accessibility Archives

AppWizard

April 29, 2026

New Android spyware Morpheus linked to Italian surveillance firm

Morpheus is a new spyware identified by the nonprofit organization Osservatorio Nessuno, which spreads through counterfeit Android applications that appear as legitimate updates. Attackers use SMS messages to direct victims to a fraudulent website mimicking an Internet Service Provider (ISP). The spyware installs a dropper app that deploys a concealed payload, which disguises itself as legitimate system components and manipulates users into granting dangerous permissions, including Accessibility access. Once granted, Morpheus initiates a Permission Workflow that creates a fake update overlay, disabling the touchscreen to prevent user interaction. It ensures persistence by restarting after device reboots and can request device administrator privileges. The spyware exploits overlay windows and Accessibility features to gain control of the device and bypass security measures, including disabling antivirus solutions without requiring root access. Analysis suggests Morpheus has Italian origins, with connections to an Italian firm, IPS Intelligence, known for lawful interception technologies. The spyware is capable of invasive actions such as recording audio and video, linking to WhatsApp, and compromising device security. The report highlights a network of dubious companies and shared contacts linked to the spyware's distribution.

AppWizard

April 29, 2026

‘Eventually the slop will just fall to the bottom’: Garry’s Mod sequel launches to ‘mixed’ reviews, but Garry himself isn’t worried about AI games on the main page

s&box, the successor to Garry's Mod, has been unveiled as an open-source platform aimed at a mature audience, similar to Roblox. It has received a mixed reception on Steam, with many negative reviews citing issues related to AI-generated content. The platform features hastily assembled games, including one titled Terry's Granny (Now with Co-op!). Newman from Facepunch stated that while the studio does not encourage using AI for game creation, they recognize its value as a learning and productivity tool. He emphasized the importance of human creativity and a balanced approach to AI use, suggesting a 50/50 method. Newman mentioned that Facepunch uses AI mainly in early pre-production phases and views it as a tool for learning rather than a replacement for creative processes. He believes that low-quality AI-generated content will eventually be disregarded by users. S&box is now available on Steam for users to explore and contribute to its community.

AppWizard

April 28, 2026

These 3 Android Apps Can Block Ads On Your Phone

Users are increasingly seeking effective solutions to enhance their browsing experience in digital advertising, with some opting for methods beyond traditional ad-blockers, such as configuring a private DNS server to filter ads at the system level. This method can face challenges, including certain applications circumventing settings and networks blocking custom DNS configurations, which may lead to connectivity issues. DNS-based ad-blocking can disrupt app functionality or create voids where ads would typically appear. NextDNS offers customizable blocklists for ad-blocking and functions as a customizable endpoint, requiring users to set it up through Android's native DNS settings. It provides a dashboard with parental controls, tracking protection, and analytics tools, free for up to 300,000 queries per month. AdLock focuses on system-wide ad-blocking across various platforms and requires users to download the APK and subscribe for use on multiple devices, starting at .05 per month. It does not allow ads to be displayed and includes a safety check feature for potential threats. Total AdBlock, developed by Total Security Limited, offers free and premium versions, with the premium version providing full functionality, including ad-blocking on YouTube. It has a high effectiveness score on the AdBlock Tester tool and includes features like content blocking and direct support access. The curated list of ad blockers targets options that do not require root access and are cost-effective, designed to operate at the device level for Android users, as the default Chrome browser does not support extensions. Trustworthiness and reputation were key factors in the selection process, focusing on maintaining a clean browsing experience without invasive tracking mechanisms.

AppWizard

April 28, 2026

10,000 Users Exposed As Fake Document Reader App Delivers Anatsa Banking Trojan

Security researchers from ThreatLabz discovered a malicious document reader app on the Google Play Store that delivered the Anatsa Android banking trojan. The app, which had over 10,000 downloads before its removal, disguised itself as a legitimate file management tool using the package name com.groundstation.informationcontrol.filestationbrowsefilesreaddocs. It employed a "dropper" technique to hide its malicious code, connecting to an external server to retrieve the malware payload after installation. Anatsa is designed to steal financial information by overlaying a fake login screen over legitimate banking apps, capturing user credentials and enabling unauthorized transactions. Users are advised to delete the app and monitor their financial accounts. Technical indicators for identifying infections include the Anatsa Installer SHA256 (5c9b09819b196970a867b1d459f9053da38a6a2721f21264324e0a8ffef01e20), Payload URL (http://23.251.108[.]10:8080/privacy.txt), Payload SHA256 Hash (88fd72ac0cdab37c74ce14901c5daf214bd54f64e0e68093526a0076df4e042f), and Command and Control servers (http://172.86.91[.]94/api/ and http://193.24.123[.]18:85/api/).

AppWizard

April 27, 2026

Wispr Flow launches in India; offers Hinglish and Android app support

Wispr Flow launched in India, focusing on AI-driven voice-to-text technology with support for Hinglish and an Android app featuring a floating button for dictation. India is the company's second-largest market, with the user base tripling in three months through organic growth. Founded in 2021 by Tanay Kothari and Sahaj Garg, Wispr Flow initially focused on brain-computer interface hardware before pivoting to voice-first software. The startup has raised approximately million and was valued at 0 million in late 2025. An offline marketing campaign in Bengaluru involved deploying 100 branded auto-rickshaws to capitalize on high traffic for visibility.

AppWizard

April 27, 2026

Microsoft Lowers the Price of Xbox Game Pass Ultimate And PC Game Pass, But What’s Next For Xbox?

Under CEO Asha Sharma, Xbox has reduced the price of Xbox Game Pass Ultimate from .99 to .99 and PC Game Pass from .99 to .99. The removal of day-one access to Call of Duty is part of this strategy, which aims to address consumer concerns and enhance the service's value. Microsoft reportedly faced a 0 million loss due to including Call of Duty: Black Ops 6 in Game Pass, prompting these price adjustments. Sharma's initiatives include a partnership with Discord, the introduction of Xbox Game Pass: Starter Edition, and plans for a Family Plan. The company is also focusing on improving the Xbox app for PC gaming and reevaluating its approach to exclusives. Frequent updates and player feedback will be prioritized as Xbox prepares for the next generation of consoles, referred to as Project Helix.

Winsage

April 27, 2026

Microsoft tests replacing Windows 11’s Night Light with something better

The "Screen Tint" feature is being tested in a preview build of Windows 11, offering six preset tint colors and customizable settings to enhance visual comfort. The preset colors include pink for alleviating migraines, blue for reducing screen glare, and gray for easing stark contrasts. The feature is part of preview version 26300.8289, with no official launch date announced by Microsoft yet.

Winsage

April 27, 2026

Microsoft drops Copilot branding in Notepad for Windows 11 for everyone, but it’s really just a rename

Microsoft is refining the integration of its AI features in Windows 11 applications, specifically Notepad and the Snipping Tool. On March 20, Microsoft announced plans to streamline Copilot integration, focusing on useful experiences and reducing unnecessary entry points in apps like Notepad, Snipping Tool, Photos, and Widgets. In the latest version of Notepad, 'Copilot' has been rebranded as 'Writing Tools,' which includes AI functionalities such as rewriting, summarizing, and generating new content. These tools are accessible through the Writing Tools menu or the right-click context menu, and users can toggle them off under 'Advanced Features' in Settings. Conversely, the Snipping Tool has completely removed AI functionality, with the Copilot button eliminated for users in the production channel. This indicates a shift in Microsoft's approach to AI integration, retaining it in some applications while removing it from others.

AppWizard

April 26, 2026

Modder brings playable Halo Elite to Warhammer 40K: Space Marine 2

Artist Skykillerr has created a mod for Warhammer 40,000: Space Marine 2 that allows players to play as a Sangheili "Elite" alien from the Halo franchise. The mod features a white "Ultra" Elite from Halo: Reach and contrasts with the "Ultramarine" faction in Space Marine. Currently, the mod is not widely available for public use.

AppWizard

April 25, 2026

Android Hackers Target 800 Banking, Crypto and Social Media Apps With ‘Near-Zero Detection Rates’: Zimperium

Android hackers are targeting over 800 applications in banking, cryptocurrency, and social media sectors, utilizing four active malware families: RecruitRat, SaferRat, Astrinox, and Massiv. These malware employ advanced techniques to evade detection and execute credential theft, unauthorized financial transactions, and data exfiltration. Attackers lure victims through phishing websites, fraudulent job offers, fake software updates, text-message scams, and promotional lures. Once installed, the malware can request Accessibility permissions, obscure app icons, obstruct uninstallation, and steal sensitive information through counterfeit lock screens. They can also capture one-time passcodes, stream device screens, and overlay fake login pages on legitimate applications. The malware uses HTTPS and WebSocket communications to blend malicious traffic with normal activity and may incorporate encryption layers to avoid detection.