NewApp Digest
search bot

November

NoVoice malware hit 2.3 million Android devices through apps Google never should have approved
AppWizard
April 25, 2026

NoVoice malware hit 2.3 million Android devices through apps Google never should have approved

McAfee researchers discovered a complex Android rootkit campaign, dubbed Operation NoVoice, that infiltrated 50 applications on Google Play, exploiting vulnerabilities in the kernel that had been patched but not uninstalled. The malware was resilient enough to survive factory resets and was concealed within seemingly benign apps, which collectively garnered 2.3 million downloads. The malicious payload was hidden in the com.facebook.utils package and used steganography to embed an encrypted payload within a PNG image. The malware conducted multiple checks to avoid detection and established contact with a command-and-control server, polling for exploit packages every 60 seconds. It utilized 22 distinct exploits, including vulnerabilities that had received patches between 2016 and 2021. The malware disabled SELinux enforcement and installed a persistent rootkit that could survive factory resets. Google confirmed the removal of the infected apps but noted that users who had already downloaded them remained at risk, especially if their devices were running unpatched Android versions. McAfee advised affected users to treat their devices as compromised and consider professional inspection or hardware-level storage wiping for remediation.
Mass Effect devs have been practically radio silent for over 5 years because there's 'not a lot of time for tease'
AppWizard
April 25, 2026

Mass Effect devs have been practically radio silent for over 5 years because there’s ‘not a lot of time for tease’

The next installment in the Mass Effect series, referred to as "Mass Effect 5," was announced during The Game Awards in 2020, but updates have been limited over the past five years. Project director Mike Gamble confirmed that BioWare is currently focused exclusively on the game, despite concerns following EA's downsizing of the developer. He noted that the team is busy working on the project, which has resulted in a lack of teasers for fans. N7 Day on November 7 and The Game Awards 2026 on December 10 are potential opportunities for BioWare to share updates. Some fans express concern about the franchise's future and suggest that BioWare may need to explore new creative directions to regain its former success.
Despite microtransaction woes at launch, MMO sequel Aion 2 will go global this year
AppWizard
April 23, 2026

Despite microtransaction woes at launch, MMO sequel Aion 2 will go global this year

Aion 2, launched in November of last year and set 200 years after the original game, has gained traction despite mixed reviews on its microtransaction strategies. It is preparing for a global release on Steam later this year, targeting players in North America, South America, Japan, and Europe by 2026. The game generated millions within the first month and a half of its release and has over 1 million subscribers, contributing to a 12% increase in NCSoft's revenue for the quarter.
Xbox Just Dropped The Price Of Game Pass Ultimate, But There's A Catch
AppWizard
April 21, 2026

Xbox Just Dropped The Price Of Game Pass Ultimate, But There’s A Catch

Microsoft has reduced the monthly fee for Xbox Game Pass Ultimate from .99 to .99 and for PC Game Pass from .49 to .99. Subscribers will lose immediate access to new releases of the "Call of Duty" series, which will now be available on Game Pass approximately a year after their initial release. Despite these changes, most aspects of the Game Pass services will remain unchanged, including day-one access to other gaming titles, online multiplayer capabilities, and in-game perks. The service has over 20 million users as of November 2022.
Trojanized Android App Fuels New Wave of NFC Fraud
AppWizard
April 21, 2026

Trojanized Android App Fuels New Wave of NFC Fraud

A new variant of the NGate malware family has emerged, using a trojanized Android application to capture payment card data and personal identification numbers (PINs). This modified version of HandyPay, a legitimate NFC relay app, has been distributed since November 2025, primarily targeting users in Brazil. The malware intercepts NFC payment card data and allows fraudulent transactions. Two distinct malware samples have been observed, delivered through phishing infrastructure that impersonates a Brazilian lottery site and a Google Play listing for a card protection tool. The trojanized app captures NFC data, requests the victim's card PIN, and transmits this information to attacker-controlled infrastructure. It requires minimal permissions, leveraging its role as the default payment application to evade detection. Evidence suggests that generative AI tools may have been used in its development, indicated by emoji markers in debug logs. ESET has reported its findings to Google, and Google Play Protect can detect known versions of the malware. The developer of HandyPay is investigating the misuse of its application.
NGate Android malware uses HandyPay NFC app to steal card data
AppWizard
April 21, 2026

NGate Android malware uses HandyPay NFC app to steal card data

A new variant of the NGate malware targets Android users by disguising itself within a trojanized version of the HandyPay app, which is a legitimate mobile payment processing application. This malware, documented since mid-2024, siphons payment card information through the mobile device's near-field communication (NFC) chip and sends the stolen data directly to attackers, who create virtual cards for unauthorized purchases or cash withdrawals from NFC-enabled ATMs. The new variant has been injected with malicious code into the HandyPay app, which has been available on Google Play since 2021. The code includes emojis, indicating the possible use of a generative AI tool in its development. The shift from previous iterations, which used an open-source tool named NFCGate, to HandyPay is likely motivated by financial considerations and the need for evasion, as HandyPay is more affordable and requires fewer permissions. This NGate variant has been active since November 2025, primarily targeting Android devices in Brazil. It employs two main distribution methods: a counterfeit app named “Proteção Cartão” hosted on a fraudulent Google Play page and a fake lottery website that redirects users to WhatsApp to download the malicious APK. Upon installation, the app prompts users to set it as their default NFC payment application, requests their card PIN, and instructs them to tap their card on the phone for reading, transmitting all collected information to an attacker's email address. To protect against such threats, Android users are advised to avoid downloading APKs from outside Google Play, disable NFC when not in use, and use Play Protect to scan for threats.
New NGate Android malware variant uses NFC app to steal card data
AppWizard
April 21, 2026

New NGate Android malware variant uses NFC app to steal card data

A new variant of the NGate Android malware exploits a legitimate NFC payment app, HandyPay, to steal users' card information and PINs, enabling unauthorized contactless transactions. This malicious version of HandyPay, which has been available since 2021, was identified by ESET researchers and is distributed through a fraudulent lottery website and a fake Google Play page. The malware captures sensitive information by prompting users to enter their payment card PIN and tap their card against the device, sending the data to an attacker-controlled phone and exfiltrating the PIN to a command-and-control server. The campaign employs social engineering tactics and requires minimal permissions, relying on users to enable app installations from unknown sources. The attackers use a centralized infrastructure for malware distribution and PIN collection, with evidence of compromised devices in Brazil. The shift to modifying a legitimate application is motivated by financial incentives, as it offers similar functionality at a lower cost compared to underground tools. Users are advised to avoid installing apps from unofficial sources and to ensure the legitimacy of applications before entering sensitive information.
Microsoft tests Windows Explorer speed, performance improvements
Winsage
April 20, 2026

Microsoft tests Windows Explorer speed, performance improvements

Microsoft is enhancing File Explorer for Windows 11 Insider program users, focusing on improved launch speed and performance. A preloading feature was tested that allows File Explorer to load in the background for faster access, which users can disable in the Folder Options. These updates follow the introduction of Startup Boost for Office applications, which also aims to improve loading times. The Windows Insider Program Team is also working on enhancing the reliability of the explorer.exe process and addressing issues with bright white flashes when opening File Explorer in dark mode. Additionally, a new Xbox mode has been introduced for Windows 11 PCs, providing a full-screen gaming interface to reduce distractions. These updates are being rolled out to Insiders in the Release Preview channel with specific Windows 11 builds installed.
Search