distribution Archives

AppWizard

June 19, 2026

Google sets launch date for review of Android apps distributed outside the Play Store

Google's upcoming Android app verification system will begin on September 30, 2026, restricting the installation of apps from unverified developers outside the Google Play ecosystem. Certified Android device users will be unable to install apps from developers lacking Google verification, which requires identity authentication through the Android Developer Console. A list of participating app stores includes Google Play, Samsung Galaxy Store, Xiaomi GetApps, HONOR App Market, OPPO App Market, vivo V-Appstore, and Palm Store by Transsion. A new system component, com.google.android.verifier, will be integrated into certified devices running Android 8 or later. In August, Google will introduce a feature called Advanced Flow, allowing users to install unverified apps through a complex process. A Limited Distribution mode for independent developers will enable app distribution to a maximum of 20 devices without registration fees or document verification. The regulations will initially be implemented in Brazil, Indonesia, Singapore, and Thailand, with plans for a global rollout by 2027.

AppWizard

June 19, 2026

Epic Games unveils Launcher V2 in re-attempt to topple Steam, says redesigned storefront is up to 6.5x faster — promises player profiles, user reviews, universal controller support, and much more

Epic Games is developing Epic Games Launcher V2, which will feature a complete internal overhaul to improve speed and expand its features. Key improvements include a complete reconstruction of the store, in-store Patch Notes, player reviews, a performance increase making the store 5 to 6.5 times faster, and universal controller support. The redesigned storefront will offer personalized game recommendations based on user preferences and will enhance game pages with more curated content. These updates will be released alongside updates to Fortnite.

AppWizard

June 19, 2026

Prism Launcher Setup 2026: Install Modpacks in 12 Steps

Prism Launcher is an open-source Minecraft launcher, a fork of MultiMC, licensed under GPL-3. It allows users to manage multiple isolated game instances, each capable of running different versions of Minecraft, mod loaders, and mod sets. The latest version, 11.0.2, was released in June 2026 and includes features such as integrated browsing for CurseForge and Modrinth, automatic Java switching, and support for mod loaders like Fabric, Forge, NeoForge, and Quilt. It operates without ads and is cross-platform, compatible with Windows, macOS, and Linux. Key features include: - Multiple instances: Unlimited isolated instances of Minecraft. - Integrated mod browsers: Direct installation from Modrinth and CurseForge. - Automatic Java management: Switches Java versions as needed. - Support for major mod loaders: Easy instance creation with Fabric, Forge, NeoForge, or Quilt. - No ads: Self-contained experience without interruptions. - Prerequisites: Requires a paid Minecraft: Java Edition license, specific operating systems, minimum RAM and disk space, and an internet connection. Installation steps vary by operating system, with detailed instructions provided for Windows, macOS, and Linux. Users must log in with a Microsoft account linked to their Minecraft license and can create instances for vanilla gameplay or install modpacks from Modrinth or CurseForge. Memory allocation settings can be configured per instance for optimal performance.

AppWizard

June 19, 2026

Android’s sideloading changes are getting closer as Google shares new timeline

Google is rolling out a new system service for Android devices to verify app origins from registered developers, starting this month. Verification requirements will officially begin on September 30, 2026, for users in Brazil, Indonesia, Singapore, and Thailand, covering apps from major app stores like Google Play and Samsung Galaxy Store. Users can still sideload apps, but those from unregistered developers will require additional installation steps. A limited-distribution developer account will be introduced in August for hobbyists and students, allowing app sharing with up to 20 devices without ID or fees. The phased rollout will continue through 2026, with global expansion of verification requirements expected in 2027.

AppWizard

June 19, 2026

Rokarolla trojan uses screen overlays to hijack Android financial apps

A new banking trojan for Android, named Rokarolla, targets 217 applications, including banking and cryptocurrency platforms, to steal credentials and sensitive financial data. It operates via a command and control (C2) server and bypasses the Google Play Store by using phishing websites that mimic legitimate download portals. Users are tricked into downloading a dropper that installs the malware, which disguises itself as the Google Play Protect security tool to gain access to Android Accessibility Services. Rokarolla employs dynamic screen overlays to capture user input in targeted financial applications and can also impersonate the device's lock screen. Additionally, it uses a pseudo-VNC system to intermittently capture screenshots for data extraction and can modify clipboard contents to manipulate cryptocurrency transactions by replacing copied addresses with those controlled by attackers.

AppWizard

June 19, 2026

Google shares updated timeline for rolling out Android developer verification

Google, Honor, OPlus, Samsung, Transsion, vivo, and Xiaomi are key players in enhancing app distribution platforms. Google is introducing new APIs to simplify the registration process for developers, including the Android Developer ID Status API and the Android Developer Console API. This month, Google will implement a new system service (com.google.android.verifier) on Android 8 or later devices to restrict the installation of unverified applications, although it will remain inactive until verification is launched in specific regions. In July, new developer APIs will roll out, and testing for "limited distribution" accounts will begin, allowing hobbyists to share apps without fees or ID verification on up to 20 devices. By August, an advanced app verification flow will be globally accessible, allowing users to bypass verification through a complex process. In September, Brazil, Indonesia, Singapore, and Thailand will start verifying app installation status, with plans for expanded developer verification by 2027.

AppWizard

June 18, 2026

How Your Location Influences Android App Availability

The Google Play Store customizes its app offerings based on the user's location, which affects app availability and functionality. App developers often set distribution rules that vary by region, leading to differences in user experience even for identical apps. Android devices determine location through a combination of signals, including SIM card data, GPS, and Wi-Fi positioning. Connectivity issues, particularly in rural areas, can limit app usability, while social habits influence regional app demand. Developers analyze engagement data to adapt their offerings based on regional preferences, creating a feedback loop that affects app visibility and features. Users should verify app functionality based on their location and connectivity before assuming an app's absence is due to obscurity.

AppWizard

June 17, 2026

New Rokarolla Android Trojan Targets 217 Banking and Crypto Apps

Zimperium’s zLabs researchers have analyzed a newly identified Android banking trojan named Rokarolla, which targets 217 distinct banking and cryptocurrency applications. It is distributed through malicious websites that impersonate popular platforms like TikTok and Google Chrome, with one identified distribution point being hxxps://infocontablidades[.]it[.]com/. The malware uses a dropper disguised as Google Play Protect to install a second-stage payload and gain Accessibility Services access, allowing it to simulate user interactions and manipulate on-screen elements. Rokarolla downloads counterfeit HTML login pages for targeted applications and overlays them to capture user credentials, including sensitive card information. It can also deploy a fraudulent PIN entry screen, read and send SMS messages, intercept one-time codes from banks, and block incoming calls. The malware rewrites the clipboard, operates a keylogger and screen content logger, and scrapes WhatsApp contact data. It captures screenshots without alerting users and has a resilient command-and-control infrastructure with multiple fallback domains. No product flaws are exploited, and defenses against it include installing apps only from Google Play and being cautious with Accessibility Services. Zimperium’s Mobile Threat Defense and zDefend products can detect Rokarolla, and a list of indicators of compromise is available on their GitHub repository.

AppWizard

June 16, 2026

New Rokarolla Android malware targets 217 banking, crypto apps

A new Android banking trojan named Rokarolla targets 217 banking and cryptocurrency applications and features 137 commands for malicious activities. It is distributed via deceptive websites posing as legitimate application sources and impersonates Google Play Protect to lure users into installing infected apps. Once installed, it seeks Accessibility service permissions and access to notifications, SMS, and calls. Rokarolla communicates with a command-and-control server, sending device profiles to generate unique identifiers for victims. Its primary goal is to steal financial information by using deceptive login overlays to capture sensitive data and maintain control over the device. The malware employs evasion tactics such as disabling Google Play Protect, hiding its icon, silencing notifications, and keeping the screen awake. It can steal SMS messages, extract contacts, capture keystrokes, record screen content, manipulate clipboard contents, block calls, and take screenshots. Zimperium confirms that Rokarolla is not found on Google Play, and users are advised to avoid downloading APK files from untrusted sources and to be cautious with Accessibility permissions.

AppWizard

June 15, 2026

Over 50 Android Apps Found Spreading MagicAd Trojan via Official Stores

A trojan named Android.MagicAd.1 has been identified as a significant threat to Android users, capable of delivering persistent background advertisements by circumventing built-in defenses. Detected in 2025, it has spread through over 50 infected games and utility applications, infiltrating both dubious download sites and official app stores like the Samsung Galaxy Store and Xiaomi’s GetApps. The malware employs a strategy of rotating applications to evade detection, remaining active on user devices after download. It uses hidden, encrypted components within native code libraries and conducts environment checks to avoid monitoring before launching its payload. Android.MagicAd.1 bypasses Android's restrictions by targeting trusted system applications, utilizing methods that vary by device manufacturer. For example, it uses a delayed system command on Xiaomi and Amazon devices, exploits Android Binder on Vivo devices, and employs a universal fallback method for other brands to gain priority for displaying ads. All identified malicious applications have been removed from official stores, but the campaign highlights the vulnerability of security software.