APK Builder is a tool tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed December 16, 2025; most recent activity December 18, 2025.
Cellik, a new Android malware-as-a-service, allows attackers to create trojanized versions of legitimate apps from the Google Play Store. This malware can evade Play Protect defenses and offers capabilities such as…