Loading story…
Google is rolling out its September 2026 Pixel Drop to Pixel 6 and later devices, expanding the Pixel VIPs home-screen widget with one-tap calling and texting for frequently contacted people. The streamlined VIP layout may revert when users add more than four contacts.
The update also extends Scam Detection to Gboard, warning users when they begin drafting replies to suspicious messages in messaging apps. Google said the detection operates locally and in real time, keeping message analysis on the device rather than sending conversation content to its servers.
See affected versions and whether adversaries are exploiting it.
3 events from the most recent confirmed update back to the earliest known activity.
The September 2026 Pixel Drop expanded Scam Detection to warn users with a “Likely scam” message over Gboard when they start replying to suspicious messages. Google said the analysis occurs locally and in real time.
Google began rolling out its September 2026 Pixel Drop to Pixel 6 and newer phones. The release added one-tap call and text controls to Pixel VIP contact cards, while early reports indicated the layout could revert when more than four contacts are added.
Google introduced Pixel VIPs, a home-screen widget for accessing important contacts.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Google has released a November feature update for Pixel phones, introducing several new capabilities focused on user security and convenience. Notably, the update adds scam detection for messages, which alerts users to potentially fraudulent communications, and notification summaries to help users manage important messages. These features are rolling out to Pixel 6 and newer devices, aiming to enhance protection against social engineering attacks and improve overall user experience. Separately, security researchers have disclosed a critical Android vulnerability known as Pixnapping (CVE-2025-48561), which allows malicious apps to capture screenshots of sensitive information without requiring special permissions. This flaw potentially exposes passwords, one-time codes, and financial data to attackers, affecting all modern Android devices, including those running the latest versions. While Pixnapping is not yet exploited in the wild, it underscores the ongoing risks to mobile device security and the need for prompt patching by Google.
Jun 29, 2026
Google is launching **fake call detection** on Android to help stop scam calls that use caller ID spoofing and AI voice cloning to impersonate trusted contacts. The feature is rolling out globally this month for devices running **Android 12 and later**, starting with **Pixel** phones, and works through **Phone by Google** with supported **RCS** services. It is designed to warn users when a caller claims to be someone in their contacts but the call cannot be verified as coming from that person’s device. The protection uses a silent background verification process in which the caller’s phone sends an encrypted confirmation signal during the call. If that signal is missing, the recipient’s device checks whether the real contact’s phone is actually placing the call and displays an impersonation warning if not. Google said the feature is enabled by default where supported, though users can turn it off in settings, and framed the rollout as a response to growing impersonation fraud that has expanded from consumer scams into business-focused social engineering and caused billions in reported losses.
Jun 29, 2026
Google has expanded Android protections that tie a phone number to a device and Google accounts, while also adding **fake call detection** aimed at stopping deepfake-enabled phone scams. Reporting on the new anti-scam feature indicates Android can analyze calls for signs of impersonation and other fraudulent behavior, reflecting Google’s broader push to harden mobile devices against voice-based social engineering attacks. Separate reporting on Android’s phone number verification shows Google verifies that a SIM associated with a number is physically present in a device, then links that verified number to active Google accounts for services including **RCS messaging**, account recovery, emergency features, and anti-scam protections. The process has used hidden SMS messages and now increasingly relies on carrier APIs that exchange encrypted device and SIM-related data; the feature is enabled by default, can generate “number is now verified” alerts, and has raised privacy concerns because one verified number may be associated with multiple Google accounts on the same device.
Jul 22, 2026