Older Android Versions Archives

AppWizard

September 11, 2026

NetScaler vulnerability exploited, AdaptHealth suffers breach, new Android malware

The Cybersecurity and Infrastructure Security Agency (CISA) warned of a critical vulnerability in NetScaler, identified as CVE-2026-19490, with a CVSS score of 9.3, which has been exploited and affects all NetScaler ADC and Gateway appliances. Citrix has patched this vulnerability as of August 19. AdaptHealth reported a data breach affecting over 4.1 million individuals, compromising personal, health, and insurance information, but not Social Security numbers or financial data. A new strain of Android malware, MantaxOtax, attributed to Indonesian threat actors, combines ransomware and spyware, stealing sensitive information and affecting older Android versions. The Gigabud banking trojan has evolved to evade detection by installing a secondary app that hides the malicious application. CISA acting director Nick Andersen emphasized the need for swift adaptation to cybersecurity threats and highlighted staffing improvements within CISA. Russian e-commerce giant Wildberries experienced disruptions from a DDoS attack affecting payments to sellers, following claims of a cyber operation by Ukraine's military intelligence. McKesson faced a cyberattack exposing sensitive data of 6.4 million individuals, with the ShinyHunters group releasing this data after a failed extortion attempt. IDScan confirmed a data breach affecting 150 million individuals, resulting in the theft of personally identifiable information and government-issued documents.

AppWizard

September 10, 2026

Google Play Early Access Abused to Push Thousands of Deceptive Android Apps

Bad actors are exploiting Google Play's Early Access program to distribute misleading applications that promise money, rewards, and casino winnings. This program allows developers to gather user feedback on unreleased apps but lacks public reviews or star ratings, enabling malicious actors to launch numerous fraudulent applications without immediate scrutiny. An example is the app "Vice Streets: Open World," which mimics Grand Theft Auto, has over 1 million downloads, and recently disappeared from the store without reviews or ratings. These deceptive apps are often promoted on social media with misleading advertisements and promise cash rewards, but users face obstacles when trying to withdraw their earnings. The primary goal of these apps is to generate revenue through excessive advertisements while circumventing regulatory requirements for legitimate gambling apps. Additionally, various malware families targeting Android devices have emerged, including Hagaseca, Mantax Otax, StreamRat, and GoldFactory's use of the Gigabud banking trojan, highlighting ongoing security threats in the digital landscape.

AppWizard

August 26, 2026

RetroArch vs Lemuroid vs .emu: 127 Cores, $4.99 Each [2026]

As of August 2026, the main options for Android emulators include RetroArch, Lemuroid, and the .emu family of apps. RetroArch offers extensive system coverage and features, including netplay and rewind capabilities, but can be confusing for new users due to its multiple versions. Lemuroid is recognized for its simplicity and quick setup, making it ideal for beginners. The .emu family provides dedicated emulators for individual consoles, ensuring optimized performance but requiring a purchase for each app. RetroArch and Lemuroid are free, while the .emu apps cost around .99 CAD each. All three emulator options are legal, provided users supply their own BIOS files and ROMs. Devices with Snapdragon 660-class chips or newer are recommended for optimal performance across these emulators.

AppWizard

August 26, 2026

GBA Emulator Android: My Boy! vs John GBAC vs RetroArch

Game Boy Advance emulation on Android has gained significant traction in 2026, with key applications like My Boy! priced at .99, John GBAC receiving an update on May 19, 2026, and RetroArch enhancing its mGBA core for free use. The search term "gba emulator android" sees around 8,100 monthly searches in the U.S., reflecting a resurgence in interest, particularly among former GBA owners now in their late 20s and 30s who prefer using their smartphones for gaming. All five apps—My Boy!, GBA.emu, John GBAC, RetroArch, and Lemuroid—can run the entire GBA library at full speed on devices from the last six years. The main differences lie in software quality, including save state management, cheat code reliability, controller mapping, and update frequency. My Boy! and GBA.emu utilize cores derived from VisualBoyAdvance (VBA), while John GBAC uses a custom core, and RetroArch and Lemuroid rely on the mGBA core. In terms of features, all apps support save states, but My Boy! offers multiple named slots with thumbnail previews, while RetroArch has a more complex system. Cheat code support is available across the board, with My Boy! and GBA.emu accepting GameShark and CodeBreaker formats, and RetroArch providing a built-in cheat database. My Boy! stands out for its link-cable emulation, allowing local multiplayer connections, whereas RetroArch's netplay is designed for online gaming. All apps support external controllers, but RetroArch excels in visual enhancements with its extensive shader options. The setup process for all five apps is similar and typically takes under ten minutes. GBA ROMs are small, ranging from 4MB to 32MB, making them easy to store on modern devices without significant battery drain. Common issues include save files not loading, audio problems, and cheat codes failing to apply, with solutions often involving file management and settings adjustments. Users can migrate save files between emulators by ensuring the correct file naming and directory structure. Pros and cons of each app include: - My Boy!: Ad-free, strong multiplayer support, but lower rating and closed-source. - GBA.emu: High rating and broad support, but outdated and lacks a free trial. - John GBAC: Free and recently updated, but lower rating and ad-supported. - RetroArch: Free and feature-rich, but complex setup. - Lemuroid: User-friendly and actively maintained, but limited shader options. All five apps are legally available on Google Play, as they do not distribute copyrighted ROM files. Users are advised to source their ROMs legally, ideally by dumping from their own physical cartridges. GBA emulation remains an accessible entry point into retro gaming on Android, especially compared to more demanding systems like the PS2 or GameCube.

AppWizard

June 19, 2026

How to bring the best Android 17 features to any Android phone today

Android 17 introduces several features that enhance user experience and privacy, including the Bubbles multitasking system for managing multiple tasks, a Privacy Dashboard for easier navigation of privacy settings, and an “Expanded” Dark Mode for improved usability in low-light environments. Users of older Android versions can activate an “Extended” dark mode through developer settings. Additionally, the Twilight app mimics Android 17’s Comfort View to reduce eye strain by adjusting screen color temperatures.

AppWizard

May 18, 2026

Here’s your first look at more of Google’s new 3D emojis for Android 17

Google's upcoming Android 17 update will introduce approximately 250 redesigned Noto 3D emojis, featuring a more pronounced 3D depth effect compared to older versions. These new emojis include various faces, animals, food, and drink icons. The rollout is expected to begin with Pixel phones later this year, although testing on Android 17 beta devices has not yet started.

AppWizard

April 3, 2026

2.3 Million Users Affected by New Android Malware Hid in 50 Google Play Apps

Google has imposed strict restrictions on sideloading applications on Android devices due to concerns about risks from external sources. A new malware named NoVoice has been discovered on Google Play, embedded in over 50 applications with at least 2.3 million downloads, potentially compromising that many devices. The malware seeks root access by exploiting vulnerabilities in older Android versions and can steal sensitive data and install/remove apps without consent. It is difficult to remove, as it installs recovery scripts that survive factory resets. However, Google has stated that devices updated since May 2021 are protected against this threat, and Google Play Protect removes these apps and blocks new installs. Users with devices updated after May 2021 are considered safe, while those with infected apps should consider their devices compromised.

AppWizard

April 1, 2026

‘NoVoice’ Android malware on Google Play infected 2.3 million devices

A new Android malware called NoVoice has been found in over 50 applications on Google Play, with more than 2.3 million downloads. The malware targets older Android versions, specifically those patched between 2016 and 2021, and attempts to gain root access by exploiting vulnerabilities. It conceals malicious components within the com.facebook.utils package and uses steganography to hide an encrypted payload within a PNG image file. NoVoice avoids infecting devices in certain regions and has checks to detect emulators and VPNs. Once activated, the malware contacts its command-and-control server to gather device information and polls it every 60 seconds for tailored exploits aimed at rooting the device. It can exploit 22 vulnerabilities, including kernel bugs, and establishes persistence by replacing key system libraries and installing recovery scripts. The malware injects code into applications, particularly targeting WhatsApp to extract sensitive data for session replication, which is then exfiltrated to the C2 server. The malicious apps containing NoVoice have been removed from Google Play, but users who installed them should consider their devices compromised. Upgrading to devices with later security patches is recommended to mitigate the threat.

AppWizard

October 14, 2025

New Android Pixnapping attack steals MFA codes pixel-by-pixel

A new side-channel attack called Pixnapping allows malicious Android applications to extract sensitive data without permissions by stealing pixels displayed by applications or websites. This attack can reveal private information, including chat messages from secure apps like Signal, emails from Gmail, and two-factor authentication (2FA) codes from Google Authenticator. Developed by a team of researchers, Pixnapping works on fully patched modern Android devices and can exfiltrate 2FA codes in under 30 seconds. Google attempted to address this vulnerability (CVE-2025-48561) in a September update, but the researchers bypassed these measures. A more robust solution is expected in the December 2025 Android security update. The attack begins with a malicious app exploiting Android’s intents system to launch a target app or webpage, processed by the system’s composition engine, SurfaceFlinger. The malicious app identifies target pixels by executing graphical operations and uses a 'masking activity' to conceal the target app. The attacker modifies the cover window to display all opaque white pixels except for the chosen transparent pixel. The isolated pixels are enlarged using a stretch-like effect when applying blur, and an OCR-style technique is then used to recover the pixels. The researchers utilized the GPU.zip side-channel attack to leak visual information, achieving a data leakage rate of 0.6 to 2.1 pixels per second, allowing sensitive data extraction in less than 30 seconds. Pixnapping was demonstrated on various devices, including Google Pixel and Samsung Galaxy models running Android versions 13 through 16, indicating that older Android versions are also at risk. An analysis of nearly 100,000 Play Store apps revealed hundreds of thousands of invocable actions through Android intents, highlighting the broad applicability of the attack. Examples of potential data theft include: - Google Maps: Timeline entries can take around 20–27 hours to recover. - Venmo: Account-balance regions can leak in approximately 3–5 hours. - Google Messages: Recovery requires roughly 11–20 hours. - Signal: Recovery takes about 25–42 hours, effective even with Screen Security enabled. Both Google and Samsung plan to address these vulnerabilities by the end of the year, but no GPU chip vendor has announced plans to patch the GPU.zip side-channel attack. Although the original exploit method was mitigated in September, an updated attack has successfully bypassed the fix. Google has indicated that exploiting this data leak requires specific information about the targeted device, resulting in a low success rate, and current assessments found no malicious apps on Google Play exploiting the Pixnapping vulnerability.

AppWizard

September 22, 2025

Waze update ends support for older Android phones

Waze's latest beta version, 5.9.90 and beyond, will require Android 10 as the minimum operating system, leaving users with Android 8 or 9 unable to access new features and updates. Users of older smartphones or tablets and aftermarket in-car infotainment systems operating on Android 8 or 9 will be affected. While Waze can still be used on older versions, users will not receive new features or updates, and the app's reliability may decline over time. Google Maps remains a viable alternative for those unable to upgrade. Users are advised to check their Android version, update their devices if possible, consider budget upgrades, and keep Google Maps as a backup.