messages Archives

AppWizard

September 12, 2026

New Android Ransomware Records Screens, Steals OTPs and Secretly Takes Photos of Victims

A newly identified malware threat in the Android ecosystem, named Mantax Otax, combines ransomware with espionage capabilities. It targets users who install applications from untrustworthy sources, often through messaging apps or phishing attempts. The malware is linked to Indonesian cybercriminals and can steal sensitive information such as SMS one-time passwords, chat histories, and lock-screen PINs, facilitating account takeovers. Mantax Otax requests device-administrator rights and seeks access to SMS messages, contacts, and media files. It encrypts files on devices running Android 9 and earlier using AES encryption and demands a ransom for recovery. Although the impact is reduced on Android 10 and later due to Scoped Storage, the malware still poses significant surveillance risks. The malware collects extensive sensitive data, including contacts, call logs, and location data, and targets multi-factor authentication codes. It uses a deceptive system-lock overlay to capture PINs and has introduced features like WebSocket communications and disruptive pop-ups in its second iteration. Users are advised to be cautious when installing applications, avoid unsolicited APKs, and reject permissions that do not align with an app's purpose. In case of suspicious activity, users should disconnect from networks and seek help before entering sensitive information. Organizations should monitor for signs of this malware on managed devices.

AppWizard

September 12, 2026

5 Android Auto Mistakes That Could Be Ruining Your Driving Experience

Many users face challenges with Android Auto, but solutions often depend on aligning the platform with their needs. Keeping Android Auto updated is essential for security and new features; it requires Android 9.0 or later, with Android 11.0 recommended for Wi-Fi functionality. Google has introduced updates that enhance the app's capabilities, including support for video apps and Dolby Atmos. Users can explore third-party apps via the Google Play Store to enhance their experience, such as using Waze for navigation instead of Google Maps. The choice of USB cable affects performance; a high-quality USB cable is recommended for a reliable connection. Managing notifications is crucial for focus while driving, and users can customize settings to limit distractions. Voice controls can help reduce distractions, with options to use Google Assistant or the Google Gemini app for natural interactions while driving.

AppWizard

September 11, 2026

NetScaler vulnerability exploited, AdaptHealth suffers breach, new Android malware

The Cybersecurity and Infrastructure Security Agency (CISA) warned of a critical vulnerability in NetScaler, identified as CVE-2026-19490, with a CVSS score of 9.3, which has been exploited and affects all NetScaler ADC and Gateway appliances. Citrix has patched this vulnerability as of August 19. AdaptHealth reported a data breach affecting over 4.1 million individuals, compromising personal, health, and insurance information, but not Social Security numbers or financial data. A new strain of Android malware, MantaxOtax, attributed to Indonesian threat actors, combines ransomware and spyware, stealing sensitive information and affecting older Android versions. The Gigabud banking trojan has evolved to evade detection by installing a secondary app that hides the malicious application. CISA acting director Nick Andersen emphasized the need for swift adaptation to cybersecurity threats and highlighted staffing improvements within CISA. Russian e-commerce giant Wildberries experienced disruptions from a DDoS attack affecting payments to sellers, following claims of a cyber operation by Ukraine's military intelligence. McKesson faced a cyberattack exposing sensitive data of 6.4 million individuals, with the ShinyHunters group releasing this data after a failed extortion attempt. IDScan confirmed a data breach affecting 150 million individuals, resulting in the theft of personally identifiable information and government-issued documents.

AppWizard

September 11, 2026

Finally Here! Google Messages and Google Keep Integration [Android Drop]

On September 1, 2026, Google announced the integration of Google Keep into the Google Messages app as part of the upcoming “Android Drop” set to launch in early September 2026 for Android devices. A “Keep Note” option will be available in the “+” menu on the chat screen, requiring users to opt-in by selecting “Try it now.” This integration allows users to share and update lists and notes directly within chat conversations, enhancing collaboration among group members.

AppWizard

September 10, 2026

RistOS – The app-less Android whose brain stays at home

The narrative describes a Google Pixel smartphone using RistOS, a minimalist firmware designed for the Pixel 10a. Upon activation, the interface displays only the time, a microphone button, and a text input line. RistOS replaces the traditional Android launcher with a voice assistant and organizes phone functionalities in a side menu with seven entries: Phone, Messages, Camera, Gallery, Offline Maps (Organic Maps), Flashlight, and Settings. There is no app store, browser, or Google account, emphasizing simplicity. RistOS is built on GrapheneOS but is not affiliated with it or Google. It is only compatible with the Pixel 10a, priced at €389. The microphone button does not activate listening by default; users must configure settings to connect to a Rist backend for audio command processing. User data is centralized on a server, and the installation process erases existing data. The system does not support contacting emergency services, and alternatives like /e/OS are suggested for those wanting to avoid Google's ecosystem without server setup.

AppWizard

September 10, 2026

Comma Compliance Open-Sources the Android App That Archives Employee Text Messages

Comma Compliance released the source code for its Android capture component on September 10, 2026, allowing corporate IT and security teams to inspect the software that captures employee text messages for compliance archiving. The source code is available on GitHub under the MIT license. The capture mechanism reads messages stored in the phone's default messaging app, encrypts them, and sends them to the customer's Comma backend without intercepting messages in transit. A persistent notification appears on the phone when archiving is active, indicating the organization responsible for the archiving. Comma previously open-sourced its WhatsApp and Signal capture connectors in 2025.

AppWizard

September 10, 2026

Fix: Embark Game Boot Fatal Error (Detected Software) ARC Raiders

ARC Raiders players may face issues launching the game due to the Embark Game Boot halting unexpectedly because of a fatal error. Two main error messages can occur: "Detected Software," indicating that the anti-cheat system has identified a disallowed process, and "Failed to install EasyAntiCheat," which suggests that the EAC service or driver could not be initialized. The first error can be triggered by an AutoHotkey-based utility, while the second may arise from a locked EAC file, another anti-cheat process, or an incomplete installation of the service. If players reach the menu but experience crashes, they should consult the ARC Raiders crashing and freezing guide for troubleshooting steps related to the Embark Game Boot or Easy Anti-Cheat. Specific error messages and their solutions include: - "Detected Software or Cheat Software Detected": Close the named process. - "Failed to install EasyAntiCheat or EAC is not installed": Run EAC uninstall and install scripts. - "Error 30005 or CreateFile failed with 32": Restart Windows to unlock the EAC file. - "Maximum simultaneous game instances reached": Close other games and anti-cheat processes. - "An ARAV code names AutoHotkey, an auto-clicker, Cheat Engine, a VM, or another tool": Stop the named program. - "An ARAV code ending in 005, 006, or 007": Verify the game installation in Steam. To resolve issues: 1. Check and close the program named by Embark Game Boot. 2. Repair Easy Anti-Cheat from the ARC Raiders Installer Folder. 3. Verify the ARC Raiders installation in Steam. 4. Reinstall ARC Raiders if previous steps fail, and provide detailed error information to Embark Support if issues persist. Players should ensure that any flagged processes are closed before attempting to launch the game or reinstall it.

AppWizard

September 10, 2026

Tong Launches Investigation of Messaging App He Calls ‘Cesspool Of Sexual Abuse’

Attorney General William Tong has launched an investigation into MediaLab.AI Inc., the parent company of Kik, due to concerns about the app's child safety practices. Kik is described as having inadequate age verification and content screening, with about one-third of American teenagers using it, and 70% of users aged 13 to 24. The National Center on Sexual Exploitation identified Kik as a leading app for exposing children to sexual content and included it in their “Dirty Dozen” list. Between 2014 and 2020, over 2,000 federal cases involved Kik. MediaLab has attempted to improve safety by reclassifying the app to an 18+ rating and activating explicit content filters, but these efforts have been deemed insufficient. The investigation will also assess Kik's compliance with the Connecticut Data Privacy Act, focusing on the handling of sensitive data without consent.

AppWizard

September 10, 2026

How to Delete Your Digital Footprint From the Internet: A Complete Guide

Android privacy tools allow users to control camera access, microphone use, location permissions, and app activity, but they only protect information managed on the device or connected services. A digital footprint extends beyond the device, with personal information remaining accessible through search results, social media profiles, and data broker listings even after permissions are changed. To manage this footprint, users should identify publicly visible information, review old accounts, and delete unnecessary records. Simply deleting an Android app does not erase the associated account, which may retain personal data. Users should actively close unused online accounts to maintain digital hygiene. Data brokers publish personal information that cannot be removed through Android privacy settings, requiring users to follow an opt-out process to remove their data. While Android privacy settings are important, they do not eliminate external records. Data breaches require vigilance, including changing compromised credentials and monitoring for suspicious activity. Removing the source of information is more effective than just eliminating search results, and legal rights may exist in some regions for personal data removal. Completely erasing a digital footprint is rarely feasible due to public records and the persistence of past posts. The goal should be to minimize irrelevant content while retaining useful accounts. Users should begin by deleting information they control, then address data brokers and public profiles.

AppWizard

September 9, 2026

Hackers Clone Banking Apps into Hidden Profiles, Android Malware Raises New Fraud Concerns

Cybercriminals are using advanced Android malware that mimics banking applications within hidden Work Profiles to bypass traditional fraud detection systems. This method is linked to Gigabud, a Remote Access Trojan active since at least 2022, and Vwork, an application cloning tool based on open-source software. Attackers distribute phishing links via social media and messaging, tricking victims into installing malicious files disguised as legitimate utilities. Once installed, the malware seeks Accessibility permissions and other capabilities to capture screen credentials and control the device. Vwork creates an isolated Work Profile to duplicate banking apps, allowing attackers to conduct fraudulent transactions without triggering security alerts in the personal space. Instances of counterfeit financial applications operating from these isolated environments have been documented, particularly in Indonesia. Between February and July 2026, monitoring revealed around 1,469 compromised devices and 1,281 compromised account credentials in Indonesia, resulting in estimated financial losses of 8.2 crore rupees. The operation is believed to be part of a larger international campaign linked to GoldFactory, with malware targeting users in multiple countries including Brazil, Colombia, Egypt, and others. Security experts warn that unusual Work Profile installations, duplicated banking apps, and unexpected requests for Accessibility permissions indicate a compromised device. Users are advised against sideloading APK files from private messages and should limit sensitive permissions to verified applications. Researchers emphasize the need for financial institutions to adopt behavioral analysis to detect unauthorized transactions effectively.