accessibility Archives

AppWizard

June 19, 2026

Rokarolla trojan uses screen overlays to hijack Android financial apps

A new banking trojan for Android, named Rokarolla, targets 217 applications, including banking and cryptocurrency platforms, to steal credentials and sensitive financial data. It operates via a command and control (C2) server and bypasses the Google Play Store by using phishing websites that mimic legitimate download portals. Users are tricked into downloading a dropper that installs the malware, which disguises itself as the Google Play Protect security tool to gain access to Android Accessibility Services. Rokarolla employs dynamic screen overlays to capture user input in targeted financial applications and can also impersonate the device's lock screen. Additionally, it uses a pseudo-VNC system to intermittently capture screenshots for data extraction and can modify clipboard contents to manipulate cryptocurrency transactions by replacing copied addresses with those controlled by attackers.

Winsage

June 18, 2026

Microsoft kills mandatory MSA Edge sign‑in after years of complaints, and Google login support will arrive in July

Users will soon be able to sign into Microsoft Edge using a Google account, according to a new entry in Microsoft's roadmap (ID 565860). This change eliminates the requirement for a Microsoft account, increasing accessibility. Additionally, Microsoft Edge will adopt a two-week release cycle for major updates, similar to Google Chrome, to enhance innovation and competitiveness.

AppWizard

June 18, 2026

Android 17 review: Bubbling with excitement

Recent updates in Android, particularly with Android 17, focus on refining existing functionalities rather than introducing numerous new features. Key highlights include: - Revamped multitasking capabilities with expanded chat bubbles, allowing interaction with multiple apps simultaneously. - A bubble bar for foldable devices that displays all active floating windows for easy access, though launching apps as bubbles from the recents menu is not supported. - Tailored updates for foldable devices, including a dedicated gaming mode and native controller remapping for customization. - New customization options, such as hiding app labels on home screens and per-app adjustments for the dark theme. - Enhanced background blur effects and the ability to disable them through accessibility settings. - Security updates including Theft Detection Lock and Remote Lock enabled by default, and a new Contact Picker feature for sharing specific contacts. - Improved parental controls allowing for daily limits, downtime schedules, and individual app restrictions. - A consistent user experience across devices, with applications adapting to different screen sizes and the introduction of features like Continue On for cross-device continuity. - Anticipated future enhancements related to Gemini Intelligence.

AppWizard

June 18, 2026

Telegram vs Jio: Messaging app founder alleges cyberattack, Reliance responds

Pavel Durov, the founder of Telegram, has raised concerns about accessibility issues on his platform, attributing them to a technique called "BGP hijacking," which redirects internet traffic. He alleges that these disruptions affect users beyond India, including in the UAE, and suggests that Reliance Jio, an Indian telecom operator partly owned by Meta, may be involved in sabotaging access to Telegram. Reliance Jio has denied these allegations, stating they operate in accordance with global internet routing best practices. BGP hijacking occurs when a network falsely claims to be the preferred route, causing disruptions in internet traffic. There are indications that the network in question may be linked to Reliance Communications rather than Reliance Jio. The situation is complicated by a temporary block on Telegram in India due to the platform allegedly being used for leaking examination materials.

AppWizard

June 18, 2026

‘[It] is going to change a lot about how games are made’: Epic merges Unreal Engine 5 with Unreal Engine for Fortnite to give game devs around the world Unreal Engine 6

Epic Games unveiled developments for Unreal Engine 6 at the State of Unreal event in Chicago, highlighting its evolution from Unreal Engine 5. The new engine will incorporate features from Fortnite and UEFN (Unreal Editor for Fortnite), which allows users to create game levels easily. Unreal Engine 6 will adopt open standards for tools, code, and APIs to simplify development across industries. The anticipated release is set for 2027, with early access expected by the end of that year. Verse, a new scripting language, will be central to the gameplay programming model, while C++ will remain foundational. The Scene Graph will replace the existing gameplay framework, and artificial intelligence will play a larger role, with the UE5.8 release introducing the MCP server plugin for deploying large language models.

AppWizard

June 17, 2026

Hundreds of Android banking and crypto apps hit by dangerous new Rokarolla malware

Security researchers at Zimperium have identified a new Android banking trojan named “Rokarolla,” which threatens users of over 200 banking and cryptocurrency applications. It is distributed through spoofed websites, third-party app stores, and social media, but has not been found on the Google Play Store or other official Android repositories. Rokarolla requests extensive permissions, particularly concerning Accessibility services, SMS, calls, and notifications. Its capabilities include accessing WhatsApp contacts, capturing keystrokes, recording the screen, blocking incoming calls, and sending screenshots. Zimperium has not specified which geographical areas may be most vulnerable or the estimated number of potential infections. Users are advised to download applications only from official repositories to reduce the risk of encountering this malware.

AppWizard

June 17, 2026

Android 17 brings enhanced parental controls with screen time and app management tools

Google has launched an enhancement to its Android Parental Controls with the introduction of Android 17, featuring tools for parents to manage children's screen time, app access, content restrictions, and digital wellbeing. Initially available on Pixel devices, it will roll out to all Android smartphones and tablets receiving the Android 17 update. Key features include the ability to set daily screen time limits, create downtime schedules, apply content filters, limit app usage, and block apps. The integration with Google Family Link allows for additional supervision tools such as School Time Mode, purchase approvals, location tracking, and device activity monitoring. Google has also increased its U.S. Digital Wellbeing Fund to support research and programs aimed at promoting healthy technology usage among children and teenagers. The new parental controls will be accessible through Android Settings on devices updated to Android 17.

AppWizard

June 17, 2026

New Rokarolla Android Trojan Targets 217 Banking and Crypto Apps

Zimperium’s zLabs researchers have analyzed a newly identified Android banking trojan named Rokarolla, which targets 217 distinct banking and cryptocurrency applications. It is distributed through malicious websites that impersonate popular platforms like TikTok and Google Chrome, with one identified distribution point being hxxps://infocontablidades[.]it[.]com/. The malware uses a dropper disguised as Google Play Protect to install a second-stage payload and gain Accessibility Services access, allowing it to simulate user interactions and manipulate on-screen elements. Rokarolla downloads counterfeit HTML login pages for targeted applications and overlays them to capture user credentials, including sensitive card information. It can also deploy a fraudulent PIN entry screen, read and send SMS messages, intercept one-time codes from banks, and block incoming calls. The malware rewrites the clipboard, operates a keylogger and screen content logger, and scrapes WhatsApp contact data. It captures screenshots without alerting users and has a resilient command-and-control infrastructure with multiple fallback domains. No product flaws are exploited, and defenses against it include installing apps only from Google Play and being cautious with Accessibility Services. Zimperium’s Mobile Threat Defense and zDefend products can detect Rokarolla, and a list of indicators of compromise is available on their GitHub repository.

Winsage

June 17, 2026

I dug through the Windows 11 Insider builds for June 2026 and found 7 features worth paying attention to

Microsoft rolled out several preview builds of Windows 11 in early June 2026 as part of the Windows Insider Program, focusing on refining existing functionalities rather than introducing many new features. A new Beta channel for version 26H1 was launched, featuring: - Screen Tint: An accessibility feature that provides a system-wide color overlay to reduce eye strain, accessible through Settings > Accessibility > Vision > Screen Tint, offering six preset colors or custom hues. - Low Latency Profile: Temporarily boosts processor frequency for 1 to 3 seconds during interactive tasks, improving application launch times by up to 40% and interaction times by as much as 70%, operating automatically without manual toggles. - Widgets Experience Update: Widgets now open without hover activation, Taskbar badges are off by default, and alerts are limited until user interaction. The dashboard displays Widgets under "widgets," and badging aligns with the system accent color. - Magnifier Enhancements: Users can input specific zoom percentages directly and access additional zoom presets ranging from 5% to 400%. - File Explorer Changes: Improvements for compatibility, performance, and reliability, including support for paths with double backslashes and quotation marks, and middle-click support for opening folders in new tabs. - Windows Update: Unification of drivers, .NET, and firmware updates with monthly quality updates, reducing required restarts to one per month. - Windows Search Enhancements: Improved handling of typos, missing letters, and partial app names, prioritizing accurate search results even with input errors.

AppWizard

June 16, 2026

New Rokarolla Android malware targets 217 banking, crypto apps

A new Android banking trojan named Rokarolla targets 217 banking and cryptocurrency applications and features 137 commands for malicious activities. It is distributed via deceptive websites posing as legitimate application sources and impersonates Google Play Protect to lure users into installing infected apps. Once installed, it seeks Accessibility service permissions and access to notifications, SMS, and calls. Rokarolla communicates with a command-and-control server, sending device profiles to generate unique identifiers for victims. Its primary goal is to steal financial information by using deceptive login overlays to capture sensitive data and maintain control over the device. The malware employs evasion tactics such as disabling Google Play Protect, hiding its icon, silencing notifications, and keeping the screen awake. It can steal SMS messages, extract contacts, capture keystrokes, record screen content, manipulate clipboard contents, block calls, and take screenshots. Zimperium confirms that Rokarolla is not found on Google Play, and users are advised to avoid downloading APK files from untrusted sources and to be cautious with Accessibility permissions.