.MobiDash.7859 was the top modification among detected variants. The provided content does not attribute Android.MobiDash to a specific threat actor, infection vector, or industry targeting, and no specific indicators of compromise beyond the family and variant naming are given.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
10 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
An Android ad-displaying trojan family whose activity decreased during Q2 2026.
Android ad-displaying trojan family that shows intrusive advertisements on infected devices.
Android ad-displaying trojan/adware family whose detections declined in Q1 2026.
Ad-displaying trojan/module incorporated into Android apps to show obnoxious/intrusive advertising.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.