DeX Archives

AppWizard

September 23, 2026

Expert Opinions and Insights from the Tech Industry

The Android development community has historically addressed memory optimization reactively, but new performance requirements from Google Play, effective February 2027, emphasize proactive memory management. These requirements include metrics for dynamic memory usage, bitmap memory, and DEX code optimization, with apps needing at least 25% optimization coverage. Memory usage can now hinder releases even without local crash replication, necessitating its integration into the pre-production process alongside other performance metrics. Dynamic memory usage is defined as anonymous RSS plus swap, excluding file-backed data. Google Play will evaluate this across different application states and device performance categories. Bitmap memory is scrutinized for the retention of invisible bitmaps, and DEX optimization aims to reduce memory footprint and improve performance. Investigating memory growth involves using Android Studio’s Memory Profiler to monitor memory changes during specific user flows and conducting heap dumps to identify retained objects. Issues often arise from retained state, where components hold onto callbacks that reference image data, necessitating a focus on lifecycle management rather than merely cache size. Bitmap memory should be carefully managed, as the decoded size can significantly exceed the compressed file size. Downsampling images to match UI dimensions is crucial. Memory checks should occur before production, with a focus on establishing a memory budget based on actual measurements and defining representative memory scenarios for testing. A pre-release memory checklist includes running user flows repeatedly, testing on various devices, inspecting heap dumps, examining image configurations, and reviewing optimization metrics. Monitoring Android vitals and Play Console warnings is essential to detect potential issues before they lead to user-reported crashes.

AppWizard

September 23, 2026

RatHat Android Malware Uses AI to Target Banking Credentials in Real Time

A newly identified strain of Android malware, RatHat, utilizes generative AI to manipulate infected devices in real time. It is linked to threat actors believed to be operating out of China. RatHat serializes the device’s live Accessibility tree into XML format and communicates with a generative AI assistant to return screen coordinates, identify text, and issue navigation commands. The malware employs WebView-based HTML overlays to capture login credentials from banking and cryptocurrency applications and can infiltrate payment apps like WeChat and Alipay to extract PINs. It also features an SMS receiver and notification listener to intercept OTPs and 2FA codes. RatHat is disseminated through smishing, malvertising campaigns, and misleading third-party forums. It employs anti-analysis techniques such as container tampering, manifest bombing, DEX bytecode poisoning, string encryption, and anti-debugging. Once installed, it gains Accessibility access, activates Developer Options, and enables Wireless Debugging, allowing it to connect to the device's local ADB service and launch control agents with shell-level privileges. The malware captures raw touch coordinates to reconstruct PINs and unlock patterns, bypassing screenshot protections. It also includes persistence mechanisms that prevent uninstallation by presenting a fake Google Play failure overlay and automatically reinstalling itself if removed.

AppWizard

September 21, 2026

When Memory Becomes a Release Metric: Preparing Android Apps for Google Play’s New Limits

In August 2026, Google Play announced new performance requirements for memory management that will be enforced starting February 2027. These requirements include metrics for dynamic memory usage, bitmap memory, and DEX code optimization. Applications that exceed these thresholds may face reduced visibility and publishing capabilities on the platform. Dynamic memory usage is defined as the sum of anonymous RSS and swap, excluding file-backed data. Google is focused on whether applications retain non-visible bitmaps and requires at least 25% coverage in DEX optimization. Memory issues can be difficult to reproduce, and developers are encouraged to use Android Studio’s Memory Profiler to investigate memory growth. A thorough investigation involves monitoring memory changes, taking heap dumps, and understanding reference paths. Bitmap memory should be carefully managed, as the runtime cost of images can exceed their file size. Google will provide real-world memory metrics through the Play Console, and teams are advised to establish memory budgets and perform pre-release checks to identify potential issues before they lead to out-of-memory (OOM) crashes.

AppWizard

September 18, 2026

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Cybersecurity experts have identified a new Android malware named RatHat, believed to be operated by Chinese threat actors. RatHat is distributed primarily through smishing and malvertising campaigns, leading users to deceptive download portals. It employs an automated multi-stage infection process and exploits Accessibility features along with a local ADB self-pairing mechanism to escape the Android application sandbox. The malware uses various anti-analysis techniques, including container tampering, manifest bombs, DEX bytecode poisoning, and dual string-encryption. RatHat's architecture consists of a malicious Android application, a Go agent, and an FRP reverse-proxy client, which together enable it to gain critical system permissions and perform various malicious activities such as credential capturing, screen recording, and SMS interception. Even if uninstalled, the malware retains shell access to the device, allowing attackers to reinstall it. RatHat can serialize the device's Accessibility tree to XML and communicate with a Generative AI assistant for tasks like screen coordinate determination and text extraction. The Go Agent, masquerading as a native library, exploits shell access to execute commands and establish a persistent connection to a command-and-control server via the FRP client. The C2 server can issue extensive commands to collect sensitive information, including SMS messages, credentials, files, and keystrokes, and RatHat also features a hardware-level keylogger.

AppWizard

September 6, 2026

Google orders Android apps to cut RAM use amid memory crunch

Google has introduced new performance standards for applications on Google Play to improve user experience and device efficiency by reducing memory consumption. Key areas of focus include dynamic memory management, efficient bitmap data utilization, and DEX code optimization. These standards aim to prevent system slowdowns and forced app closures due to insufficient memory. Google will provide tools within the Play Console for developers to monitor memory issues and access analytics through Android Vitals. The new performance thresholds will take effect in February 2027, with non-compliant applications facing publication restrictions. Additionally, all applications with login systems must support a zero-tap sign-in feature for enhanced user convenience and security.

AppWizard

August 31, 2026

The AI memory crunch has reached the apps on your phone

Google will implement new memory usage regulations for Android applications starting in February 2027, due to a global RAM shortage. Apps exceeding the set memory limits may be throttled, terminated, or face reduced visibility on the Play Store. The memory thresholds vary based on device specifications, with specific limits for foreground, background, and bitmap memory usage. Non-compliance will result in penalties affecting app distribution and visibility. The memory crisis is attributed to increased demand from the AI data center industry, leading to rising RAM costs. The new limits will first apply to Pixel devices with Android 17, and other manufacturers are expected to follow. Additionally, by April 2027, all apps on the Play Store must support zero-tap credential restoration for users transitioning to new devices.

AppWizard

August 28, 2026

Google warns Android app developers to reduce memory usage, with new thresholds set to begin in February 2027.

Google Play is implementing two key requirements to improve app quality and user experience. 1. Reducing App Memory Usage: Google Play is setting broader memory limits to prevent excessive memory consumption by apps. Developers must adhere to specific performance thresholds, including: - Dynamic Memory Usage: Monitoring memory used for an app's private data storage. - Bitmap Memory Usage: Ensuring bitmaps are not retained longer than necessary. - Optimized DEX Code: Achieving a minimum of 25% coverage with optimization tools like R8. To assist developers, Google Play has introduced tools for monitoring memory usage and tracking crashes due to insufficient memory. Warnings will be issued if apps exceed the new thresholds. 2. Ensuring a Seamless Device Migration Experience: Starting in April 2027, all apps supporting user sign-in must use the Android Restore Credentials API for automatic restoration of sign-in states when switching devices. Game apps are currently exempt, but guidance will be provided for handling authentication in gaming applications in 2027.

AppWizard

August 27, 2026

Google forces Android apps to use memory more wisely as RAMpocalypse rages

Starting in early 2027, Android apps on Google Play must meet new memory performance standards due to rising RAM prices and consumer demand for streamlined smartphones. Google is concerned about a potential "ecosystem-wide memory crisis" and aims to improve memory efficiency in app development. The new standards will be implemented in two phases: the first phase in February 2027 will set thresholds for undesirable behavior and code optimization, while the second phase in April 2027 will enhance device migration with a zero-tap credential restoration feature. Specific memory limits include: - For devices with 8 GB of RAM: foreground app usage capped at 2.25 GB, 1.5 GB for user-perceived services, and 1.5 GB for background processes. - Devices with more than 16 GB of RAM will be largely exempt from these restrictions. - Bitmap memory usage limited to 200 MB for user-perceived and background services, with a cached limit of 400 MB across all devices. - Gaming applications will have different memory requirements. The DEX code optimization mandate aims to improve memory utilization, app launch speed, and runtime performance. The zero-tap sign-in requirement in the second phase seeks to streamline device migration and enhance security, addressing risks associated with manual sign-ins.

AppWizard

August 16, 2026

I used DeX to turn my Galaxy S25 Ultra into a lightweight gaming PC

PC gaming on Android has significantly improved with the introduction of applications like Winlator and the emergence of GameNative, a refined PC emulator. The custom Turnip GPU drivers for Qualcomm's Snapdragon 8 Elite chips have enhanced gaming performance, expanding mobile gaming possibilities. Testing with a Samsung Galaxy S25 Ultra, various PC games were explored using GameNative, which supports Steam. Lightweight 2D games ran smoothly, while 3D titles from the late 2000s to early 2010s, like Crysis and Deus Ex: Human Revolution, performed well, though some games encountered issues. The Witcher 3 was playable with frame rate adjustments, and Cyberpunk 2077 launched but was largely unplayable due to low frame rates and crashes. The DeX experience on the Galaxy S25 Ultra was mostly positive, with updates improving performance and resolving bugs. Overall, the device can serve as a lightweight gaming PC alternative, allowing for the enjoyment of older PC games on mobile.

AppWizard

July 30, 2026

How to use screen mirroring on Roku with your Android phone

Owning a Roku TV or streaming box allows for seamless integration with existing tech setups, enhancing the viewing experience. Users can mirror their Android phone's screen to the Roku device, provided both support the Miracast protocol. Most Roku devices support screen mirroring, but some Android devices, like Google Pixels, do not support Miracast natively. Users can still cast individual apps such as YouTube or Netflix using the DIAL protocol. To mirror the screen, users must navigate to the settings menu on the Roku and select the screen mirroring mode. Samsung Galaxy users can easily mirror their screens by using the Smart View feature. While mirroring, a Smart View pill allows users to adjust settings and aspect ratios. If audio issues arise, users should check the volume on both devices. Samsung Galaxy smartphone users can utilize the DeX feature for a desktop-like experience when connected to a Roku. To activate DeX wirelessly, users can access quick settings and select the Wireless DeX toggle. Some lag may occur during wireless use, which can be mitigated by adjusting the TV's picture mode to gaming.