fraudulent activities Archives

AppWizard

June 19, 2026

Rokarolla trojan uses screen overlays to hijack Android financial apps

A new banking trojan for Android, named Rokarolla, targets 217 applications, including banking and cryptocurrency platforms, to steal credentials and sensitive financial data. It operates via a command and control (C2) server and bypasses the Google Play Store by using phishing websites that mimic legitimate download portals. Users are tricked into downloading a dropper that installs the malware, which disguises itself as the Google Play Protect security tool to gain access to Android Accessibility Services. Rokarolla employs dynamic screen overlays to capture user input in targeted financial applications and can also impersonate the device's lock screen. Additionally, it uses a pseudo-VNC system to intermittently capture screenshots for data extraction and can modify clipboard contents to manipulate cryptocurrency transactions by replacing copied addresses with those controlled by attackers.

AppWizard

June 19, 2026

Telegram Block in India Sparks Surge in Demand for VPNs and Alternative Messengers

The Indian government has temporarily restricted access to the Telegram messaging platform, leading to a significant increase in demand for VPN services and alternative communication applications. On the day the restriction was implemented, VPN app downloads in India reached a record high since the start of 2025, with daily downloads rising by 49% from an average of 139,000 to 208,000. Proton VPN saw a 113% increase in downloads on the Apple App Store and a 64% rise on Google Play, while Windscribe reported an 89% increase in downloads. Additionally, downloads of the Signal app surged by 322% on Google Play and by 72% in the App Store, and Viber downloads increased by 216%. The government's decision to restrict Telegram was made to combat fraudulent activities related to the NEET entrance exam.

AppWizard

June 17, 2026

Google removes messaging app Telegram from Play Store, Apple likely to follow suit

The Indian government has removed numerous channels, groups, and bots from Telegram that were allegedly promoting fraudulent activities and misleading information, following insights from the National Testing Agency (NTA) and state law enforcement. This action has drawn criticism from digital advocacy organizations, such as IGAP and the Internet Freedom Foundation, which argue that the approach may disproportionately affect legitimate users of the platform and that fraud can occur across various platforms. The restrictions, enacted under Section 69A of the Information Technology Act, 2000, will limit access to Telegram throughout India until June 22, 2026, and require the platform to disable message-editing capabilities for all Indian users until June 30, 2026.

AppWizard

June 16, 2026

India Blocks Telegram Messaging App Amid Exam Scandal

India has implemented a temporary ban on the Telegram messaging app until June 22 to combat cheating in medical entrance examinations, following reports of its use in fraudulent activities. This measure is part of the Ministry of Education's effort to maintain integrity and fairness in the examination process.

AppWizard

June 11, 2026

Valve Is Killing Physical Steam Gift Cards, Blaming Scammers

Valve has announced the discontinuation of its physical Steam gift card program in retail stores globally due to ongoing issues with scammers exploiting these cards for fraudulent activities. All retail stock is expected to be depleted by the end of 2026. Scammers have been using these cards to siphon funds from victims, often impersonating officials or agencies. Valve has implemented measures to combat these scams but has decided to terminate the retail gift card program. Retailers will sell their remaining inventory but will not restock physical gift cards. Customers can still use existing gift cards on Steam, and digital gift cards will continue to be offered. Consumer protection agencies warn that fraudsters will continue to exploit gift cards from various brands.

AppWizard

June 11, 2026

Steam’s tired of gift card scams, so it’s killing them off for good

Valve will stop restocking Steam gift cards at retail locations due to increasing scams targeting consumers, particularly the elderly. The company estimates that these cards will no longer be available by the end of 2026, although unspent cards can still be redeemed after that date. Despite the discontinuation, Valve's guest checkout feature will allow digital gifting for gaming experiences.

AppWizard

May 20, 2026

Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

Cybersecurity researchers have identified an ad fraud and malvertising operation called Trapdoor, targeting Android users with 455 malicious applications and 183 command-and-control domains. Users often download these disguised apps, which initiate malvertising campaigns and lead to further downloads of malicious applications. At its peak, Trapdoor generated 659 million bid requests daily, with over 24 million downloads of the associated apps, primarily from the United States. The operation exploits install attribution tools to activate malicious activities only for users acquired through fraudulent ad campaigns, while suppressing such behavior for organic downloads. Trapdoor employs advanced evasion techniques, including obfuscation and impersonation of legitimate software, to avoid detection. Google has removed the identified malicious apps from the Play Store in response to the threat.

AppWizard

May 5, 2026

FEMITBOT Network Abuses Telegram Mini Apps for Crypto Scams and Android Malware

A fraud network called FEMITBOT has emerged, using Telegram's Mini App feature to conduct investment scams and distribute malware. Identified by the research firm CTM360, the network operates through API responses and presents itself as organized. The scams involve Telegram Mini Apps that display phishing pages, fake dashboards showing fictitious earnings, and urgency tactics to pressure users into making quick decisions. FEMITBOT mimics well-known brands like Apple and Coca-Cola to enhance credibility and disseminates Android malware disguised as legitimate applications. The operation is highly organized, utilizing marketing tools to optimize their scams. Users are warned to be cautious of bots requesting deposits before granting access to funds.

AppWizard

April 16, 2026

Google Play is changing how Android apps access your contacts and location

Google has updated its Google Play policies to enhance user privacy and protect businesses from fraud. Starting in October, developers will have access to Play policy insights in Android Studio to help comply with new features. On October 27, the Play Console will implement pre-review checks for contact and location permissions. The Android Contact Picker will be the standard for accessing contacts, requiring apps to use it or privacy-focused alternatives. Developers must update their apps to use the picker and submit a Play Developer Declaration for ongoing contact access. A new location button will be introduced for precise location requests, and apps must use it for one-time access. Developers should review their location data requests and include the onlyForLocationButton flag if targeting Android 17 and above. The Play Console will also introduce an official account transfer feature for ownership changes, effective May 27, with a mandatory 7-day security cool-down period for transfers. Unofficial transfers are prohibited.

AppWizard

March 12, 2026

Meta rolls out new scam detection tools across Facebook, WhatsApp, and Messenger

Meta is introducing new scam-detection features across Facebook, WhatsApp, and Messenger to enhance user safety. Facebook will implement a warning system for suspicious friend requests, alerting users to accounts with few mutual friends or unusual locations. WhatsApp will provide alerts for suspicious device-linking attempts, informing users of the request's origin. Messenger will expand its scam detection system to more countries, analyzing conversations for scam patterns and providing warnings. Over the past year, Meta has removed over 159 million scam-related ads and deactivated millions of scam-related accounts.