Firebase is a Google-backed platform for building and hosting web and mobile applications, offering services such as Firestore and Realtime Database, Authentication, Cloud Functions, Hosting, Storage, and Cloud Messaging.
Overview
Firebase is a Google-backed platform for building and hosting web and mobile applications, offering services such as Firestore and Realtime Database, Authentication, Cloud Functions, Hosting, Storage, and Cloud Messaging. In cybersecurity, it is significant because misconfigurations, insecure hosting, or abuse of Firebase services can lead to data exposure and use as infrastructure for phishing or malware campaigns, making it important for defenders to understand its security model and access controls.
Related Threat Clusters
-
Russian Cyber Espionage Clusters Exploit OAuth and Phishing Techniques
Google's Threat Intelligence Group (GTIG) is tracking three Russian cyber espionage clusters—UNC6293, UNC7005, and UNC5976—targeting individuals in academia, defense, and government across Europe and the U.S. These…
9 articles · Updated August 21, 2026 -
PATCHCORD Malware Targets Afghan Telecom and South Asian Infrastructure
Acronis Threat Research Unit has identified a new malware campaign named PATCHCORD, targeting Afghan telecom providers and critical infrastructure in South Asia. The malware, a custom backdoor written in C/C++, is…
2 articles · Updated August 13, 2026 -
OrcaRouter AI Threat Report 2026 Highlights Rising Prompt Injection Risks
OrcaRouter Security Research released its AI Threat Report 2026, identifying prompt injection as the leading risk to large language model (LLM) applications, with a 340% increase in such attacks year-over-year. The…
3 articles · Updated June 22, 2026 -
Critical RCE Vulnerability Discovered in Protobuf.js Library
A critical remote code execution (RCE) vulnerability has been identified in protobuf.js, a widely used JavaScript library for Protocol Buffers, affecting millions of applications. Discovered by Endor Labs, the flaw…
4 articles · Updated April 18, 2026 -
India Orders Google to Remove Fraudulent Firebase Accounts Targeting Banks
The Indian government has directed Google to take down multiple Firebase accounts after discovering they were being used to impersonate major banks like SBI, ICICI, and Axis Bank. These accounts were involved in…
9 articles · Updated August 22, 2026 -
Global Smishing Campaign Targets Drivers with Fake Traffic Fines
Bitdefender Labs has identified a widespread smishing campaign affecting drivers in at least 12 countries, including the United States, Canada, Australia, and the United Kingdom. Between December 2025 and April 2026,…
3 articles · Updated May 1, 2026 -
Google API Key Vulnerability Exposes Gemini AI Access in Android Apps
A vulnerability in Google's API key system has allowed unauthorized access to the Gemini AI platform from numerous Android applications. CloudSEK identified that existing API keys, meant for public services,…
2 articles · Updated April 10, 2026 -
Cerberus Stalkerware Exploits Google Play for Remote Control of Victims' Devices
Cerberus Anti-theft, a stalkerware application, has been available on Google Play since October 4, 2023, masquerading as a legitimate anti-theft tool. The app utilizes accessibility services and Google Firebase to…
2 articles · Updated May 5, 2026 -
Stolen Gemini API Key Leads to $82K in Unauthorized Charges
A three-person development team in Mexico faces financial ruin after a stolen Google Cloud API key resulted in $82,314.44 in unauthorized charges within 48 hours. The key was compromised between February 11 and 12,…
3 articles · Updated March 4, 2026 -
CallPhantom Fraudulent Apps Scam Millions of Android Users
A series of fraudulent apps named CallPhantom were discovered on Google Play, promising access to call histories for any phone number. Users were tricked into paying for subscriptions, only to receive fabricated data.…
7 articles · Updated May 7, 2026
Recent Intelligence Reports
- How cybercriminals are misusing Google Firebase for phishing, fraud — Madhyamamonline · August 23, 2026
- Google Firebase scam explained: How cybercriminals are misusing the platform for phishing ... — Thehansindia · August 23, 2026
- Govt asks Google to take down Firebase pages impersonating banks: Report — Ibtimes.Co.In · August 22, 2026
- Govt Urges Google To Remove Firebase Pages Impersonating Banks, Report Says — Freepressjournal.In · August 22, 2026
- Indian Governmet Directs Google to Pull Down Fake Bank Portals in Cyber Fraud Crackdown — English.Gujaratsamachar · August 22, 2026
- Google Asked To Urgently Remove Fake Bank Web Sites — M.Rediff · August 22, 2026
- India orders removal of Google Firebase accounts after spotting scam pattern — Ciso.Economictimes.Indiatimes · August 22, 2026
- Apt29 Evolving Diplomatic Phishing — cloud.google.com · August 21, 2026