NewApp Digest
search bot

Development

Trojanized Android App Fuels New Wave of NFC Fraud
AppWizard
April 21, 2026

Trojanized Android App Fuels New Wave of NFC Fraud

A new variant of the NGate malware family has emerged, using a trojanized Android application to capture payment card data and personal identification numbers (PINs). This modified version of HandyPay, a legitimate NFC relay app, has been distributed since November 2025, primarily targeting users in Brazil. The malware intercepts NFC payment card data and allows fraudulent transactions. Two distinct malware samples have been observed, delivered through phishing infrastructure that impersonates a Brazilian lottery site and a Google Play listing for a card protection tool. The trojanized app captures NFC data, requests the victim's card PIN, and transmits this information to attacker-controlled infrastructure. It requires minimal permissions, leveraging its role as the default payment application to evade detection. Evidence suggests that generative AI tools may have been used in its development, indicated by emoji markers in debug logs. ESET has reported its findings to Google, and Google Play Protect can detect known versions of the malware. The developer of HandyPay is investigating the misuse of its application.
silver Android smartphone
AppWizard
April 21, 2026

The Last of Us star Troy Baker wants to make his own game studio, but he wants to “do it right”

Troy Baker, known for his roles in video games like The Last of Us, is establishing his own game studio to take control of the narrative process and tell his own stories. He aims to blend lessons from his past experiences in the industry into new projects and is focused on building a team of trusted collaborators. Baker recognizes the challenges of transforming ideas into tangible products and emphasizes a careful approach to development, stating that he wants to avoid rushing the process. His venture could potentially create job opportunities for developers amidst industry challenges like layoffs and project cancellations.
Microsoft bundles Ookla Speedtest directly into new Windows devices
Winsage
April 21, 2026

Microsoft bundles Ookla Speedtest directly into new Windows devices

Microsoft has integrated Ookla Speedtest into the Windows operating system, allowing users to check their internet speed and ping without launching a web browser or downloading a separate application. This integration provides more reliable results by communicating directly with network hardware, which is beneficial for gamers and network enthusiasts. It simplifies troubleshooting by helping users quickly identify whether lag issues stem from their internet service provider, connection, or system. Additionally, it offers a standardized method for evaluating connection quality, particularly useful in remote work settings.
NGate Android malware uses HandyPay NFC app to steal card data
AppWizard
April 21, 2026

NGate Android malware uses HandyPay NFC app to steal card data

A new variant of the NGate malware targets Android users by disguising itself within a trojanized version of the HandyPay app, which is a legitimate mobile payment processing application. This malware, documented since mid-2024, siphons payment card information through the mobile device's near-field communication (NFC) chip and sends the stolen data directly to attackers, who create virtual cards for unauthorized purchases or cash withdrawals from NFC-enabled ATMs. The new variant has been injected with malicious code into the HandyPay app, which has been available on Google Play since 2021. The code includes emojis, indicating the possible use of a generative AI tool in its development. The shift from previous iterations, which used an open-source tool named NFCGate, to HandyPay is likely motivated by financial considerations and the need for evasion, as HandyPay is more affordable and requires fewer permissions. This NGate variant has been active since November 2025, primarily targeting Android devices in Brazil. It employs two main distribution methods: a counterfeit app named “Proteção Cartão” hosted on a fraudulent Google Play page and a fake lottery website that redirects users to WhatsApp to download the malicious APK. Upon installation, the app prompts users to set it as their default NFC payment application, requests their card PIN, and instructs them to tap their card on the phone for reading, transmitting all collected information to an attacker's email address. To protect against such threats, Android users are advised to avoid downloading APKs from outside Google Play, disable NFC when not in use, and use Play Protect to scan for threats.
New NGate Android malware variant uses NFC app to steal card data
AppWizard
April 21, 2026

New NGate Android malware variant uses NFC app to steal card data

A new variant of the NGate Android malware exploits a legitimate NFC payment app, HandyPay, to steal users' card information and PINs, enabling unauthorized contactless transactions. This malicious version of HandyPay, which has been available since 2021, was identified by ESET researchers and is distributed through a fraudulent lottery website and a fake Google Play page. The malware captures sensitive information by prompting users to enter their payment card PIN and tap their card against the device, sending the data to an attacker-controlled phone and exfiltrating the PIN to a command-and-control server. The campaign employs social engineering tactics and requires minimal permissions, relying on users to enable app installations from unknown sources. The attackers use a centralized infrastructure for malware distribution and PIN collection, with evidence of compromised devices in Brazil. The shift to modifying a legitimate application is motivated by financial incentives, as it offers similar functionality at a lower cost compared to underground tools. Users are advised to avoid installing apps from unofficial sources and to ensure the legitimacy of applications before entering sensitive information.
Slime Sea codes April 2026
AppWizard
April 21, 2026

Slime Sea codes April 2026

Slime Sea is a PvE combat game that has gained nearly three million visits as of mid-April. Players can use the following working codes: HUBISLAND (three race rerolls and a superior gold potion) and SLIMEPIECE (two race rerolls and 30 minutes of superior EXP). To redeem codes, players must launch the game, click on the 'Shop' icon, input the code, and hit 'Submit'. New codes can be found by joining the game's Discord server and checking the 'announcements' channel. Slay a Slime and Slime Sea are the same game, with a temporary title discrepancy. Expired codes include COMBATCHANGES, FREEBOOSTS, 1MILLIONVISITS, and YAY5000.
How to Install Steam on Android with ROCKNIX
BetaBeacon
April 21, 2026

How to Install Steam on Android with ROCKNIX

The text provides a list of Steam-compatible devices from different brands such as AYN, AYANEO, Retroid, and KONKR. It also gives detailed instructions on how to install ROCKNIX on these devices, back up existing ABL, flash ROCKNIX ABL, change boot mode, install Steam, enable Steam Input, change game configs, and adjust ROCKNIX Steam settings. Additionally, it compares the pros and cons of using ROCKNIX versus Android on compatible devices and recommends installing ROCKNIX on a microSD card rather than on the internal storage due to potential risks.
Now you can run Steam games in Linux on some handhelds that ship with Android
BetaBeacon
April 20, 2026

Now you can run Steam games in Linux on some handhelds that ship with Android

- Valve has released Proton 11 beta 1, which allows you to run Windows games designed for x86 architecture on devices with Arm processors running Linux. - ROCKNIX, a Linux-based gaming operating system, has added support for Steam on handheld game consoles, allowing you to play PC games on these devices. - Not all PC games will work on these devices, especially those that require NVIDIA RTX graphics or use DirectX 12. - ROCKNIX can be installed on an SD card to use on Android handhelds without overwriting the original operating system, but performance may be better if installed on the internal storage.
Search