A banking malware sample led researchers to an Android bug that can loop-crash phones

Bitdefender Labs disclosed “GhostMap,” a flaw in how Android parses ZIP structures inside APKs: malformed entries with nonstandard compression flags can cause out-of-bounds memory mappings and SIGBUS faults that crash the installer or system_server, producing persistent boot loops (reproduced on Pixel 10/Android 10–17). Bitdefender built a proof-of-concept and traced the issue from a packed banking dropper sample, but has not observed active exploitation in the wild; Google has declined an immediate security update.