banking Archives

AppWizard

April 17, 2026

New RecruitRat, SaferRat, Astrinox, Massiv Android Malware Found Targeting 800 Apps

Cybersecurity researchers from Zimperium zLabs have identified four families of Android malware—RecruitRat, SaferRat, Astrinox, and Massiv—targeting banking and cryptocurrency applications. These malware families can extract sensitive information from over 800 applications. They primarily use phishing and smishing to lure users into downloading malicious software. Phishing involves creating fake websites resembling legitimate login pages, while smishing uses urgent text messages with links to download harmful payloads. RecruitRat targets job seekers with fake employment websites, and SaferRat promises free access to premium video services. Astrinox mimics a business tool and has been linked to a fraudulent Apple App Store page, while Massiv's distribution methods remain unclear. Once installed, these malware applications initiate Overlay attacks, displaying counterfeit screens to capture user credentials. They also use a "blindfold" technique to obscure their activities by overlaying static images on the user's screen. The malware can intercept security codes, capture one-time passwords, and employ keylogging techniques. RecruitRat has a library of over 700 counterfeit login pages that activate with targeted apps. Researchers recommend avoiding links in urgent messages and downloading apps only from official sources.

AppWizard

April 17, 2026

India drops proposal to mandate national biometric ID app on iPhones and Android phones

The Indian government has decided to abandon a proposal that would have required the pre-installation of the Aadhaar biometric ID app on smartphones from major manufacturers like Apple and Samsung. This decision was announced by the Unique Identification Authority of India (UIDAI) after significant pushback from the tech industry. Concerns raised by manufacturers included device security, compatibility issues, and increased production costs due to the need for separate manufacturing lines for the Indian market. The Ministry of Information Technology expressed reluctance to enforce the requirement, and UIDAI confirmed that the government is not in favor of mandating the app's pre-installation.

Tech Optimizer

April 16, 2026

MiningDropper Android Malware Exploits Lumolight App

Researchers at Cyble Research and Intelligence Labs (CRIL) have discovered an Android malware framework called MiningDropper, which is being used in various campaigns to distribute malicious payloads such as cryptocurrency miners, infostealers, Remote Access Trojans (RATs), and banking malware. Over 1,500 MiningDropper samples were detected in one month, with many showing minimal antivirus detection. MiningDropper operates as a multi-stage delivery framework that employs techniques like XOR-based obfuscation and AES encryption to evade detection. A recent variant uses a trojanized version of the Lumolight application as the initial infection vector, often spread through phishing links and fraudulent websites. The malware executes a series of stages, starting with decrypting an embedded asset and loading additional payloads, including a counterfeit Google Play update interface to deceive users. Two main campaign clusters have been identified: an infostealer campaign targeting Indian users by impersonating trusted entities, and a global campaign distributing the BTMOB RAT, which enables credential theft and device takeover. The final payload capabilities include extracting sensitive data, enabling full device compromise, facilitating financial fraud, and unauthorized cryptocurrency mining. MiningDropper's modularity allows it to adapt and scale across various campaigns while maintaining low detection rates.

AppWizard

April 16, 2026

Your Android phone could soon get a better way to sniff out spoofed calls

Google is enhancing the security of incoming calls on Android devices by integrating a "Verified Caller" feature into Google Play Services. This feature aims to combat scam calls that use Do-Not-Originate (DNO) numbers by cross-referencing incoming calls against a database of DNO numbers to flag potential scams. The system will work with existing applications, such as banking apps, to monitor specific DNO numbers. The feature is still in development and its effectiveness will depend on business participation and strict verification processes by Google.

Tech Optimizer

April 15, 2026

Bitdefender Total Security

Bitdefender Total Security includes features such as a network security inspector, advanced ransomware defense, a hardened browser, and an active Do Not Track system. It offers a two-tier pricing model: an individual subscription for .99 per year for five licenses and a family subscription for .99 for 25 licenses, which includes parental controls. The software features an interface similar to Bitdefender Antivirus Plus, with user-configurable buttons for quick access to features. It boasts high scores from independent antivirus testing labs and excels in malware protection and antiphishing tests. Bitdefender includes a SecurePass password manager, firewall protection, spam filtering, webcam protection, and cryptomining protection. The parental control features allow parents to manage their children's online activities, but they may not be as effective as dedicated solutions. Bitdefender Total Security provides protection for macOS and Android, with high ratings for its performance on these platforms. The Android app includes malware scanning, web protection, and anti-theft features. The Bitdefender Central app allows users to manage their security settings from mobile devices.

Tech Optimizer

April 14, 2026

Norton (durch Symantec Übernahme teilweise verknüpft, aber Marke liegt bei Gen Digital. Broadcom i

Norton, owned by Gen Digital, provides antivirus software, VPN services, and identity theft monitoring to protect users from cyber threats such as malware and phishing attacks. The company emphasizes subscription-based revenue through Norton 360, which bundles various security features, ensuring predictable cash flow. Norton competes with other antivirus brands like McAfee and Bitdefender, maintaining a strong market share in North America due to its established brand trust. The demand for cybersecurity tools is driven by rising cyber threats, including ransomware attacks and increased remote work, which necessitate robust online protection. Gen Digital is investing in AI-driven threat detection and expanding its offerings to address evolving security needs. However, Norton faces challenges from free alternatives, potential privacy concerns, and macroeconomic pressures that could affect consumer spending on security products.

AppWizard

April 11, 2026

Crimson Desert turns a beloved bug into a feature and makes its bonus protagonists actually worth using

Developer Pearl Abyss has released significant updates for Crimson Desert as part of their weekly patch cycle. The latest patch includes the introduction of the 'Focused Aerial Roll' skill for Kliff, allowing players to perform aerial maneuvers. Characters Damiane and Oongka have received upgrades with new skills like Axiom Force and Nature's Snare shield, and enhancements to their existing abilities. Five new camera settings have been added for customization, and improvements have been made to lock-on mechanics during boss encounters. The gameplay menu now features 'weapon display' toggles, adjustable font sizes, and increased fast-forward speeds for dialogue scenes. Fast travel has been revamped to allow teleportation while mounted or climbing, and clearer indicators for Abyss puzzles have been implemented. A camp upgrade has improved NPC placements and expanded farm areas, while basic banking services are now available even in a 'wanted' state. Additional UI enhancements and fixes have been made to streamline the gameplay experience. The patch 1.03.00 is now live on Steam and the Epic Games Store.

AppWizard

April 10, 2026

22 of Russia’s 30 most popular Android apps monitor whether users have VPN enabled, study finds

Recent research by RKS Global found that 22 out of the top 30 Android apps in Russia monitor users' VPN status. Banking apps like T-Bank, Sberbank, VTB, and Alfa-Bank are leading this trend, along with Yandex and VK applications such as Yandex Browser and VKontakte. Online marketplaces including Wildberries, Ozon, MegaMarket, and Samokat also track VPN usage. In total, 18 of the 30 apps transmit VPN status data to their servers, while 24 send lists of installed applications. Yandex Browser uniquely searches for the Tor browser, and Samokat and MegaMarket retrieve lists of installed VPN apps. The Russian Digital Development Ministry has mandated that major internet platforms restrict access for users with VPNs by April 15.

AppWizard

April 10, 2026

Android 16 April 2026 Update Tackles Pixel UI Fixes and App Crashes

Google has released the April 2026 Android 16 update, which includes security patches and improvements for Pixel devices. The update, launched on April 10, 2026, addresses issues such as app crashes, missing user interface elements, and game performance. It is compatible with devices from the Pixel 6 to the Pixel 10 series and features region-specific variations to meet local regulations. Key fixes include resolving crashes in banking apps, restoring the Backup menu and Quick Share functionalities, and enhancing the home screen search bar.

Winsage

April 9, 2026

This fake Windows support website delivers password-stealing malware

A phishing campaign has been identified that uses a counterfeit Microsoft support website, microsoft-update[.]support, to trick users into downloading a malicious Windows update disguised as WindowsUpdate 1.0.0.msi. This file, created on April 4, 2026, appears legitimate but contains malware designed to steal sensitive information. The campaign targets French-speaking users, leveraging recent data breaches in France to create convincing scams. The malware, once executed, installs an Electron application that runs a Python interpreter, which then deploys various data theft tools. It employs two persistence mechanisms: modifying the Windows registry and creating a shortcut in the Startup folder. The malware connects to external sites for reconnaissance and data exfiltration, using domains like datawebsync-lvmv.onrender[.]com and store8.gofile[.]io. The malware's components have evaded detection by antivirus tools, with VirusTotal reporting zero detections for the main executable and its launcher. Users are advised to check their registry, remove suspicious files, change passwords, and run a full system scan if they suspect installation of the malicious update. Safe updating practices include using the built-in Windows update feature and being cautious of phishing attempts. Indicators of compromise include specific file hashes, domains associated with the phishing campaign, and file system artifacts related to the malware's installation.