identification Archives

AppWizard

September 24, 2026

HSBC decides Samsung Secure Folder and Android’s Private Space are no place for a banking app

HSBC has restricted its Android app from functioning within Samsung's Secure Folder and Android's Private Space, causing many customers to lose access to online banking services. The bank described this as a "proportionate security control" to mitigate risks, stating that customers must use the app outside these environments. Feedback from users has been largely negative, with complaints about abrupt access loss and inadequate communication regarding the changes. Customers are unable to utilize web banking due to the app's requirement for multifactor authentication, and some have raised concerns about HSBC's compliance with the Financial Conduct Authority's Consumer Duty. HSBC has advised customers to access the app outside of protected spaces and mentioned the option of using a Physical Secure Key for desktop banking.

AppWizard

September 23, 2026

RatHat Android Malware Uses AI to Target Banking Credentials in Real Time

A newly identified strain of Android malware, RatHat, utilizes generative AI to manipulate infected devices in real time. It is linked to threat actors believed to be operating out of China. RatHat serializes the device’s live Accessibility tree into XML format and communicates with a generative AI assistant to return screen coordinates, identify text, and issue navigation commands. The malware employs WebView-based HTML overlays to capture login credentials from banking and cryptocurrency applications and can infiltrate payment apps like WeChat and Alipay to extract PINs. It also features an SMS receiver and notification listener to intercept OTPs and 2FA codes. RatHat is disseminated through smishing, malvertising campaigns, and misleading third-party forums. It employs anti-analysis techniques such as container tampering, manifest bombing, DEX bytecode poisoning, string encryption, and anti-debugging. Once installed, it gains Accessibility access, activates Developer Options, and enables Wireless Debugging, allowing it to connect to the device's local ADB service and launch control agents with shell-level privileges. The malware captures raw touch coordinates to reconstruct PINs and unlock patterns, bypassing screenshot protections. It also includes persistence mechanisms that prevent uninstallation by presenting a fake Google Play failure overlay and automatically reinstalling itself if removed.

AppWizard

September 18, 2026

GrapheneOS Isn’t Happy With Google Over Pixel’s Widening Head Start

Google's September 2026 Pixel Update Bulletin includes patches that affect standard Android platform code, relevant to both Pixel and non-Pixel devices, which have not been included in the regular monthly Android Security Bulletin. GrapheneOS has noted that Android 17 QPR1 introduced new developer APIs not present in the Android Open Source Project (AOSP) for the first time since Android Honeycomb, with one new package and modifications to sixteen others. GrapheneOS is backporting Pixel firmware and drivers from QPR1 onto Android 17 but lacks permissions to distribute this work. Additionally, there has been a delay in Google’s compliance with a GPL source request, with access granted over two weeks after the initial request. Starting in 2027, Google will require all Android app developers to register with them and provide legal identification and signing key evidence, complicating the process of sideloading unverified apps. GrapheneOS and other organizations are advocating for the Keep Android Open campaign against these developments, which may restrict competition and tighten Google's control over the Android ecosystem.

AppWizard

September 13, 2026

One problem with Android Auto can be fixed with a simple update

When troubleshooting Android Auto connectivity issues, it's important to consider both the smartphone and the car's infotainment system, as the latter also runs on software that may need updating. Google recommends restarting the infotainment system and checking for firmware updates, especially for aftermarket units. Automakers are releasing updates to improve Android Auto performance, such as Hyundai's February 2026 update for ccNC-equipped vehicles in Europe, which enhanced wireless connectivity and reconnection capabilities. The method for installing updates varies by manufacturer, with some allowing direct downloads via Wi-Fi and others requiring a USB drive or dealer assistance. A firmware update may not resolve all Android Auto issues, particularly if problems arise after a phone or Android Auto update. It's advisable to check Google's Known Issues page for specific models before updating the car's software. Compatibility should be verified, and Android Auto must be enabled in the infotainment system. Updating the car's software is a troubleshooting step, not a guaranteed fix, and firmware updates cannot enable Android Auto on unsupported hardware.

AppWizard

September 12, 2026

Android’s September Update Simplifies Tracking Important Items

The September Android Drop introduces features aimed at enhancing connectivity and organization for small business owners, including the Find Hub functionality that allows users to track important items using the Gemini app. Users can remember the locations of crucial items, such as passports or spare keys, by telling Gemini where they placed them and adding photos for identification. These features are applicable to devices running Android 16 and above and are designed to streamline daily tasks, particularly for traveling entrepreneurs. However, small business owners should consider potential challenges, such as the need for a stable internet connection and data privacy concerns. Additionally, there may be a learning curve associated with using the Gemini app and Find Hub.

AppWizard

September 10, 2026

Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

The Gigabud banking trojan installs a secondary Android application called Vwork, which creates a work profile on compromised devices to evade detection from banking app security measures. This work profile separates its contents from the personal space of the device, allowing fraudulent transactions without triggering alerts. Group-IB confirmed this operational chain in Indonesia, where Gigabud has been active since 2022 and is linked to the GoldFactory group, which uses deceptive tactics to distribute the trojan. Vwork simplifies the creation of a work profile and communicates with an external server for authorization before cloning apps. The report indicates that Vwork has been detected in various countries, while approximately 1,469 devices and 1,281 logins were compromised in Indonesia, leading to estimated losses of around ,000,000. Users can check for a work profile in their phone's settings and are advised to download apps only from official stores and to deny unnecessary Accessibility access.

AppWizard

September 9, 2026

How to make money fast in Wardogs

Players in Wardogs navigate a military simulation that requires strategy and resource management, investing in their own gear. Effective methods to boost earnings include: - Using binoculars to spot enemy units, earning cash for each identification and additional rewards for teammate eliminations. - Constructing a Forward Operating Base (FOB) to earn cash through building and enhancing it. - Reviving teammates for 0 each, maximizing earnings with resuscitators and healing bonuses. - Driving the spawn vehicle to the action zone to collect royalties. - Acting as a taxi driver with helicopters for cash from drop-offs and tips. - Adopting a frugal playstyle by using inexpensive weapons to engage in combat and loot better gear. - Being present in the Hot Zone to earn passive income and bonuses for kills and assists.

Winsage

September 9, 2026

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft addressed 974 vulnerabilities in its software suite during its recent Patch Tuesday, marking a record high. The breakdown includes 723 flaws in Windows, 111 in Office, 62 in SQL, and 22 in Developer Tools, with over 110 rated as critical. Two actively exploited vulnerabilities are CVE-2026-85880 and CVE-2026-81963, both allowing local privilege elevation. Other notable vulnerabilities include CVE-2026-55007 (8.1), CVE-2026-80097 (8.6), CVE-2026-69465 (8.8), and several with CVSS scores of 9.6 and above. Microsoft has patched a total of 2,760 security flaws this year, reflecting a trend of increasing vulnerability discoveries. Despite the extensive patching, no significant spike in active exploits has been observed.

AppWizard

September 8, 2026

7 Ways To Use Private Space On Your Android Device That Are Actually Helpful

Google's Private Space is a feature on Android devices that creates a secure environment for managing sensitive information. It allows users to lock banking apps, providing a secure vault that is hidden from the main interface and protected from malware and unauthorized access. Users can enhance security with a unique PIN or biometric authentication, and the space locks automatically when the smartphone is secured. Private Space also serves as a secure repository for personal documents, enabling users to move files like PDFs and IDs into it, ensuring they remain inaccessible until the space is locked. Additionally, Private Space allows users to separate personal and professional digital lives by logging into a different Google account, maintaining distinct emails, contacts, and calendar events. Users can install separate instances of messaging and social media apps within Private Space to manage multiple accounts securely. It also helps keep dating apps hidden, protecting users' privacy and personal data. When sharing devices, Private Space ensures personal data remains secure behind authentication. Lastly, it allows users to store data locally without syncing to the cloud, prioritizing privacy over convenience.

AppWizard

September 8, 2026

Google’s Song Search may borrow inspiration from Pixel’s Now Playing to get out of your way

The Google app is introducing a background listening feature for its Song Search capability, allowing it to identify songs while users switch to other applications. In version 17.56.14, users can now multitask without keeping the app open, as the microphone will remain active for a limited time to identify songs. If a song is not identified within that time, users will receive a notification to restart the search. Upon successful identification, users will be redirected to an AI Mode result instead of the traditional search results page. Early testing shows the feature functions smoothly, though the rollout timeline is uncertain.