fraud Archives

AppWizard

July 31, 2026

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies

Bitsight's investigation revealed that inexpensive Android TV boxes are being shipped with applications that can change their hardware identity, allowing them to impersonate popular smartphone brands like Samsung and Huawei. This operation, named Fuyao, is linked to Zhejiang Fengwo IoT Technology Co., Ltd., a Chinese company established in 2019. The H96MAXV11 model was frequently reported among the affected devices. In one day, the operation received 65,957 reports from about 38,000 unique MAC addresses, with many devices misidentified as phones due to spoofed identifiers. Fengwo has also promoted over 120,000 "AI digital humans," though details on this marketing term are vague. The command-and-control server for Fuyao sends phone profiles to devices, masking their actual hardware specifications. The operation uses machine vision technology and a YOLOv8s object-detection model to identify advertisements. Bitsight documented 40 fraud tasks, 21 unique campaigns, and 166 modules across four devices. The operation's payout structure involves 144 operator-owned domains, with an estimated gross return of .25 per device daily, potentially leading to annual revenues in the millions. Attribution to Fengwo is supported by shared TLS certificate data and public patent records, although the patents do not directly address advertising. There is uncertainty about how the fraudulent apps were installed and at what point in the supply chain they were introduced. Device owners are advised to verify Play Protect certification and disconnect suspicious devices.

Tech Optimizer

July 30, 2026

EDB Says Postgres AI Tops Enterprise AI Data Platform Benchmarks

EnterpriseDB (EDB) has released benchmark results for its EDB Postgres AI (EDB PG AI), showing superior performance compared to various AI data platforms, including vector databases and managed Postgres platforms. The independent testing by McKnight Consulting Group indicated that EDB PG AI outperformed competitors in all evaluated metrics, including query speed, accuracy, and cost efficiency. Key findings include: - EDB PG AI achieved a median query latency of 50 milliseconds at 50 million vectors, making it the fastest platform tested, 80 times faster than Databricks and 21 times faster than MongoDB Atlas. - It demonstrated the highest accuracy for core vector search with a recall rate of 0.911, outperforming MongoDB by 26% and Databricks by 17%. - In a concurrent agent loop test, EDB PG AI completed tasks in 27 milliseconds, significantly faster than MongoDB Atlas (699 milliseconds) and Databricks (5.1 seconds). - EDB PG AI provided 76 times better price performance than Databricks and 34 times better than MongoDB. - The platform integrates vectors, structured data, and analytics within a single operational database, enhancing efficiency and reducing the risk of data inconsistency. The benchmark study assessed the performance of EDB PG AI against Amazon Aurora PostgreSQL, Databricks, Crunchy Bridge, MongoDB Atlas, and open source PostgreSQL, all standardized on equivalent enterprise hardware.

AppWizard

July 29, 2026

Russia charges Telegram founder Pavel Durov with terrorism, issues arrest warrant

The Federal Security Service (FSB) of Russia has charged Pavel Durov, the founder of Telegram, with facilitating terrorist activities and has issued an international warrant for his arrest. The charges are based on Telegram's alleged failure to remove content used by Ukrainian special services and terrorist organizations linked to sabotage, terrorism, mass killings, and cyber-fraud operations within Russia. Telegram has over 1 billion users and is a key communication tool during the Russia-Ukraine conflict. Durov, who previously founded VKontakte, has lived abroad since 2014 and holds Emirati and French citizenship. He is also under investigation by French authorities for insufficiently addressing criminal activity on Telegram and not cooperating with law enforcement. Durov denies any wrongdoing.

AppWizard

July 29, 2026

How to Stop Scammers From Showing You Ads on Your Android After Every Phone Call

Android users experiencing unexpected ads after phone calls are encountering a form of ad fraud linked to applications on the Google Play Store that utilize a tactic called AfterCall. These applications, often benign utility apps, request overlay permissions to display ads over the Android interface. They can launch full-screen advertisements disguised as call information screens after detecting the end of a call. Overlay permissions are categorized as "special permissions" and require users to enable them in system settings, rather than through typical installation pop-ups. Users are advised to check for apps with overlay permissions by navigating to Settings > Apps > Special app access and uninstall any unfamiliar applications. Regular audits of these permissions are recommended to disable unnecessary ones. While these apps primarily serve as an annoyance, they can waste advertising dollars and potentially harm brand reputations.

Tech Optimizer

July 29, 2026

Gen Z shows low cybersecurity awareness, Kaspersky study finds

A study by Kaspersky surveyed 7,200 Gen Z individuals across 18 countries and found that only 27% use mobile antivirus software, while 28% regularly back up their phone data. Many have experienced cyberattacks, with 17% reporting hacked social media accounts and 12% losing access to gaming accounts. The study highlights that compromised smartphones can expose sensitive personal information, increasing the risk of identity theft and financial fraud. Kaspersky has introduced an interactive online game, Case 404, to educate Gen Z on recognizing scams and phishing attempts.

AppWizard

July 27, 2026

One of the best shooters around just got a barely recognizable second episode, and it’s only $12

New Blood has released the second episode, Shadow of Death, for their game Fallen Aces, which is currently on sale until August 8. The game features a blend of stealth, slapstick combat, and a pulpy narrative, and introduces the Mateba Model 6 Unica firearm. New Blood has a history of gradually expanding their games and launching them at lower prices, with Fallen Aces now available at a reduced rate.

AppWizard

July 23, 2026

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

GitHub will reject command-line support bundle uploads from outdated versions of GitHub Enterprise Server lacking security patches starting August 18, 2026. The npm package @copilot-mcp/apex has been identified as a post-install dropper that installs a macOS infostealer, phishing for sensitive information and maintaining a connection to an attacker's server. A rogue extension on the Microsoft Visual Studio Code marketplace, "Markdown All Pro," impersonates a legitimate tool and opens a backdoor after installation. A phishing campaign targeting Portuguese users delivers the Lampion banking malware, which has been active since 2019. DoubleVerify reports a rise in "AfterCall" apps that exploit user permissions for ad fraud. The GhostCommit attack method hides malicious instructions within PNG images in pull requests. The U.S. government has updated its advisory on Iranian-affiliated cyber activity targeting operational technology devices. An Android app posing as a civil defense alert system has been found to contain malware for data harvesting. An Iranian threat actor is distributing MarkiRAT malware through fake applications. An analysis of 28 AI-coded applications revealed 434 vulnerabilities, prompting Cisco to introduce Antares to identify vulnerabilities in codebases. A Russian-speaking threat actor is dismantling guardrails on AI models to create offensive tools.

AppWizard

July 17, 2026

Telegram Trolls France On World Cup 2026 Exit; The Reason Is Not Football At All

Spain defeated France 2-0 in the semifinals of the FIFA World Cup 2026, advancing to the finals. Telegram Messenger expressed schadenfreude over France's exit, tweeting "BYE BYE" with a match result screenshot. Pavel Durov, Telegram's co-founder, faced legal issues in France, including a preliminary investigation into criminal activities involving Telegram, his detention in August 2024, indictment on 12 charges, and a subsequent policy change regarding user data sharing with authorities. Durov characterized his arrest as politically motivated, while Elon Musk criticized the situation, questioning the scrutiny faced by tech leaders.

Winsage

July 10, 2026

A hacker’s arrest just revealed how Microsoft can track your Windows device

A teenager named Peter Stokes is facing federal charges in Chicago for allegedly hacking a U.S. jewelry retailer while using a VPN to conceal his online activities. Microsoft provided the FBI with data linked to a tracking mechanism called the Global Device Identifier (GDID), which is a unique number assigned to every Windows installation that persists through updates. This identifier allowed authorities to connect Stokes' computer to specific websites, despite his VPN usage. Stokes was arrested in Helsinki in April 2026 while trying to board a flight to Japan, carrying two two-terabyte hard drives. The GDID enabled Microsoft to track Stokes' activities on third-party services, raising concerns about privacy and data tracking.

AppWizard

July 10, 2026

WhatsApp Username Issue: Meta’s messenger submits reply to govt; centre weighs risks of digital fraud

Meta-owned WhatsApp has responded to the Indian government's notice concerning its proposed "username" feature, which aims to allow users to communicate without sharing phone numbers. The Indian government expressed concerns about potential risks such as online fraud and impersonation. WhatsApp requested more time to address these issues and confirmed that the feature will not launch in India until discussions are complete. The Ministry of Information Technology is currently reviewing WhatsApp's submission. Other messaging platforms, including Telegram and Signal, have also received similar notices. WhatsApp plans to implement measures to mitigate impersonation risks, such as allowing only legitimate owners to claim high-profile names and requiring users to know exact usernames to initiate contact. The platform will limit the number of new contacts an account can reach and provide information about the sender's account status when a user receives a message via a username.