fraud protection

AppWizard
July 8, 2025
A newly identified Android malware family, Qwizzserial, has emerged as a significant threat in Uzbekistan, disguising itself as legitimate financial and government applications. It spreads primarily through Telegram, using deceptive channels to impersonate authorities and financial institutions, luring victims with offers of financial assistance. Upon installation, Qwizzserial requests permissions related to SMS and phone state, prompting users to input sensitive information such as phone numbers and bank card details, which it exfiltrates via the Telegram Bot API or HTTP POST requests. The malware intercepts incoming SMS messages, including one-time passwords (OTPs) for two-factor authentication, and can extract financial information from messages. Analysts from Group-IB have tracked around 100,000 infections linked to Qwizzserial, with confirmed financial losses exceeding ,000,000 within three months. The malware's infection pattern follows a Pareto distribution, with a small subset of samples causing the majority of infections, particularly those impersonating financial institutions. Security solutions have developed detection rules for Qwizzserial, and organizations are encouraged to implement user education and monitoring to mitigate risks. End-users are advised against installing applications from untrusted sources and to scrutinize app permissions. Indicators of Compromise (IOC) include specific C2 domains and file hashes for both example and latest samples of Qwizzserial.
AppWizard
May 13, 2025
Google has announced updates to enhance security and privacy for Android users, including: - Enhanced scam protection for calls and text messages. - Updated Factory Reset protections limiting phone functionality if reset without owner consent. - Upgraded Live Threat Detection in Google Play Services to identify malicious applications. - Introduction of the Key Verifier feature for verifying identities in conversations using public encryption keys, launching this summer for Android 10 and higher. - Expansion of the Identity Check feature to more devices with the upcoming Android 16 release. - Concealment of one-time passwords on the lock screen in Android 16. - Extension of the Advanced Protection program to a broader audience. - Rollout of live threat detection capabilities in Google Play Protect for Pixel 6 and newer devices and other smartphones. - Announcement of Google I/O 2025 scheduled for May 20 at 10 am PT (1 pm ET).
AppWizard
March 28, 2025
Google has launched initiatives to enhance the security of its Play Store, focusing on reducing malicious and fraudulent applications. Key measures include upgrading the Play Integrity API to protect users from harmful apps and assist developers in addressing modified applications. Google Play Protect's threat detection will expand to target apps impersonating financial services, with Enhanced Financial Fraud Protection being rolled out to more markets. The app submission process will be streamlined with additional pre-review checks, and developers will receive notifications about policy compliance. Google has introduced "Government" and "Verified" badges for specific app categories and plans to expand this system. Over the past year, Google blocked 2.36 million apps violating Play Store policies and identified significantly more Android malware from third-party sources compared to those on the Play Store.
Tech Optimizer
March 14, 2025
Bitdefender Ultimate Security for MacOS achieved a 100% detection rate for threats in AV-Test conducted in December 2024. It operates with minimal resource consumption, with slight slowdowns during software installations similar to other third-party antivirus tools. The software protects against malware, including ransomware and phishing attacks, and includes AI-powered anti-scam features. The Ultimate Security package offers tools beyond MacOS's built-in XProtect, including a VPN, adblocker with anti-tracking, and a password manager. It provides identity protection by monitoring data leaks and alerts users if their information appears on the Dark Web, covering up to five devices across MacOS, iOS, Windows, and Android. Higher-tier packages for US residents offer identity theft and financial fraud protection, with coverage up to million. The pricing starts at .99 for the first year, renewing at .99 annually, with mid-tier and highest-tier plans priced at .99 and .99 for the first year, respectively, offering additional identity theft coverage and credit monitoring services.
AppWizard
March 9, 2025
A report has revealed an extensive ad fraud scheme called "Vapor," which has infiltrated the Google Play Store with over 180 malicious applications that garnered more than 56 million downloads before being removed by Google. These apps, which mimic legitimate applications, primarily target categories like flashlight utilities, QR code readers, and horoscope generators. They initially appear functional but later remove legitimate features in updates, replacing them with intrusive advertisements that hijack the device's interface. Some vapor apps achieved over one million downloads, aided by app install schemes that inflated their rankings. Google has committed to removing violating apps and provides Google Play Protect to safeguard users. Users are advised to be cautious and avoid installing low-value applications to mitigate risks.
AppWizard
March 5, 2025
Google has removed over 180 applications from its Play Store due to a scheme exploiting Android apps for ad fraud, as revealed by Integral Ad Science (IAS). The investigation, initiated in late 2024, identified unusual app behavior and traffic patterns. The operation, named Vapor Threat, involved fraudsters creating shell applications that appeared as legitimate health and fitness tools but were designed solely to generate ad revenue through full-screen video advertisements. IAS emphasized the need for vigilance in the advertising ecosystem and highlighted the ongoing challenges of ad fraud, urging advertisers to adopt robust anti-fraud strategies.
Search