Firebase is a cross-platform tool and the researchers expect that the misconfigurations impact many more apps outside of the Android ecosystem.

The DoNot APT threat group is leveraging the legitimate Google Firebase Cloud Messaging server as a command-and-control (C2) communication mechanism.

Firebase added a series of emulation, dashboard, testing and extension updates to its mobile platform at Google I/O 2021.