contacts Archives

AppWizard

March 26, 2026

Phishing Campaign Targeting Messaging Apps’ Users

A phishing campaign targeting users of messaging applications has been reported by the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI). This campaign exploits human behavior rather than software vulnerabilities, leading to the compromise of thousands of accounts worldwide, despite encryption. Attackers impersonate official support accounts and use social engineering tactics to prompt users to click on malicious links, request verification codes, or suggest account recovery actions. If users comply, attackers can take control of their accounts and may deploy malware. Platforms like Signal have been specifically targeted, but the tactics can apply to various messaging applications. Recommendations for users include being cautious with suspicious messages, avoiding unknown requests, carefully checking links, monitoring group chats for fake accounts, using built-in security features, and reporting incidents promptly.

AppWizard

March 25, 2026

Alert warns of cyber actors using Telegram messaging app to push malware

The FBI issued an alert on March 20 about a sophisticated cyber technique linked to the Iranian government, using the Telegram app to distribute malware globally. This has led to data breaches and reputational damage for many victims. The FBI provided recommendations for organizations and individuals to enhance cybersecurity, including staying informed about cyber threats, implementing security protocols, and educating employees on suspicious communications. Contacts for further insights at the AHA include John Riggi and Scott Gee, with resources available at aha.org/cybersecurity.

AppWizard

March 24, 2026

Russia pushes unencrypted Max messenger as WhatsApp, Telegram face restrictions

The Max messenger app, launched by VK in March 2025, has gained popularity in Russia, particularly as the government restricts messaging apps like WhatsApp and Telegram. The app combines messaging, social media, government services, digital identification, and banking. President Vladimir Putin supports it as a means to achieve "technological sovereignty," and a law designates Max as a "national multifunctional messenger." Digital Development Minister Maksut Shadayev has promoted Max, which is also featured prominently on state television. Although not mandatory, there is significant pressure on citizens to use it, with schools and corporations transitioning communications to Max. As of March, the app surpassed 100 million users and is on Russia's "white list" of digital services that remain operational during internet blackouts. Since September, it has been pre-installed on all phones and tablets sold in Russia, with the RuStore app store being mandatory for Apple devices. Max does not offer end-to-end encryption, and user data is stored on Russian servers, with policies allowing data sharing with authorities. Critics, including the Budushcheye political movement, express concerns about surveillance and the app's functionality as a "digital trap." Despite government assurances, disruptions on Telegram and WhatsApp have been reported, with limitations on calls initiated by the government citing non-cooperation from these foreign-owned services.

AppWizard

March 23, 2026

Russian hackers hijack thousands of ‘high intelligence’ messaging app accounts, FBI warns

Hackers linked to Russian intelligence are targeting high-profile users of popular messaging applications, according to a warning from the FBI and CISA. The primary targets include U.S. government officials, military personnel, political figures, and journalists. The attackers compromise accounts to access messages and contact lists, allowing for further phishing attempts. Signal users are particularly at risk, though techniques can extend to WhatsApp and Telegram. The hackers use social engineering tactics, impersonating official support accounts to trick users into revealing sensitive information. The FBI and CISA advise users to be cautious of unexpected messages and suspicious links. Victims are encouraged to report incidents to the Internet Crime Complaint Center (IC3).

AppWizard

March 18, 2026

Russian State Messenger MAX Reportedly Auto-Subscribes Users to Pro-War Channels

Users of MAX, a state-backed messaging platform in Russia, are experiencing unsolicited subscriptions to pro-war and propaganda channels, with many unable to unsubscribe. Complaints have emerged on the Russian online forum Pikabu, where users reported unexpected subscriptions and difficulties in exiting channels, particularly through the desktop version of the app. MAX, launched in 2025, was developed amidst increasing restrictions on competing messaging services like WhatsApp and Telegram and has been promoted in occupied regions such as Crimea. Concerns have been raised about MAX being a surveillance tool, with capabilities to access personal data. The platform is operated by VK, which has ties to Russian leader Vladimir Putin's family through its ownership structure.

AppWizard

March 17, 2026

Russian Officials Use Burner Phones to Avoid State Messaging App Surveillance

Russian officials are increasingly using separate phones and SIM cards to install the state-backed messaging app, Max, due to growing distrust of the platform among government employees and state enterprise managers. Reports indicate that many officials prefer not to install Max on personal devices, often acquiring additional smartphones specifically for this purpose. Some officials register for the app using their regular numbers but continue to use separate devices for communication, and the most cautious avoid syncing contacts with their work phones. The pressure to adopt Max extends to the education sector, where students at Moscow Pedagogical State University are compelled to register for the app, with threats to their diploma access if they refuse. The university has started moving academic communication to the state messenger, with messages from the dean's office stressing the importance of registration. Additionally, a document from the Ministry of Education instructs institute directors to hold meetings with students regarding Max. Resistance is also seen in the military, with reports of servicemen in the Donetsk region refusing to comply with orders to install the app.

AppWizard

March 16, 2026

Advanced Protection Mode in Android 17 prevents apps from misusing Accessibility Services

Android 17 has introduced Advanced Protection Mode (AAPM) to enhance user security by preventing non-accessibility applications from using the Accessibility API, which has been exploited by malware. AAPM allows only verified accessibility tools to utilize the API and implements stricter security settings, including blocking installations from unknown sources, limiting USB data access, and mandating Google Play Protect scans. Applications must declare themselves as accessibility tools with the attribute isAccessibilityTool="true" to use the Accessibility Services API. Additionally, Android 17 features a new contacts picker that allows applications to request access to specific contact fields instead of the entire address book, enhancing user privacy.

AppWizard

March 16, 2026

Android 17 Blocks Non-Accessibility Apps from Accessibility API to Prevent Malware Abuse

Google is piloting a security enhancement in its Android Advanced Protection Mode (AAPM) that restricts certain applications from using the accessibility services API. This update is part of Android 17 Beta 2. AAPM, introduced in Android 16, enhances device security by blocking app installations from unknown sources, restricting USB data signaling, and mandating Google Play Protect scanning. Developers can integrate with AAPM through the AdvancedProtectionManager API to adapt their apps based on the security mode's status. The new restriction prevents non-accessibility apps from accessing the accessibility services API, allowing only verified accessibility tools like screen readers and voice-based input tools. Non-accessibility apps, including antivirus software and password managers, will have their access revoked when AAPM is activated, and users cannot grant permissions to these apps unless AAPM is disabled. Additionally, Android 17 introduces a new contacts picker feature that allows developers to specify which fields to access from a user's contact list, providing more granular control over data access.

AppWizard

March 14, 2026

Instagram says your chat privacy is going away, as its encryption vanishes soon

Instagram's end-to-end encryption (E2EE) for direct messages will be removed on May 8, 2026, resulting in decreased privacy for user chats. The platform is also enhancing protections for younger users by implementing advanced AI to manage Teen Accounts, which will have restrictions on unsolicited contacts and curated content.

Winsage

March 14, 2026

4 new Microsoft Teams features coming next month, including AI you’ll actually use and a must-have feature for saving time

Microsoft Teams will introduce a suite of new features in April 2026 aimed at improving user experience during meetings. Key enhancements include: 1. Intelligent Meeting Recaps: Video-based recaps with highlights and narration to revisit important discussions. 2. Automatic Spoken Language Detection: Real-time recognition of spoken languages to simplify multilingual interactions. 3. Enhanced Copy and Paste Functionality: Preservation of @mentions and shared contacts when copying messages. 4. Customizable Meeting Controls: Option to hide the meeting controls toolbar for maximizing screen space. Additional improvements include expanded access for event organizers to manage private chats and an optimized experience for starting meetings with minimized windows.