Google Play Protect Archives

AppWizard

September 4, 2026

I4C warns against malicious Android apps from social media ads

The Indian Cyber Crime Coordination Centre (I4C) has issued an advisory about malicious Android applications disguised as adult-content apps, which are promoted through social media and distributed outside official app stores. The National Cybercrime Threat Analytics Unit (NCTAU) warned that these apps can compromise mobile device security by requesting sensitive permissions and may install additional software without user consent, leading to unauthorized financial transactions. Users are advised to download apps only from trusted sources like the Google Play Store, avoid installing APK files from unverified sources, and refrain from granting accessibility permissions to untrusted applications. Recommendations include regularly reviewing installed apps, keeping Google Play Protect enabled, and monitoring bank accounts for unauthorized activities. Victims of cyber fraud are encouraged to report incidents via the national cybercrime helpline or the government’s reporting portal.

AppWizard

September 3, 2026

Android stuck in Safe Mode? Here’s how to turn it off

Safe Mode on Android disables all third-party applications and engages Airplane Mode to help troubleshoot device issues. It can be activated by holding down the Power Off button and selecting the Safe Mode option, which may lead to unintentional activation. To disable Safe Mode, users can either restart the device or tap the notification in the Notification Menu indicating Safe Mode is active. After exiting Safe Mode, Airplane Mode may remain active, which can be turned off through the Quick Settings menu. Google Play Protect also provides additional security measures that may cause user frustration.

AppWizard

September 2, 2026

MHA issues advisory on malicious Android apps used to steal money, take control of phones

Cybercriminals are increasingly using malicious Android applications disguised as pornography apps to take control of users' devices and conduct unauthorized financial transactions. The Indian Cyber Crime Coordination Centre (I4C) has issued a warning about this trend. These apps are often promoted on social media and require users to download APK files from outside the Google Play Store. The National Cybercrime Threat Analytics Unit (NCTAU) has reported a rise in financial fraud linked to these applications, which include names like “Night Play,” “Reloop,” and “Kyss.” Once installed, these apps request sensitive permissions, such as Accessibility access, allowing malware to read screen information, click buttons, enter OTPs or PINs, confirm transactions, and initiate fund transfers, leading to unauthorized access to bank accounts. Additionally, the malware may install secondary applications or a VPN to reroute internet traffic through attacker-controlled servers, exposing sensitive data. These apps may also prevent uninstallation through standard device settings. The NCTAU advises users to only install apps from trusted sources, avoid unknown APK files, refrain from granting Accessibility permissions to unfamiliar apps, regularly review installed applications, and keep their devices updated. Users should monitor bank accounts for suspicious activity and, if compromised, restart in Safe Mode to uninstall malicious apps. If removal is difficult, backing up data and performing a factory reset is recommended. Citizens are encouraged to report fraudulent applications or cybercrime incidents through the national cybercrime helpline 1930 or the government’s reporting portal.

AppWizard

September 1, 2026

Fake Porn Apps Target Android Users Via Ads On Facebook, Instagram: How To Stay Safe

Cybercriminals are targeting Android users with deceptive advertisements for malicious applications disguised as pornographic content on platforms like Facebook and Instagram. The National Cybercrime Threat Analytics Unit (NCTAU) has reported that these ads lead users to phishing traps or malware downloads that can compromise banking credentials. Malicious applications linked to this threat include “Night Play,” “Reloop,” “Kyss,” “Vimo,” “Rivo,” “Nexo,” and “Vixa.” The scam involves promoting these apps through enticing ads, redirecting users to websites offering pornographic content, and prompting them to download APK files directly from these sites, often using “.live” domains. The initial app may request users to download a second package disguised as an update, which can exploit permissions granted to the first app. This malware can gain extensive control over the device, potentially installing a VPN that routes internet traffic through attackers' servers. To protect against this threat, users should download apps only from trusted sources, avoid installing APK files from ads or suspicious links, refrain from granting Accessibility access to unknown apps, regularly review installed apps, keep Google Play Protect enabled, and monitor bank accounts for unusual activity. If a suspicious app cannot be uninstalled, users can try Safe Mode, remove special permissions, or perform a factory reset as a last resort.

AppWizard

September 1, 2026

How to make sure your Android phone is secure

Android devices have various features to enhance security and privacy. A 2025 Pew Research Center study found that nearly 75% of Americans have faced online scams, which have become more sophisticated, including vishing scams using AI-generated deepfakes. Android offers tools to mitigate these risks, such as AI-driven scam detection and theft protection. To safeguard devices, users should keep their software updated by checking Settings > About Phone for the current version and navigating to Settings > System > Software Updates for updates. App updates can be managed through the Google Play Store under Settings > Network preferences > Auto-update apps. Securing Google accounts with two-factor authentication is recommended, which can be set up via the Google Account management page. Automatic backups can be enabled in Settings > Google > Backup. The Find Hub app helps track lost devices and can be configured in Settings > Location and Settings > Security. Android includes scam detection tools that alert users to potential scams in calls and texts, which can be activated in the Phone app settings. Privacy settings can be managed by adjusting app permissions in Settings > Apps and using the Permission manager in Security & Privacy. Users can opt out of data sharing with advertisers by navigating to Settings > Google > Ads. Google Play Protect scans for harmful apps and should remain enabled for safety. Theft protection features, such as Theft Detection Lock and Remote Lock, can be activated in Settings > Google > Personal & device safety.

AppWizard

August 31, 2026

Home Ministry alerts about rise in financial frauds through malicious Android apps

The Indian Cyber Crime Coordination Centre (I4C) has reported a rise in financial frauds associated with malicious Android applications disguised as pornography apps. These apps, including names like "Night Play," "Reloop," and "Kyss," are promoted through ads on Facebook and Instagram, leading users to phishing websites where they are encouraged to download APK files from unverified sources. The malicious apps exploit permissions granted by users to take control of devices, potentially facilitating unauthorized financial transactions. Recommendations for safety include only installing apps from reputable sources, avoiding suspicious downloads, and regularly monitoring financial transactions. Instructions for uninstalling these apps involve starting the phone in Safe Mode, uninstalling the suspicious app, and then restarting the device.

AppWizard

August 31, 2026

Fake dating apps are being used to target Android users: How the new cyber scam works

India's cybercrime authorities have warned about the misuse of dating and adult-themed advertisements on social media platforms like Instagram and Facebook, which are being exploited by criminals to distribute malicious Android applications. These ads redirect users to external websites where they are prompted to download APK files, bypassing security measures of trusted app stores. The Indian Cybercrime Coordination Centre (I4C) has identified several malicious applications, including Night Play, Reloop, Kyss, Vimo, Rivo, Nexo, and Vixa, and cautions against installing unfamiliar applications promoted through unsolicited ads. These apps may request sensitive permissions, such as access to SMS messages, contacts, photos, device storage, and Accessibility Services, which can allow fraudsters to access valuable information. Compromised devices can lead to financial fraud by intercepting OTPs and other verification details. The I4C recommends using trusted app stores, keeping Google Play Protect active, reviewing app permissions, and being cautious with social media ads. If a suspicious app is installed, users should restart their phone in Safe Mode to uninstall it, disable its permissions if necessary, and consider a factory reset if removal fails. Users who suspect fraud are encouraged to report incidents promptly.

AppWizard

August 23, 2026

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

A new Android malware threat, codenamed Manic, poses significant risks to Ukrainian banks, government services, and messaging applications, with a reach extending to Russian and European financial institutions, global fintech platforms, cryptocurrency services, and military communication channels. Manic combines Android banking malware and mobile spyware, targeting sensitive applications and enabling comprehensive device takeover. It features a novel Wi-Fi mesh technique for data relay through compromised devices and utilizes phishing sites and dropper apps. The malware originated in February 2026, with initial development leading to its first deployment by late May. It monitors 169 package IDs related to banks, payment services, and messaging applications, primarily affecting Ukrainian targets but also impacting applications in Russia and Europe. Manic can infiltrate commercial and military messaging apps, track locations, monitor notifications, and collect files. It exploits Android's accessibility services to capture sensitive data and employs a store-and-forward relay mechanism for data exfiltration through nearby compromised devices. Google has stated that no apps containing this malware are found on Google Play, and Android users are protected by Google Play Protect.

AppWizard

August 18, 2026

The Truth About Android Antivirus Apps in 2026

Most Android users consider third-party antivirus apps unnecessary due to the robust built-in security features of modern Android smartphones. However, Android devices are still vulnerable to viruses, malware, and security breaches, with a 2025 Gen threat report indicating a tripling of malicious push notifications and an increase in spyware issues. Google Play Protect blocked 27 million malicious apps in 2025 and conducts scans to manage security. Android employs sandboxing, regular security updates, and an opt-in permissions system to protect users. Upcoming features include phone call spoofing protection and enhanced live threat detection capabilities. Social engineering tactics, such as phishing and fake tech support calls, pose significant risks that antivirus software cannot address. Connecting to open Wi-Fi networks can expose devices to risks, and malicious push notifications can mislead users. Third-party antivirus apps may be beneficial in high-risk scenarios, such as public Wi-Fi networks or when sideloading apps, providing an additional layer of protection.

Tech Optimizer

August 17, 2026

Best Malware Removal Tools of 2026: Tested on Infected PC

A hands-on evaluation was conducted to assess the effectiveness of various malware removal tools by deliberately infecting a PC and running six different cleanup tools. The recommended steps for users suspecting malware infection include disconnecting from the internet, installing an on-demand scanner, removing detected threats, rebooting the system, and changing passwords. The top malware removal tools identified were: 1. Malwarebytes Free: Quick scan in 2 minutes and 20 seconds; complete removal with no remnants. 2. Bitdefender: Quick scan in 1 minute and 4 seconds; complete removal confirmed. 3. Norton 360: Quick scan in 58 seconds; effective for severely compromised devices. 4. Avast One Free: Quick scan in 1 minute and 12 seconds; complete removal with ongoing protection. 5. McAfee: Full system scan took 16 minutes and 47 seconds; complete removal but slower than others. 6. NordVPN Threat Protection Pro: Focuses on preventing reinfection, does not remove existing malware. Signs of infection include unexpected pop-ups, altered homepage settings, and sluggish performance. For Windows, Safe Mode with Networking is recommended for removal, while Mac users should use Activity Monitor to identify suspicious processes. Android users can utilize Safe Mode and Play Protect for scanning. A factory reset may be necessary if infections persist. Malwarebytes Free and Avast One Free are highlighted as effective free options for malware removal.