Asia Archives

AppWizard

September 29, 2026

Opera For Android Adds Free 3GB Travel eSIM To Rival US Roaming Passes

Opera has integrated a built-in travel eSIM into its Android web browser, allowing international travelers to access cellular connectivity without expensive roaming fees. The company is offering a promotional trial that includes 3 GB of free mobile data for three days in 47 major destinations. This feature provides comprehensive cellular data access across the smartphone's operating system, enabling essential apps to function without physical SIM swapping. The activation process does not require credit card registration or personal email verification and can be completed within the app. The service is designed for American travelers as a cost-effective alternative to high international day passes from U.S. carriers. It operates in partnership with Holiday.com, offering additional paid data bundles of 3 GB, 5 GB, and 10 GB with 30-day validity at competitive prices. Users must have a carrier-unlocked smartphone running Android 10 or newer with eSIM support, and the service is exclusive to the standard Opera for Android client. It supports high-speed 5G networks where available and covers popular destinations in Europe, Asia-Pacific, and the Americas.

BetaBeacon

September 19, 2026

Architect: Land of Exiles Officially Launches Across Nine Asian Markets

Architect: Land of Exiles, an MMORPG developed by AQUATREE and published by DRIMAGE, officially launched across nine Asian markets on September 16, 2026. The game features large-scale Realm vs. Realm battles, automatic translation for language barriers, and a design philosophy called "ZERO STRESS PLAY" to reduce repetitive grinding. Pre-registration generated significant demand, with all servers filling up quickly. Players who completed pre-registration will receive various rewards. CEO Wooyong Chung hopes the game will provide a new cooperative and competitive experience for users in major Asian markets.

AppWizard

September 15, 2026

Active Exploitation Alert: Threat Actors Abuse Anthropic Claude AI to Extract Secrets from 1.8M Android Apps in Major Credential Theft Campaign

Between December 2025 and August 2026, a coalition of advanced threat actors exploited the Claude AI model by extracting sensitive information from approximately 1.8 million Android applications. The operation involved groups such as ShinyHunters, Midnight Blizzard (APT29/Nobelium), and the Chinese-speaking entity GTG-10007. They automated the mass download, decompilation, and analysis of Android APKs for hardcoded credentials, API keys, and authentication tokens, leading to extensive credential theft and breaches across various sectors. The attack utilized a distributed pipeline on ten AWS EC2 instances to download APKs, which were then scanned using TruffleHog. Verified secrets were organized and routed in real-time to a private Telegram group for operational deployment. Over 2,100 Azure AD authentication tokens were extracted from more than 40 Microsoft tenants within 34 hours. The operation also included a carding component where stolen payment card data was sold. The tactics employed aligned with several MITRE ATT&CK techniques, including file discovery, unsecured credentials, valid accounts, phishing, and exploitation of remote services. ShinyHunters gained administrative control over targeted environments rapidly, leading to bulk data theft affecting over 200 organizations. Midnight Blizzard automated malware creation and phishing campaigns, targeting government and defense entities. GTG-10007 used Claude for coordinated offensive operations, discovering zero-day vulnerabilities and delivering exploits. Initially, the campaign targeted a broad range of Android APKs but later focused on organizations with valuable credentials across various sectors, including government, technology, and healthcare. Compromises were confirmed in Southeast Asia, Europe, and the Middle East. Organizations are advised to audit Android applications for hardcoded secrets, monitor API key usage, and implement robust security practices to mitigate risks.

AppWizard

September 10, 2026

Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

The Gigabud banking trojan installs a secondary Android application called Vwork, which creates a work profile on compromised devices to evade detection from banking app security measures. This work profile separates its contents from the personal space of the device, allowing fraudulent transactions without triggering alerts. Group-IB confirmed this operational chain in Indonesia, where Gigabud has been active since 2022 and is linked to the GoldFactory group, which uses deceptive tactics to distribute the trojan. Vwork simplifies the creation of a work profile and communicates with an external server for authorization before cloning apps. The report indicates that Vwork has been detected in various countries, while approximately 1,469 devices and 1,281 logins were compromised in Indonesia, leading to estimated losses of around ,000,000. Users can check for a work profile in their phone's settings and are advised to download apps only from official stores and to deny unnecessary Accessibility access.

Tech Optimizer

September 4, 2026

EDB Highlights Postgres AI Growth in Regulated Enterprise Markets

EnterpriseDB (EDB) has reported advancements in the adoption of its EDB Postgres AI (EDB PG AI) platform, which integrates transactional, analytical, and AI workloads. While 95% of enterprises aspire to become their own AI and data platforms within three years, only 13% have achieved this. EDB PG AI supports existing systems and prepares enterprises for future AI capabilities. A case study highlights PAC 2000A Conad, which restructured its data infrastructure with EDB PG AI, serving over 1,600 stores and 7,000 devices. In Korea, over billion has been invested in the sovereign AI market, with organizations seeking hybrid and on-premises solutions despite challenges from fragmented data environments. Notable users of EDB PG AI include the Industrial Bank of Korea and Shinhan EZ Insurance. EDB PG AI is built on Postgres and allows enterprises to optimize data and AI capabilities with governance at the data layer.

Tech Optimizer

September 2, 2026

Gen Digital stock dips after valuation call amid steady cybersecurity momentum

Gen Digital stock (ISIN US3687361044) traded at 30.02 dollars on September 1, 2026, reflecting a 3.2 percent decline from the previous close. The stock is within a 52-week trading range of 17.78 to 31.29 dollars, currently less than 4 percent below the 52-week high of 31.29 dollars. The intrinsic GF Value for the shares is estimated at 33.22 dollars, indicating the current price is 9.6 percent below this fair value. The stock has increased approximately 69 percent from its 52-week low of 17.78 dollars. Gen Digital introduced the Fearless Planet Index, showing North America with an average digital risk score of 29.6 percent, Europe at 28.5 percent, Asia-Pacific at 27.4 percent, the Middle East and Africa at 25.6 percent, and Latin America at 22.0 percent. The stock is quoted at 30.02 dollars on Nasdaq as of September 1, 2026.

Tech Optimizer

August 29, 2026

90% of APAC Gen Z Experienced Cyber Incidents: Kaspersky Study

Recent research from Kaspersky highlights that 57% of Generation Z spends more time online than offline, with 75% of APAC Gen Zs using smartphones for daily internet access. Approximately two-thirds of Gen Zs in APAC feel comfortable navigating the digital environment, with confidence levels peaking at 77% in Indonesia and 71% in Vietnam. However, only 26% consider their knowledge of digital risks advanced, with India leading at 35%. Only 22% of Gen Zs in APAC use antivirus software, and 35% change their passwords regularly. Alarmingly, 90% have experienced at least one cyber incident in the past year. Smartphones are seen as critical for storing personal documents and passwords, yet only a third of Gen Zs back up important information regularly. Kaspersky emphasizes the need for cybersecurity measures to be integrated into daily routines and has introduced an interactive game to raise awareness among Gen Z users. The study surveyed 7,200 respondents across 18 countries in March 2026.

AppWizard

August 28, 2026

Google gives Android developers until February to use less RAM

AI data centers are consuming memory chips faster than the semiconductor industry can adjust production, affecting the Android ecosystem. Google announced new memory reduction requirements for all applications on Google Play due to hardware supply constraints impacting device memory availability. Every Android application must comply with revised performance thresholds for dynamic memory usage and bitmap allocation, with developers exceeding limits receiving automated notifications. A Memory Limiter tool will be introduced to enforce compliance by restricting non-compliant applications' memory usage. Budget Android devices, particularly those with 4GB of RAM, are at greater risk of crashes without optimization from developers. This policy will impact millions of users in regions with affordable Android phones. Chip foundries like Samsung, SK Hynix, and Micron are reallocating production capacity towards High Bandwidth Memory for AI training chips, leading to a tighter supply of conventional DRAM for consumer devices. Google has not specified numerical thresholds for compliance, and the consequences for non-compliance remain unclear, with only warnings mentioned. The Memory Limiter tools are expected to be rolled out before the end of 2026, with full enforcement starting in February 2027, and a second requirement, Zero Tap Sign-In, will be introduced in April 2027. Development teams should prepare for these changes in the latter half of 2026.

AppWizard

August 17, 2026

How to Promote Your PC Game in China — An Interview with Asia Game Buzz

Ksenia Zubareva is the CEO of Asia Game Buzz, a company focused on promoting PC games in China. She discussed how Steam operates in the Chinese market, highlighting the challenges and opportunities present. Ksenia emphasized the importance of understanding local consumer behavior and using social media for game promotion without needing a license. She also shared her views on the potential leniency of Chinese authorities towards Russian projects regarding the issuance of ISBNs for game distribution.

Winsage

August 14, 2026

APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit

CoolClient is a sophisticated backdoor family linked to the HoneyMyte APT group, actively used in cyber-espionage campaigns targeting organizations in Asia and Russia since its initial disclosure in 2022. It has capabilities such as keylogging, clipboard theft, credential harvesting, and system reconnaissance. Investigations in 2023 revealed enhancements, including clipboard theft and HTTP traffic interception. By late 2025 and into 2026, a variant was noted that could deploy a signed kernel-mode driver as a Windows service, improving its stealth and operational capabilities. In a recent campaign targeting Myanmar, the HoneyMyte group used PlugX to deploy CoolClient components. They configured Microsoft Defender to exclude a fake Windows Defender installation directory and a renamed executable, defender.exe, to avoid detection. Persistence was achieved through a scheduled task that executed defender.exe with SYSTEM privileges at startup, which sideloaded the malicious libngs.dll to initiate the CoolClient execution chain. The latest CoolClient variant has a multi-stage execution chain, including: - defender.exe / Sang.exe: Exploited legitimate application for DLL sideloading. - libsrapc.dll: Benign dependency for the Sangfor application. - libngs.dll: First-stage loader that decrypts and loads the next stage. - loadcert.ini: Second-stage DLL implementing core functionalities. - cert.ini: Final-stage implant for command and control communication. - time.ini: Configuration file for CoolClient. The execution begins with the legitimate Sangfor application loading libngs.dll, which uses obfuscation to conceal its operations. The second stage, loadcert.ini, is injected into synchost.exe and performs tasks including persistence and process injection. The kernel-mode driver deployment routine involves decrypting time.ini, verifying privileges, and creating a service to execute the driver, enhancing stealth. The deployed kernel-mode driver, msagent.sys, is digitally signed and helps hide processes, files, and registry objects, making detection more difficult. The latest variant continues to target organizations consistent with previous HoneyMyte activities, with confirmed victims in Myanmar, Mongolia, Pakistan, and Russia, including government entities. The deployment of CoolClient as a secondary backdoor after a PlugX infection indicates a strategic approach to maintain access to compromised systems. The malware is confirmed as a new variant of CoolClient associated with the HoneyMyte threat group, with the kernel-mode driver marking a significant advancement in its capabilities.