v2026.4.28

This release includes a major internal refactor of MVT which will enable future development.

Most significantly is a redesign of the built-in alerting function, moving away from a binary detected/not-detected logic to a more nuanced set of alert levels. All alerts are also now logged in JSON output. This will allow for easier and more reliable implementation of heuristic detections and processing of MVT output with other tools.

What's Changed

• Check receiver names for IoCs by @viktor3002 in #721
• [auto] Update iOS releases and versions by @github-actions[bot] in #738
• Add support for bugreport modules to analyse the AndroidQF dumpsys.txt by @Max-RSF in #741
• [auto] Update iOS releases and versions by @github-actions[bot] in #739
• [auto] Update iOS releases and versions by @github-actions[bot] in #742
• Detect uninstall and downgrade in battery daily by @besendorf in #736
• Bump cryptography from 46.0.3 to 46.0.5 by @dependabot[bot] in #747
• Bump pydantic from 2.12.3 to 2.12.5 by @dependabot[bot] in #732
• Bump click from 8.3.0 to 8.3.1 by @dependabot[bot] in #731
• Bump mkdocstrings from 0.30.1 to 1.0.0 by @dependabot[bot] in #730
• Fixes bug in IOC import by @Te-k in #749
• [auto] Update iOS releases and versions by @github-actions[bot] in #743
• Bump requests from 2.32.5 to 2.33.1 by @dependabot[bot] in #752
• Bump packaging from 25.0 to 26.0 by @dependabot[bot] in #751
• Bump pydantic-settings from 2.10.1 to 2.13.1 by @dependabot[bot] in #750
• Bump tzdata from 2025.2 to 2025.3 by @dependabot[bot] in #729
• Improve docker images tags based on PR #740 by @DonnchaC in #754
• Bump cryptography from 46.0.5 to 46.0.6 by @dependabot[bot] in #755
• Bump rich from 14.1.0 to 14.2.0 by @dependabot[bot] in #728
• Replace betterproto with betterproto2 in dependencies by @besendorf in #763
• Bump tzdata from 2025.3 to 2026.1 by @dependabot[bot] in #761
• Bump click from 8.3.1 to 8.3.2 by @dependabot[bot] in #762
• Bump rich from 14.2.0 to 14.3.3 by @dependabot[bot] in #760
• Fix betterproto2 migration: update generated proto code and callers by @besendorf in #765
• Fix STIX2 hash key parsing to accept spec-compliant algorithm names by @besendorf in #767
• Update add-to-project action version by @besendorf in #768
• handle empty sms databases by @besendorf in #770
• Update README with warning about v3 breaking changes by @besendorf in #771
• Abort analysis and warn user when backup is encrypted by @besendorf in #772
• Bump cryptography from 46.0.6 to 47.0.0 by @dependabot[bot] in #775
• Bump pydantic from 2.12.5 to 2.13.3 by @dependabot[bot] in #777
• [auto] Update iOS releases and versions by @github-actions[bot] in #756
• Bump mkdocs-autorefs from 1.4.3 to 1.4.4 by @dependabot[bot] in #776
• Bump mkdocstrings from 1.0.0 to 1.0.4 by @dependabot[bot] in #759
• Bump mkdocs-material from 9.6.20 to 9.7.6 by @dependabot[bot] in #758
• V3 by @besendorf in #716

New Contributors

• @viktor3002 made their first contribution in #721
• @Max-RSF made their first contribution in #741

Full Changelog: v2.7.0...v2026.4.28