mobile applications Archives

AppWizard

May 4, 2026

‘F-Droid’ allows you to easily install and automatically update free, open-source Android apps other than those on Google Play.

Google Play is a primary platform for Android app distribution but poses challenges for developers of free and open-source software due to registration fees and a strict review process. As an alternative, users can install apps via APK files, which allow direct installation but come with security risks. F-Droid is a dedicated repository for free and open-source Android applications, offering built-in update notifications and support. To use F-Droid, users must manually install the app from its official website. After installation, users can navigate the interface to find and install apps, grant permissions for updates, and manage app installations, including enabling settings for unknown sources. F-Droid provides a user-friendly experience for locating and updating apps, ensuring that users have access to secure and regularly updated software.

AppWizard

April 21, 2026

New NGate Android malware variant uses NFC app to steal card data

A new variant of the NGate Android malware exploits a legitimate NFC payment app, HandyPay, to steal users' card information and PINs, enabling unauthorized contactless transactions. This malicious version of HandyPay, which has been available since 2021, was identified by ESET researchers and is distributed through a fraudulent lottery website and a fake Google Play page. The malware captures sensitive information by prompting users to enter their payment card PIN and tap their card against the device, sending the data to an attacker-controlled phone and exfiltrating the PIN to a command-and-control server. The campaign employs social engineering tactics and requires minimal permissions, relying on users to enable app installations from unknown sources. The attackers use a centralized infrastructure for malware distribution and PIN collection, with evidence of compromised devices in Brazil. The shift to modifying a legitimate application is motivated by financial incentives, as it offers similar functionality at a lower cost compared to underground tools. Users are advised to avoid installing apps from unofficial sources and to ensure the legitimacy of applications before entering sensitive information.

AppWizard

April 15, 2026

Meta is shutting down its standalone Messenger site and forcing users to use Facebook starting Thursday

Meta will close its standalone Messenger website on April 16, requiring users to log in to their Facebook accounts to access messaging online. This change will primarily affect non-Facebook users, who will no longer be able to use Messenger via a web browser without creating a Facebook account. Businesses that used the standalone site will need to adjust their workflows, as they will now have to log into Facebook to access messages. This decision is part of Meta's strategy to integrate its messaging services more closely with the Facebook ecosystem.

AppWizard

April 9, 2026

Intent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk

Version 5.2.1 of the EngageSDK was released to address security vulnerabilities related to third-party SDKs, particularly affecting digital asset management applications. Although no exploitation of this vulnerability has been reported, developers are urged to upgrade to the latest version. The Android operating system's security model provides some protections against these vulnerabilities, and the Android team has updated user protections during the transition to the secure version. The vulnerability, classified as severe, allows unauthorized access to protected components and sensitive data through intent redirection. Affected applications, particularly in the cryptocurrency and digital wallet sectors, account for over 30 million installations. The vulnerability was first identified in version 4.5.4 of the EngageLab SDK, reported in April 2025, and was addressed in version 5.2.1 released on November 3, 2025, which set the vulnerable activity to non-exported. Developers are advised to regularly review their Android manifests and upgrade to the latest SDK version to maintain application security.

AppWizard

April 3, 2026

Which messaging app takes the most limited approach to permissions on Android?

Messaging applications Messenger, Signal, and Telegram exhibit significant differences in permissions and operational behaviors that impact user privacy. Telegram has the fewest total permissions at 71, with 25 classified as dangerous; Signal requests 72 permissions, including 19 dangerous ones; and Messenger requests the most at 87, with 24 dangerous permissions. Messenger also has the highest number of vendor-specific unknown permissions. Access to sensitive resources is crucial for messaging functionalities, with permissions for contacts, camera, microphone, location, storage, and calendar being essential. Telegram and Messenger request additional system-level permissions, while Signal is more conservative and does not request certain permissions like phone-call control or overlay windows. The analysis, using the Mobile Security Framework (MobSF), indicates all three apps are in the medium risk category, with Messenger having more flagged issues. Telegram allows cleartext connections by default, potentially exposing traffic, while Signal uses encrypted connections by default and only permits limited cleartext traffic for certificate checks. Messenger's issues include world-writable files and remote debugging enabled in WebViews. Messenger uses third-party SDKs, while Signal and Telegram do not disclose third-party trackers. All three utilize Firebase Cloud Messaging for notifications without sensitive data leakage. Data exchange patterns show Messenger primarily routes traffic through North America, while Telegram and Signal focus on Europe with some additional connections in the U.S. and Asia.

AppWizard

March 25, 2026

Why So Many Apps Let You Try Things for Free

Most mobile applications now invite users to explore features freely before requesting payment, using strategies like free trials and unlocked levels. The initial moments in an app are crucial for user retention, prompting developers to design engaging experiences that capture attention quickly. Mobile gaming pioneered this approach by rewarding players with bonuses to familiarize them with game mechanics without immediate financial pressure. This user-centric model has extended to online entertainment platforms, which offer promotional credits or trial bonuses. The Android ecosystem supports this exploratory model, allowing developers to adapt onboarding strategies based on user engagement. First impressions are critical in the app economy, with seamless and inviting initial interactions increasing user retention.

AppWizard

March 20, 2026

Today’s Android app deals and freebies: Dune Imperium, Forager, Bloons TD 6, more

Today, there are notable Android game and app deals, including Bloons TD 6, Unreal Life, Candleman, Wings of Glory, and Raiders of the North Sea. Additional games on sale are Doom & Destiny Worlds, The Isle of Cats, Dune: Imperium Digital, and Forager. Hardware discounts include the Pixel Watch 4 and open-box deals for the Google Pixel 10 Pro/XL, with savings reaching up to 0.

AppWizard

March 3, 2026

5 of the best new Android apps you need to try this March

Now Playing is a free standalone Android app developed by Google that identifies songs in the user's surroundings and allows them to track their listening history and add tracks to Spotify playlists. It is currently available on Pixel devices. Nova Drift, a roguelite space shooter developed by Chimeric Games, is set to launch on Android on March 10. Pricing details are not yet confirmed. Subnautica: Below Zero, a spin-off of the Subnautica franchise developed by Unknown Worlds, will be available on Android on March 10. Pre-registration is open, but pricing details are not confirmed. The Commuter is a free news app developed by Roambear.com that transforms traditional articles into bite-sized posts and requires a Google account for login. SnapSafe is a free app developed by Dark Rock Studios that provides secure image capture with encryption, a PIN-protected interface, facial blurring, and a "Poison Pill" feature to delete stored data.

AppWizard

February 26, 2026

Google Outlines How AI Agents Will Interact with Android Apps

Google is enhancing Android apps to align with user expectations for artificial intelligence, similar to advancements in Windows 11. Developers received a preview of this initiative, which includes a new feature called AppFunctions. This feature allows Android apps to expose public interfaces for specific functionalities, enabling seamless interaction with AI agents and system-level services. AppFunctions are analogous to the Model Context Protocol (MCP) for cloud-based AI interconnectivity and will be accessible through Google's Jetpack library and platform APIs, ensuring local interactions on devices. AppFunctions are currently in early development, with initial examples implemented in the upcoming Gemini version for the Samsung Galaxy S26 series and other Samsung devices running OneUI 8.5 and higher. Users will interact with Calendar, Notes, and Tasks using AppFunctions to streamline activities. Google is launching an early preview of AppFunctions through a beta feature in the Gemini app, available on the Galaxy S26 series and select Pixel 10 devices, allowing users to delegate tasks to AI agents by double-pressing the power button. The initial rollout will focus on apps in food delivery, grocery, and rideshare sectors in the US and Korea. AppFunctions are expected to be integrated into Android 17, with a stable release anticipated around mid-year.

AppWizard

February 24, 2026

Android mental health apps with 14.7M installs filled with security flaws

Recent analysis by Oversecured identified 1,575 security vulnerabilities across ten mental health mobile applications, which include 54 high-severity, 538 medium-severity, and 983 low-severity issues. These apps, with over 14.7 million downloads, assist users with conditions like clinical depression and anxiety. Vulnerabilities include improper handling of user-supplied URIs, weak local data storage practices, and cryptographically weak session token generation. Six of the ten apps had no high-severity vulnerabilities, but medium-severity issues still pose risks to user privacy. The scans were conducted between January 22 and 23, 2026, and only four apps had received recent updates.