NewApp Digest
search bot

Downloader

3 unofficial Android Auto apps I installed to make my car screen more useful
AppWizard
June 16, 2026

3 unofficial Android Auto apps I installed to make my car screen more useful

Android Auto offers a limited selection of applications due to restrictions imposed by Google, but users can enhance its functionality by sideloading unofficial apps from outside the Play Store. Sideloading allows for the installation of additional applications that can significantly improve the driving experience, especially for owners of older vehicles. To sideload apps on Android Auto, users must unlock developer mode on their phone and Android Auto, then install the Android Auto Apps Downloader (AAAD) to access unofficial apps. Three notable sideloaded apps include: 1. CarStream: Allows users to access YouTube on Android Auto, enabling video searches and subscriptions while the vehicle is in motion. 2. AA Browser: Provides a web browsing experience on Android Auto, ideal for accessing websites that may not support the platform natively. 3. Fermata Auto: An all-in-one media toolkit that plays locally stored videos and music, screen mirrors, and allows live TV viewing through IPTV links.
Fake 'Cockroach Janta Party' Android app flagged as critical malware threat, report warns
AppWizard
May 28, 2026

Fake ‘Cockroach Janta Party’ Android app flagged as critical malware threat, report warns

A cybersecurity report released on May 22, 2026, identifies a counterfeit Android application posing as the official app of the Cockroach Janta Party as a significant malware threat. The malicious app, known as Cockroach.Janta.Party, functions as a Remote Access Trojan (RAT) and can infiltrate Android devices, steal sensitive information, intercept communications, and control infected smartphones. The genuine Cockroach Janta Party has no affiliation with this app and is a victim of brand impersonation. The app is distributed through WhatsApp, Telegram, and misleading websites, particularly a rogue domain, cockroachjantaparty[.]org. It targets Android devices running versions 8.0 to 14 and requests elevated permissions, including access to camera, SMS, call logs, and contacts, while misusing the Android Accessibility Service to read on-screen content and grant itself additional permissions. The app contains multiple malicious modules for data exfiltration and uses a Command and Control infrastructure based on the Telegram Bot API. Users are advised to uninstall the app, disable Accessibility permissions, reset banking credentials, enable two-factor authentication, and conduct a full mobile security scan. The legitimate Cockroach Janta Party is encouraged to issue a formal clarification regarding the impersonation.
Windows Users Targeted in New Phishing Campaign
Winsage
May 27, 2026

Windows Users Targeted in New Phishing Campaign

Research from FortiGuard Labs has identified a phishing campaign that disguises itself as purchase orders, prompting recipients to open harmful attachments. The campaign begins with a phishing email containing a malicious JavaScript file. When executed, this JavaScript decrypts and runs a PowerShell script that uses process hollowing to inject a .NET downloader module into the trusted Windows process MsBuild.exe. This downloader connects to a remote command and control (C2) server to download and execute additional modules, allowing the attacker to alter the malware's behavior after the initial compromise. The campaign poses significant detection challenges for Windows users due to its use of multiple encryption layers, fileless execution techniques, and process hollowing strategies. Security experts emphasize the need for organizations to enhance their detection capabilities beyond traditional methods, focusing on identifying suspicious activity across various devices and applications. The phishing attack exploits social engineering tactics and blends malicious actions with legitimate administrative tools, complicating detection efforts. Additionally, the human element plays a crucial role in breaches, highlighting the importance of effective communication and collaboration between security teams and other departments to improve security awareness and behavior.
Android ruined link handling years ago. Here's how I fixed it with a free app
AppWizard
May 23, 2026

Android ruined link handling years ago. Here’s how I fixed it with a free app

LinkSheet is an open-source application designed to improve link-handling on Android devices by reinstating the "Open with" dialog, allowing users to choose their preferred app for opening links. It intercepts links when set as the default browser, enabling users to select from multiple apps instead of being restricted to verified ones. LinkSheet also allows users to open links in incognito mode for privacy and control over browsing habits. Users can download LinkSheet from its GitHub repository, as it is not available on the Google Play Store. After installation, users can configure their apps to prevent them from opening verified links directly. Additional features include the Use ClearURLs option to remove tracking parameters and an Enable downloader feature for direct download links.
ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows
BetaBeacon
May 5, 2026

ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows

ScarCruft compromised a video game platform in a supply chain attack, trojanizing its components with a backdoor called BirdCall to target ethnic Koreans residing in China. The attack enabled the threat actors to target both Windows and Android devices, turning it into a multi-platform threat. The campaign targeted sqgame[.]net, a gaming platform used by ethnic Koreans in China, known as a transit point for North Korean defectors. BirdCall has features like screenshot capture, keystroke logging, and data gathering, and relies on legitimate cloud services for command-and-control. The Android variant collects various data and has seen active development.
Top Android Apps You Won’t Find On Google Play Store
AppWizard
April 15, 2026

Top Android Apps You Won’t Find On Google Play Store

The Google Play Store does not include every app desired by users due to strict privacy, security, and content moderation policies, leading to the growth of third-party platforms and APK-based tools. Notable apps outside the Play Store include: - BombitUp: A prank app that allows users to send multiple SMS messages, popular among younger users, but excluded from the Play Store due to potential misuse. - 9Apps: An alternative app store developed by Alibaba Group, offering a variety of apps, games, and older versions of applications, particularly popular in regions lacking Play Store access. - Snaptube: A video downloader for platforms like YouTube and Facebook, absent from the Play Store due to policy violations but sought after for offline video access. - VidMate: A comprehensive video downloading app that also provides access to live TV, movies, and music, maintaining popularity despite not being available in official app stores. - Honista: A modified version of Instagram that enhances privacy and customization options, appealing to users wanting more control over their social media experience. - Lucky Patcher: A tool for advanced users that allows modifications to app permissions and ad removal, requiring technical knowledge and sometimes root access, leading to its exclusion from the Play Store. - APKPure: An alternative app store that focuses on providing safe and verified APK files, emphasizing security and access to region-locked apps or older versions. These applications cater to specific user needs that are often overlooked by mainstream platforms.
Search