media files Archives

AppWizard

September 28, 2026

First look: Google Messages could soon get a faster way to search within chats

Google is enhancing the Google Messages app with updates aimed at improving functionality, including a new feature for enhanced search. In beta version v20260921, users will soon see a floating search icon when scrolling up in a chat, simplifying the process of finding specific messages or media files. Currently, users must tap a three-dot menu to search, but the new icon will make it more accessible. Initial tests show the feature operates smoothly, with a potential rollout expected, starting with beta users. Features discovered through APK teardowns are not guaranteed for public release.

AppWizard

September 12, 2026

New Android Ransomware Records Screens, Steals OTPs and Secretly Takes Photos of Victims

A newly identified malware threat in the Android ecosystem, named Mantax Otax, combines ransomware with espionage capabilities. It targets users who install applications from untrustworthy sources, often through messaging apps or phishing attempts. The malware is linked to Indonesian cybercriminals and can steal sensitive information such as SMS one-time passwords, chat histories, and lock-screen PINs, facilitating account takeovers. Mantax Otax requests device-administrator rights and seeks access to SMS messages, contacts, and media files. It encrypts files on devices running Android 9 and earlier using AES encryption and demands a ransom for recovery. Although the impact is reduced on Android 10 and later due to Scoped Storage, the malware still poses significant surveillance risks. The malware collects extensive sensitive data, including contacts, call logs, and location data, and targets multi-factor authentication codes. It uses a deceptive system-lock overlay to capture PINs and has introduced features like WebSocket communications and disruptive pop-ups in its second iteration. Users are advised to be cautious when installing applications, avoid unsolicited APKs, and reject permissions that do not align with an app's purpose. In case of suspicious activity, users should disconnect from networks and seek help before entering sensitive information. Organizations should monitor for signs of this malware on managed devices.

AppWizard

August 12, 2026

3 Apps You Can Sideload On Android Auto

Transforming an old tablet into an Android Auto head unit involves activating developer mode and enabling "Unknown Sources" to sideload applications. Alternatively, third-party tools like Android Auto Apps Downloader (AAAD) can be used to integrate unofficial apps. Sideloading carries risks, as these apps are not officially vetted and may malfunction after system updates. CarStream is a sideloaded app that allows users to access YouTube on their car display without rooting their phone, making it useful during parked moments. Fermata Auto is an open-source media player that plays local media files from a phone or hard drive, ideal for offline use. Screen2Auto mirrors a phone's display onto the car screen, allowing access to any app, but should be used with caution while driving.

AppWizard

July 26, 2026

Your Android’s System Data Now Takes Up Cloud Storage Space – Here’s How To Disable It

Google has introduced granular backup settings for Android users, allowing them to manage data preservation more effectively. Users can disable cloud backups entirely and selectively choose which data sources or applications to back up. To adjust these settings, they can go to Settings > Google (or Google Services) > Other Device Data and toggle off the backup option. When cloud backups are disabled, app settings, call history, SMS messages, and media files will not be saved unless enabled individually. Backed-up data remains on Google's servers until manually deleted. If users exceed their cloud storage limit, they will face restrictions, such as being unable to send or receive emails in Gmail or back up photos to Google Photos. With cloud backups disabled, new devices will not automatically restore data from Google's cloud services. Users can expand their Google account storage by subscribing to Google One, with plans starting at .99 per month for 100GB. An active Google One subscription offers additional perks, including sharing benefits with family and access to enhanced Google Workspace features.

Tech Optimizer

July 24, 2026

CrashStealer Mac malware steals passwords and wallets

A sophisticated new malware targeting Mac users, named CrashStealer, has been discovered by security researchers at Jamf Threat Labs. It masquerades as Apple's legitimate crash-reporting software and was first identified in May 2026, with active attacks detected by early July. CrashStealer is designed to extract sensitive information, including browser credentials, password manager data, and cryptocurrency wallet information, and can copy the Mac login Keychain. It uses native C++ programming, encrypts collected files, and employs anti-debugging features. The malware is distributed through a disk image labeled "Werkbit Setup," which features a polished installer that bypasses Mac security warnings by using a valid Apple Developer ID and notarization ticket. Once opened, it connects to GitHub for commands and downloads a script that installs a second disk image named CrashReporter.dmg, which mimics an Apple system component. CrashStealer presents a fake password prompt resembling a legitimate macOS request, verifying entered passwords locally. It targets data linked to various browsers and password managers, scanning for approximately 80 cryptocurrency wallet extensions and 14 password managers. Stolen data is stored in hidden folders, encrypted using AES-256-GCM, and packaged into hidden ZIP archives before being uploaded. Warning signs of infection include a website requiring a meeting PIN for download, unexpected password prompts, and unfamiliar apps requesting Full Disk Access. Users are advised to download apps from verified sources, avoid overriding security warnings, pause before entering passwords, review app permissions, install security updates, use antivirus software, and act quickly if they installed Werkbit Setup.

Winsage

June 12, 2026

Popular Windows 11 file manager Files gets improved tags, layouts, and new OneDrive icon

Files, a third-party file manager for Windows 11, has been updated to version 4.1.3, introducing several enhancements: - A "View size" button for each folder allows users to calculate folder sizes easily without changing settings. - File selection is retained when switching between different layouts. - Tag management has been streamlined, allowing users to remove tags via the context menu, toolbar, or Command Palette. - The OneDrive icon has been updated to reflect the current version from the OneDrive executable. - Bug fixes include resolving issues with tar archive extraction, crashes on the Signatures page, ensuring the Play action for single media files, correcting Smart Extract functions, addressing tag search issues, refreshing thumbnails, and displaying previously hidden BitLocker-locked drives. - A new Tree View sidebar feature is planned for future updates, enabling navigation of folders in an expandable hierarchy. Files can be downloaded from the Microsoft Store (paid version) or accessed through its official website (free version).

AppWizard

June 10, 2026

France’s Government Messaging App Tchap Got Breached

On June 7, 2026, Tchap, the French government's encrypted messaging platform for civil servants, experienced a significant breach detected by ANSSI. The breach resulted from a compromised user account and involved the education shard of Tchap, specifically targeting matrix.agent.education.tchap.gouv.fr. Approximately 650,000 messages, data from over 73,000 accounts, and about 13.5GB of documents and media files were allegedly scraped. The attacker also claimed to have discovered hardcoded LDAP credentials leaked through a PowerShell script shared by a regional director of the French tax authority. DINUM, the French Digital Affairs Directorate, stated that private conversations on Tchap are end-to-end encrypted and that the compromised account has been blocked. They notified CNIL about the potential exposure of personal data and reminded users to avoid sharing sensitive information in public chat rooms. The breach follows a mandate from Prime Minister François Bayrou in August 2025 requiring all civil servants to use Tchap, increasing its attractiveness as a target for cyber threats. The investigation into the breach is ongoing.

BetaBeacon

May 6, 2026

A rigged game: ScarCruft compromises gaming platform in a supply-chain attack

- ScarCruft, also known as APT37 or Reaper, is a North Korean espionage group targeting government, military organizations, and companies in Asia. - BirdCall is a Windows backdoor attributed to ScarCruft, with spying capabilities such as taking screenshots and logging keystrokes. - The Android version of BirdCall collects contacts, SMS messages, call logs, and media files, and was actively developed over several months. - The BirdCall backdoor was discovered in a trojanized card game on a gaming platform tailored for ethnic Koreans living in Yanbian, China. - The attack was likely aimed at collecting information on individuals from the Yanbian region deemed of interest to the North Korean regime, such as refugees or defectors.

BetaBeacon

May 6, 2026

North Korean hackers targeted ethnic Koreans in China with Android ‘BirdCall’ malware

North Korean hackers targeted ethnic Koreans in China with a malware disguised as a popular Android mobile game called BirdCall, allowing them to steal personal data from victims.

BetaBeacon

May 5, 2026

ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows

ScarCruft compromised a video game platform in a supply chain attack, trojanizing its components with a backdoor called BirdCall to target ethnic Koreans residing in China. The attack enabled the threat actors to target both Windows and Android devices, turning it into a multi-platform threat. The campaign targeted sqgame[.]net, a gaming platform used by ethnic Koreans in China, known as a transit point for North Korean defectors. BirdCall has features like screenshot capture, keystroke logging, and data gathering, and relies on legitimate cloud services for command-and-control. The Android variant collects various data and has seen active development.