Android Archives

AppWizard

April 21, 2026

Samsung’s powerful photo editing app is acting wonky for some users. Are you affected?

Samsung's Enhance-X app for photo and video editing recently received an update that includes a new interface, plugins, and expanded editing options. However, users in the United States, Korea, and Israel have reported issues such as installation failures and crashes after the update, with some experiencing an update loop that prevents access to new features. While not widespread, these issues suggest potential problems in Samsung's update process. Some users have successfully installed the update, and an alternative solution for those facing difficulties is to sideload the APK to bypass the Galaxy Store update issues.

AppWizard

April 21, 2026

Trojanized Android App Fuels New Wave of NFC Fraud

A new variant of the NGate malware family has emerged, using a trojanized Android application to capture payment card data and personal identification numbers (PINs). This modified version of HandyPay, a legitimate NFC relay app, has been distributed since November 2025, primarily targeting users in Brazil. The malware intercepts NFC payment card data and allows fraudulent transactions. Two distinct malware samples have been observed, delivered through phishing infrastructure that impersonates a Brazilian lottery site and a Google Play listing for a card protection tool. The trojanized app captures NFC data, requests the victim's card PIN, and transmits this information to attacker-controlled infrastructure. It requires minimal permissions, leveraging its role as the default payment application to evade detection. Evidence suggests that generative AI tools may have been used in its development, indicated by emoji markers in debug logs. ESET has reported its findings to Google, and Google Play Protect can detect known versions of the malware. The developer of HandyPay is investigating the misuse of its application.

AppWizard

April 21, 2026

X deep-link issue on Android is stopping shared posts from opening properly

Android users are experiencing an issue with the X app where tapping on shared links does not direct them to the intended posts, leaving them on their timelines or the last viewed profile. Complaints have increased, and standard troubleshooting methods like clearing caches and reinstalling the app have not resolved the problem. A temporary workaround involves removing the app from recent tasks before tapping the link, but this is not a permanent solution. The issue affects various Android models and may have started after a recent Android system update, indicating a potential flaw within the X app itself. Some users have chosen to open links in mobile browsers by adjusting app settings. There has been no official acknowledgment of the bug from the X team, although the product head made a lighthearted comment about the situation on social media.

AppWizard

April 21, 2026

NGate Android malware uses HandyPay NFC app to steal card data

A new variant of the NGate malware targets Android users by disguising itself within a trojanized version of the HandyPay app, which is a legitimate mobile payment processing application. This malware, documented since mid-2024, siphons payment card information through the mobile device's near-field communication (NFC) chip and sends the stolen data directly to attackers, who create virtual cards for unauthorized purchases or cash withdrawals from NFC-enabled ATMs. The new variant has been injected with malicious code into the HandyPay app, which has been available on Google Play since 2021. The code includes emojis, indicating the possible use of a generative AI tool in its development. The shift from previous iterations, which used an open-source tool named NFCGate, to HandyPay is likely motivated by financial considerations and the need for evasion, as HandyPay is more affordable and requires fewer permissions. This NGate variant has been active since November 2025, primarily targeting Android devices in Brazil. It employs two main distribution methods: a counterfeit app named “Proteção Cartão” hosted on a fraudulent Google Play page and a fake lottery website that redirects users to WhatsApp to download the malicious APK. Upon installation, the app prompts users to set it as their default NFC payment application, requests their card PIN, and instructs them to tap their card on the phone for reading, transmitting all collected information to an attacker's email address. To protect against such threats, Android users are advised to avoid downloading APKs from outside Google Play, disable NFC when not in use, and use Play Protect to scan for threats.

AppWizard

April 21, 2026

NGate NFC malware targets Android users through trojanized payment app

NFC-based payment fraud targeting Android users in Brazil has been linked to a campaign using a trojanized version of the HandyPay app, part of the NGate malware family, since November 2025. The malware is distributed through a counterfeit website mimicking a lottery and a fraudulent Google Play page. The operators chose HandyPay for its low cost and minimal permissions required. The malware requests users to set it as the default NFC payment app, allowing it to capture payment card PINs and relay NFC card data to attackers. ESET Research identified this campaign and discovered logs from compromised devices containing sensitive information. The trojanized app has never been on the official Google Play store, and ESET has notified Google and the HandyPay developer about the issue.

AppWizard

April 21, 2026

New NGate Android malware variant uses NFC app to steal card data

A new variant of the NGate Android malware exploits a legitimate NFC payment app, HandyPay, to steal users' card information and PINs, enabling unauthorized contactless transactions. This malicious version of HandyPay, which has been available since 2021, was identified by ESET researchers and is distributed through a fraudulent lottery website and a fake Google Play page. The malware captures sensitive information by prompting users to enter their payment card PIN and tap their card against the device, sending the data to an attacker-controlled phone and exfiltrating the PIN to a command-and-control server. The campaign employs social engineering tactics and requires minimal permissions, relying on users to enable app installations from unknown sources. The attackers use a centralized infrastructure for malware distribution and PIN collection, with evidence of compromised devices in Brazil. The shift to modifying a legitimate application is motivated by financial incentives, as it offers similar functionality at a lower cost compared to underground tools. Users are advised to avoid installing apps from unofficial sources and to ensure the legitimacy of applications before entering sensitive information.

AppWizard

April 21, 2026

Google’s most basic app has turned my dad into a Pixel super-fan

The author's family recently transitioned to Google Pixel phones, which has particularly pleased the author's father due to the Pixel Weather app. The switch was motivated by the need for easier remote troubleshooting and a consistent user experience. The father's fondness for the app stems from its clarity, straightforward design, and absence of ads, making it more enjoyable to use. The app provides accurate weather forecasts for their hometown in Lebanon and features a large, readable font that caters to the father's visual needs. The family has a longstanding interest in weather information, and the app's customization options have enhanced the father's smartphone experience.

AppWizard

April 21, 2026

Google Photos wants to fix your face in one tap, but I’m not sure people want the help

Google Photos has introduced new touch-up tools for Android, including Heal, Smooth, Under eyes, Irises, Teeth, Eyebrows, and Lips, which allow users to make subtle edits while maintaining a natural appearance. These tools require an Android device running version 9.0 or higher with a minimum of 4GB of RAM. The feature is being gradually rolled out globally and is integrated into the existing Google Photos editor, utilizing AI to suggest seamless adjustments.

BetaBeacon

April 21, 2026

How to Install Steam on Android with ROCKNIX

The text provides a list of Steam-compatible devices from different brands such as AYN, AYANEO, Retroid, and KONKR. It also gives detailed instructions on how to install ROCKNIX on these devices, back up existing ABL, flash ROCKNIX ABL, change boot mode, install Steam, enable Steam Input, change game configs, and adjust ROCKNIX Steam settings. Additionally, it compares the pros and cons of using ROCKNIX versus Android on compatible devices and recommends installing ROCKNIX on a microSD card rather than on the internal storage due to potential risks.

AppWizard

April 20, 2026

Inware now tells you even more about your Android device with expressive makeover [Gallery]

Inware 7.0 is set to be released this week, featuring a Material 3 Expressive design and new functionalities. The update is available for free on the Play Store and enhances the app's ability to provide comprehensive data about Android devices, including metrics like storage capacity, memory usage, camera specifications, and display characteristics. New insights include monitoring thermal throttling, 6GHz Wi-Fi utilization, Thread connectivity, and battery cycle count. The app interface has been redesigned with visually appealing tiles for key information, and it incorporates the Google Sans Flex font for improved readability. Additionally, the update includes better language translations and an overhaul of the app's architecture for a smoother user experience.