banking apps Archives

AppWizard

October 9, 2026

14 Open-Source Android Apps for Privacy & Control

Users are increasingly seeking control over their digital privacy, leading to the rise of open-source Android applications that provide ad-free experiences and offline functionalities. A selection of 14 vetted applications includes: - Essentials: Unlocks system-level customization without rooting, allowing tweaks like custom notifications and app management. - PhotoU: Uses swipe-based sorting to organize photo galleries offline, enhancing user control over images. - PDF ToolKit: Manages PDF documents locally, enabling merging, splitting, and password protection without cloud uploads. - DNSNet: Acts as a local VPN to block malicious sites and ads before they load, enhancing browsing privacy. - Traffic Light: Monitors network usage in real-time, helping users identify data-draining apps. - CareSleep: Provides offline soundscapes for focus, free from ads and subscriptions. - Weather Master: Customizes weather displays with themes and layouts while respecting user privacy. - Block Ads: Filters ads system-wide without disrupting essential apps through smart split routing. - Nora: A privacy-focused browser that optimizes social media use while blocking trackers. - AB Download Manager: Enhances large file downloads through multi-threading and scheduling. - PixelPlayer: A local music player that adapts to wallpaper and operates ad-free. - MPV EX Video Player: Delivers high-quality video playback without ads, utilizing gesture controls. - CaptureCap: A lightweight screen recorder that captures internal audio without rooting. - Deep De-Noiser: Uses offline AI to remove background noise from recordings, ensuring clear audio quality.

AppWizard

October 6, 2026

Googlebook Cross-Device Features Locked Behind Android 17

Google's new Googlebook cross-device features require a smartphone running Android 17 to access functionalities like phone app streaming, task continuity, and shared file access. Only recent Google Pixel models and Samsung foldable devices with One UI 9 come pre-installed with Android 17, leaving many users with older flagship and mid-range devices unable to utilize these features. New models, such as the POCO F9 series, also launch with Android 16, making them incompatible. Additionally, applications with DRM-protected content or sensitive information will not stream to the laptop, displaying a blank privacy screen instead. The features are included at no extra cost, but their availability depends on the smartphone's Android version.

AppWizard

September 19, 2026

New Android malware uses AI to take over your phone

A new Android malware called RatHat has emerged, analyzed by researchers from Zimperium's zLabs. It spreads through deceptive smishing texts and malicious ads that lead users to counterfeit download pages for popular apps. Once installed, it manipulates Android's Accessibility Service to gain elevated access by enabling Wireless Debugging and retrieving authentication codes without user intervention. RatHat targets finance and banking apps to steal user IDs, passwords, and MFA codes, using techniques to obtain touch coordinates for PIN recovery. It can intercept SMS messages, gain limited control of the device, and reinstall itself. Users are advised against sideloading apps and granting unnecessary accessibility permissions. Google's Advanced Protection Mode and Malwarebytes for Android can help mitigate risks associated with RatHat.

AppWizard

September 9, 2026

Hackers Clone Banking Apps into Hidden Profiles, Android Malware Raises New Fraud Concerns

Cybercriminals are using advanced Android malware that mimics banking applications within hidden Work Profiles to bypass traditional fraud detection systems. This method is linked to Gigabud, a Remote Access Trojan active since at least 2022, and Vwork, an application cloning tool based on open-source software. Attackers distribute phishing links via social media and messaging, tricking victims into installing malicious files disguised as legitimate utilities. Once installed, the malware seeks Accessibility permissions and other capabilities to capture screen credentials and control the device. Vwork creates an isolated Work Profile to duplicate banking apps, allowing attackers to conduct fraudulent transactions without triggering security alerts in the personal space. Instances of counterfeit financial applications operating from these isolated environments have been documented, particularly in Indonesia. Between February and July 2026, monitoring revealed around 1,469 compromised devices and 1,281 compromised account credentials in Indonesia, resulting in estimated financial losses of 8.2 crore rupees. The operation is believed to be part of a larger international campaign linked to GoldFactory, with malware targeting users in multiple countries including Brazil, Colombia, Egypt, and others. Security experts warn that unusual Work Profile installations, duplicated banking apps, and unexpected requests for Accessibility permissions indicate a compromised device. Users are advised against sideloading APK files from private messages and should limit sensitive permissions to verified applications. Researchers emphasize the need for financial institutions to adopt behavioral analysis to detect unauthorized transactions effectively.

AppWizard

September 9, 2026

Gigabud Uses Android App Cloning to Evade Fraud Detection

The Gigabud Android banking trojan can clone banking applications into a separate Android work profile, allowing fraudsters to bypass malware alerts during transactions. Research by Group-IB, released on September 9, indicates that Gigabud is used with Vwork, a modified app for cloning, attributed to the GoldFactory group. The infection has been confirmed in Indonesia but targets 11 countries, including Brazil, Colombia, Egypt, Mexico, Thailand, and Turkiye. Vwork uses Android's Work Profile feature to isolate cloned apps, making them less detectable. This allows operators to install malware, clone banking apps, and execute transactions without raising alarms. During fraud, fake login screens capture credentials, and an invisible overlay collects lock screen codes. From February to July 2026, 1,469 devices were compromised in Indonesia, with financial losses nearing 0,939. Gigabud spreads through phishing and social media, requesting permissions to control devices. Group-IB identified six behavioral signals for banks to monitor as indicators of high-risk sessions. Recommendations include device binding and downloading apps only from official stores.

AppWizard

September 8, 2026

7 Ways To Use Private Space On Your Android Device That Are Actually Helpful

Google's Private Space is a feature on Android devices that creates a secure environment for managing sensitive information. It allows users to lock banking apps, providing a secure vault that is hidden from the main interface and protected from malware and unauthorized access. Users can enhance security with a unique PIN or biometric authentication, and the space locks automatically when the smartphone is secured. Private Space also serves as a secure repository for personal documents, enabling users to move files like PDFs and IDs into it, ensuring they remain inaccessible until the space is locked. Additionally, Private Space allows users to separate personal and professional digital lives by logging into a different Google account, maintaining distinct emails, contacts, and calendar events. Users can install separate instances of messaging and social media apps within Private Space to manage multiple accounts securely. It also helps keep dating apps hidden, protecting users' privacy and personal data. When sharing devices, Private Space ensures personal data remains secure behind authentication. Lastly, it allows users to store data locally without syncing to the cloud, prioritizing privacy over convenience.

AppWizard

August 19, 2026

Monzo users reporting issues with the online banking app

Reports of difficulties with the Monzo app began around 11 a.m., escalating to over 3,000 users reporting issues by 1 p.m. and more than 1,000 continuing to report problems by 4 p.m. Users in major cities, including Liverpool, Leeds, London, Birmingham, and Edinburgh, experienced disruptions. A survey revealed that 76% of users faced issues, with 11% struggling with funds transfers and 9% with mobile banking. Monzo acknowledged the difficulties, stating that the app was "experiencing issues" and full functionality was temporarily unavailable, but essential services like card payments and cash withdrawals remained operational. Monzo's spokesperson indicated they were addressing a technical issue and had switched to their backup system, Monzo Stand-in, allowing most features to continue. Downdetector is a platform for users to report issues with various services, tracking problems by comparing user reports to typical levels for that time.

AppWizard

July 5, 2026

Android users warned about fake app stealing bank details

A malicious application posing as a document reader has been downloaded over 100,000 times and installs the Anatsa banking trojan on Android devices. This app has bypassed Google's security checks and remains available on the Play Store. The Anatsa Trojan is designed to steal sensitive financial information by monitoring users' banking apps and intercepting login processes through a fake overlay that mimics legitimate interfaces. It requests extensive permissions, allowing it to observe screens, capture keystrokes, and interact with the device. Users are advised to review installed applications and monitor bank statements for unauthorized activity.

AppWizard

June 26, 2026

Banking Apps, No Google, and a Locked Bootloader: How iodé Makes Privacy Android Work for Everyone

Brian from iodé discussed the project's goal of creating a user-friendly, privacy-focused Android distribution. Key features include a tracker blocker that enhances user privacy and two app stores—F-Droid and Aurora Store—to address app compatibility concerns. Users can uninstall pre-installed apps and experience reduced notifications and ads. iodé promotes sustainability by encouraging the use of refurbished devices and aims to support a wider range of devices beyond just Google Pixels. The user base is estimated at over 10,000 individuals across various countries, with a focus on privacy and usability. iodé offers integrated privacy features and monthly security updates, supporting over 60 devices.

AppWizard

June 21, 2026

The Useful Privacy Feature That Isn’t Enabled By Default On Your Android Phone

Private Space is a privacy feature available on Pixel and select Android devices, while Secure Folder is exclusive to Samsung devices. Both create a secure area within the smartphone for sensitive applications and data storage, operating independently from the primary user profile. Users can install apps and store files in these secure spaces without compromising their main profile's integrity. To activate Private Space, users navigate to Settings > Security and Privacy > Private Space, requiring a Google Account sign-in and a unique lock. For Samsung devices, the path is Settings > Security and Privacy > More Security Settings > Secure Folder, requiring a Samsung account. Private Space cannot be used on managed devices or with supervised accounts, and only the primary user can manage these secure areas. The Private Space or Secure Folder icon can be hidden for added security. The private area is distinctly separated from the core user profile, preventing open communication between the two spaces to safeguard against data harvesting. Android allows granular control over app permissions, and users are advised to isolate questionable apps within Private Space or Secure Folder to protect sensitive information.