DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT
More on DeviceManager
Other advisories
- MediumCVE-2026-59002In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic error in the code. This could lead to physical information d…
- HighCVE-2025-48654In onStart of CompanionDeviceManagerService.java, there is a possible confused deputy due to a logic error in the code. This could lead to local escalation o…
- MediumCVE-2025-54623Out-of-bounds read vulnerability in the devicemanager module.
- HighCVE-2025-54622Binding authentication bypass vulnerability in the devicemanager module.
- HighCVE-2024-49732In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission ch…
- MediumCVE-2024-8355Visteon Infotainment System DeviceManager iAP Serial Number SQL Injection Vulnerability. This vulnerability allows physically present attackers to execute ar…
- HighCVE-2024-43085In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in…
- HighCVE-2024-31318In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to a missing permission check. This cou…
Source: https://thehackernews.com/2026/08/doublecup-uses-clickfix-and-cached-pngs.html
ID