Misconfigurations in Google Firebase databases allow unauthorized parties to find and access personal data of users.

The DoNot APT threat group is leveraging the legitimate Google Firebase Cloud Messaging server as a command-and-control (C2) communication mechanism.

By connecting their Firebase account to LambdaTest, users can seamlessly sync projects and app releases, collaborate with teammates, and start real-time testing sessions on actual Android and iOS ...

Android users that attempt to install these apps are protected by Google Play Protect,” said Ed Fernandez, a spokesperson for Google. As of publication, Catwatchful remains hosted on Firebase.