APK Archives

AppWizard

June 22, 2026

Google Photos may have a new trick to make your pictures look dramatically different

Google Photos is set to introduce a new feature called Moods in version 7.81 of the app, which utilizes artificial intelligence for photo editing. Moods offers eight distinct templates: Airy Minimalist, Crisp 35mm, 2000’s Cinema, Rich Textures, Pink Digicam, Retro Contrast, Night Lights, and 2000’s Night, each designed to evoke specific visual styles. The feature aims to provide a more personalized editing experience by analyzing images individually rather than applying uniform filters. Although Moods is not yet operational, it represents a shift towards a more AI-driven editing experience in Google Photos. An APK teardown indicates potential features, but there is no guarantee they will be publicly released.

AppWizard

June 22, 2026

Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries

Google will implement Android developer verification on September 30, 2026, in Brazil, Indonesia, Singapore, and Thailand. Certified Android devices will block installations of apps from unverified developers, affecting both Google Play and major device-maker app stores. Starting June 2026, the Android Developer Verifier will ensure apps are associated with verified developers before installation. Unregistered apps will not install via standard methods post-September 30 but can be sideloaded through a complex process. Developer registration began in March, requiring legal identification and app ownership verification. Google aims to combat malware with this initiative, which has faced backlash from open-source advocates like F-Droid and the Keep Android Open campaign. The global rollout is set for 2027, with ongoing concerns about appeals processes and the impact on pseudonymous developers.

AppWizard

June 21, 2026

Sideloading Android apps is great — until you have to update them. Here’s my fix

Obtainium is a free and open-source sideload manager designed to simplify the updating process for sideloaded Android applications. Users can add their sideloaded apps to Obtainium’s tracking list after a one-time setup, allowing the app to monitor these sources for updates in the background. Obtainium supports various sources, including GitHub, GitLab, F-Droid, APKMirror, and Uptodown. The app checks for updates every six hours and can either download and install updates automatically or notify the user. Setting up Obtainium involves downloading the APK, adding app source URLs, and ensuring the correct source is used for each app. However, it has limitations, such as relying on HTML scraping for websites without an API and potential API rate limits for GitHub apps. Additionally, Obtainium may have read-only access to certain sites, requiring users to manually update apps in some cases.

AppWizard

June 17, 2026

New Rokarolla Android Trojan Targets 217 Banking and Crypto Apps

Zimperium’s zLabs researchers have analyzed a newly identified Android banking trojan named Rokarolla, which targets 217 distinct banking and cryptocurrency applications. It is distributed through malicious websites that impersonate popular platforms like TikTok and Google Chrome, with one identified distribution point being hxxps://infocontablidades[.]it[.]com/. The malware uses a dropper disguised as Google Play Protect to install a second-stage payload and gain Accessibility Services access, allowing it to simulate user interactions and manipulate on-screen elements. Rokarolla downloads counterfeit HTML login pages for targeted applications and overlays them to capture user credentials, including sensitive card information. It can also deploy a fraudulent PIN entry screen, read and send SMS messages, intercept one-time codes from banks, and block incoming calls. The malware rewrites the clipboard, operates a keylogger and screen content logger, and scrapes WhatsApp contact data. It captures screenshots without alerting users and has a resilient command-and-control infrastructure with multiple fallback domains. No product flaws are exploited, and defenses against it include installing apps only from Google Play and being cautious with Accessibility Services. Zimperium’s Mobile Threat Defense and zDefend products can detect Rokarolla, and a list of indicators of compromise is available on their GitHub repository.

AppWizard

June 16, 2026

New Rokarolla Android malware targets 217 banking, crypto apps

A new Android banking trojan named Rokarolla targets 217 banking and cryptocurrency applications and features 137 commands for malicious activities. It is distributed via deceptive websites posing as legitimate application sources and impersonates Google Play Protect to lure users into installing infected apps. Once installed, it seeks Accessibility service permissions and access to notifications, SMS, and calls. Rokarolla communicates with a command-and-control server, sending device profiles to generate unique identifiers for victims. Its primary goal is to steal financial information by using deceptive login overlays to capture sensitive data and maintain control over the device. The malware employs evasion tactics such as disabling Google Play Protect, hiding its icon, silencing notifications, and keeping the screen awake. It can steal SMS messages, extract contacts, capture keystrokes, record screen content, manipulate clipboard contents, block calls, and take screenshots. Zimperium confirms that Rokarolla is not found on Google Play, and users are advised to avoid downloading APK files from untrusted sources and to be cautious with Accessibility permissions.

AppWizard

June 16, 2026

3 unofficial Android Auto apps I installed to make my car screen more useful

Android Auto offers a limited selection of applications due to restrictions imposed by Google, but users can enhance its functionality by sideloading unofficial apps from outside the Play Store. Sideloading allows for the installation of additional applications that can significantly improve the driving experience, especially for owners of older vehicles. To sideload apps on Android Auto, users must unlock developer mode on their phone and Android Auto, then install the Android Auto Apps Downloader (AAAD) to access unofficial apps. Three notable sideloaded apps include: 1. CarStream: Allows users to access YouTube on Android Auto, enabling video searches and subscriptions while the vehicle is in motion. 2. AA Browser: Provides a web browsing experience on Android Auto, ideal for accessing websites that may not support the platform natively. 3. Fermata Auto: An all-in-one media toolkit that plays locally stored videos and music, screen mirrors, and allows live TV viewing through IPTV links.

AppWizard

June 16, 2026

Commodore announces Linux-based flip phone with ‘no social media, no browser’ — the Callback 8020 will be available in five retro colorways starting at $499, runs 99% of Android apps

Commodore has introduced the Callback 8020, a retro-inspired flip phone designed to promote a digital detox by eliminating distractions found in modern smartphones. It operates on a customized version of the Jolla Sailfish OS, allowing compatibility with Android apps while restricting browsers and social media. The device features high-quality audio capabilities, a minimal closed clamshell display, a 3.25-inch IPS screen, a selfie camera, a 48MP Sony camera, and Dual-SIM functionality. Accessories such as Snapback packs and Hardback cases will be available. The Callback 8020 includes classic and modern Commodore 64 games and will be offered in five colorways, priced at , with pre-orders starting at the end of the month.

AppWizard

June 8, 2026

NFCShare Android malware spreads via fake banking app updates on GitHub

New variants of the NFCShare Android malware are disguised as fake updates for legitimate banking applications and are targeting customers of various banks in Europe through a phishing campaign to steal sensitive payment card data. The malware prompts victims to place their cards near the NFC chip of their mobile devices, using Android’s IsoDep interface to read card information, including card number, type, expiry date, and a 4-digit PIN. The stolen data is exfiltrated to the attacker’s command-and-control host via a WebSocket channel. Recent attacks began on May 14, with victims directed to a phishing site that impersonates a legitimate bank and then to a GitHub repository hosting a malicious APK file. The repository has hosted 56 unique APKs impersonating banking applications primarily from Italy and Spain. The malware has evolved from initially targeting Deutsche Bank in Germany to a broader range of banks. The latest version features malformed APK packaging to complicate automated analysis. Users are advised to download banking applications only from Google Play and to be cautious of verification requests that ask for NFC card scans.

AppWizard

June 8, 2026

Survey shows most of you are still sideloading apps

Google implemented new restrictions on the installation of applications from sources outside the Play Store. A poll by Android Authority found that 43% of 3,661 respondents regularly sideload applications, while just over a third reported doing so a few times. About 20% claimed they had never installed apps from outside the Play Store.

AppWizard

June 8, 2026

Android Sideloading in 2026: Which Apps Are Worth Installing Outside the Play Store

VidMate apk is a widely used application that operates outside the Play Store and continues to do so into 2026. Sideloading is the process of installing an Android app from a source other than the Google Play Store, using the APK file format. Android supports sideloading, allowing users to enable installations from unknown sources in their device settings. As of 2026, Google requires developers distributing apps outside the Play Store to register, verify their identity with a government-issued ID, and pay a one-time fee. This policy aims to enhance security without eliminating sideloading. Enforcement began in select countries in September 2026 and will continue globally through 2027. Concerns have been raised about the potential barriers this creates for independent developers. In 2026, apps from developers with official websites and established histories are considered safer, while those from anonymous sources carry increased risks. Notable categories of sideloaded apps include video downloaders like VidMate, open-source YouTube clients like NewPipe, ad-blocking browsers, and privacy-focused tools. To install sideloaded apps safely, users should enable the option to install from unknown sources in their device settings and download from official developer websites or trusted repositories like APKMirror, F-Droid, or GitHub. Users should avoid sites that do not identify the app's creator or host unverified uploads.