NewApp Digest
search bot

download

Revealed: How Russia use mobile ‘super-app’ Max to spy on its citizens
AppWizard
September 18, 2026

Revealed: How Russia use mobile ‘super-app’ Max to spy on its citizens

A new messaging and payment app called Max has emerged in Russia, developed by VKontakte, and has become the country's most utilized messaging platform. Max integrates various services, including banking and government services, and has been adopted by tens of millions of Russians. It features extensive surveillance capabilities, allowing it to take screenshots, access information without consent, impersonate users, and potentially conduct cyberattacks. The app's adoption has been largely mandatory, particularly among state employees and students. Despite its rise, Max has not replaced Telegram as a primary news source, and users have raised concerns about privacy and surveillance. Experts warn that Russia's swift implementation of digital control strategies reflects a growing trend of digital authoritarianism.
Android apps can now check security patches down to individual device components
AppWizard
September 18, 2026

Android apps can now check security patches down to individual device components

The new AndroidX Security State libraries, with stable releases of Security State v1.1.0 and Security State Provider v1.0.0, allow developers to evaluate the security status of individual device components. They provide three levels of security patch information: Device Security Patch Level (DSPL), Published Security Patch Level (PSPL), and Available Security Patch Level (ASPL). These libraries enable checks on critical components of the Android operating system, including system modules and the Linux kernel, which are represented by version numbers rather than monthly patch dates. Applications that prioritize security can utilize this detailed patch information to assess vulnerabilities, particularly those tracked as Common Vulnerabilities and Exposures (CVEs). The libraries also integrate with the Open Source Vulnerabilities (OSV) database for access to Android Security Bulletin data and device-specific vulnerability reports. Additionally, Android 17 allows manufacturers to declare individual security fixes beyond the stated security patch level, and Google is working with manufacturers to transition their OTA update clients to this new standardized system.
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
AppWizard
September 18, 2026

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Cybersecurity experts have identified a new Android malware named RatHat, believed to be operated by Chinese threat actors. RatHat is distributed primarily through smishing and malvertising campaigns, leading users to deceptive download portals. It employs an automated multi-stage infection process and exploits Accessibility features along with a local ADB self-pairing mechanism to escape the Android application sandbox. The malware uses various anti-analysis techniques, including container tampering, manifest bombs, DEX bytecode poisoning, and dual string-encryption. RatHat's architecture consists of a malicious Android application, a Go agent, and an FRP reverse-proxy client, which together enable it to gain critical system permissions and perform various malicious activities such as credential capturing, screen recording, and SMS interception. Even if uninstalled, the malware retains shell access to the device, allowing attackers to reinstall it. RatHat can serialize the device's Accessibility tree to XML and communicate with a Generative AI assistant for tasks like screen coordinate determination and text extraction. The Go Agent, masquerading as a native library, exploits shell access to execute commands and establish a persistent connection to a command-and-control server via the FRP client. The C2 server can issue extensive commands to collect sensitive information, including SMS messages, credentials, files, and keystrokes, and RatHat also features a hardware-level keylogger.
LDPlayer vs MEmu vs GameLoop: 10% FPS Gap [2026]
BetaBeacon
September 18, 2026

LDPlayer vs MEmu vs GameLoop: 10% FPS Gap [2026]

- LDPlayer is a general-purpose performance emulator - MEmu is a multi-instance workhorse for players juggling several accounts - GameLoop is Tencent's first-party tool built almost exclusively around its own mobile titles - LDPlayer, MEmu, and GameLoop are all designed around mobile gaming rather than general Android app testing - LDPlayer is actively patching graphics driver bugs, MEmu is quietly polishing quality-of-life features, and GameLoop's update cadence has slowed - GameLoop is specifically tuned for Tencent-published titles like PUBG Mobile - LDPlayer runs two branches, with LDPlayer 14 being the most actively patched version - MEmu's defining feature is multi-instance management for running multiple Android sessions - MEmu's release cadence has been steady in 2026, with the latest build adding a toggle to disable Android system sounds
Pokémon Infinite Fusion on Android: JoiPlay Setup [2026]
BetaBeacon
September 18, 2026

Pokémon Infinite Fusion on Android: JoiPlay Setup [2026]

- Pokémon Infinite Fusion is a standalone game built in RPG Maker XP, using the RGSS scripting layer. - The game is not a ROM, cartridge dump, or console to emulate, but rather a folder of Ruby scripts, tileset graphics, and audio files. - The mainline build of the game reached version 6.7.2 on October 2, 2025, and was updated to version 6.8.2 by August 2026. - The game combines two Pokémon into a single custom sprite and blended stat line, generating the combined artwork procedurally. - The Android-specific performance complaints come from the CPU doing image layering work in real time when compositing fusion sprites on lower-end devices.
The Blood of Dawnwalker sequel may not have the divisive time mechanic that so many players dislike: 'We will not force it,' game director says
AppWizard
September 17, 2026

The Blood of Dawnwalker sequel may not have the divisive time mechanic that so many players dislike: ‘We will not force it,’ game director says

The Blood of Dawnwalker features a time mechanic that serves as a limited resource, creating a sense of urgency that some players find restrictive. Shaun Prescott expressed a desire for a more leisurely gameplay experience, which has led to the creation of the "Better Story Timer" mod, the most popular modification for the game. Konrad Tomaszkiewicz, the studio CEO, acknowledged player feedback regarding the time mechanic and indicated that it may be adjusted in the sequel, aiming to enhance urgency without compromising the overall experience. He noted that players can complete around 80 percent of the content despite the time constraint and observed a decline in complaints as more players finished the game, discovering they had more time than expected. The studio is also seeking a lead writer for the next installment in the Dawnwalker series.
Search