Adware.AdPush
Adware.Adpush is an Android adware family/module identified by Dr.Web. It is integrated into apps and primarily displays notifications containing advertisements; Dr.Web also describes Adware.Adpush modules as able to collect a variety of confidential data and download other applications and initiate their installation. In Dr.Web’s Q4 2025 mobile threat review, Adware.Adpush detections led adware detections on protected devices. The broader 2025 Android threat review likewise states that members of the Adware.Adpush family remained the leading adware detections. The provided content does not attribute this family to a specific threat actor, campaign, or industry targeting, and no concrete IOCs are given.
Hunt this family in your stack
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
Recent activity
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Adware module family that pushes deceptive ad notifications, collects data, and can download/install additional apps; includes variants controlled by C2-provided URLs.
Embedded adware modules that display misleading ad notifications, collect confidential data, and can download other apps and initiate installation.
Embedded adware modules that push deceptive ad notifications, collect data, and can download/install additional apps.
The version that knows your environment.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.