Re-Malwack

Overview

Developed by ZG089, Re-Malwack is an advanced privacy and content-filtering framework for Android devices.

Unlike basic static hosts modules that require manual re-flashing whenever rules become outdated, Re-Malwack combines multi-source threat intelligence with an interactive WebUI and modular operating tiers. It effectively neutralizes mobile advertisements, background diagnostic telemetry, stalkerware domains, and malware distribution nodes across all installed applications.

Technical Architecture & How It Works

Layered Protection & Host Redirection

Re-Malwack coordinates filtering through multiple operational mechanisms:

1. Systemless Hosts Mounting: On rooted systems, the module mounts its active compiled blocklist over /system/etc/hosts, routing flagged hostnames to 0.0.0.0 with zero CPU overhead.
2. Dynamic Profile Compilation: The module manages rules in /data/adb/modules/Re-Malwack/config.json. Switching profiles automatically recomposes the active hosts structure and restarts Android’s DNS resolver cache.
3. WebUI Management Engine: Exposes a responsive local web interface supported across KernelSU, APatch, and modern Magisk WebUI wrappers.

Installation & Setup

1. Download the latest Re-Malwack-*.zip release.
2. Flash the module in your root manager (Magisk, KernelSU, or APatch).
3. Reboot your device.
4. Launch the WebUI from your root manager or open a root terminal and execute remalwack to select your initial filtering profile.

Configuration & Usage

Inside the WebUI or terminal interface:

• Profile Selection: Choose between Lite, Full, or Ultimate protection.
• Whitelist Customization: Add domains that are required for your banking or corporate apps to the local whitelist to prevent false positives.
• Update Frequency: Configure automated background updates to keep blocklists synchronized with upstream security feeds.

Troubleshooting & Common Issues

• Certain Apps Failing to Load: If an app fails to connect, temporarily switch to the Lite profile or add the app’s primary API domain to your local whitelist via the WebUI.