one-time codes

AppWizard
November 26, 2025
CISA has issued a warning about spyware targeting users of instant messaging applications, particularly highlighting the Sturnus trojan, which poses significant risks to Android smartphone users. Sturnus, identified as a banking trojan, can bypass encrypted messaging by capturing messages after they are decrypted on the smartphone screen, rather than cracking the encryption itself. Security expert Aditya Sood noted that Sturnus uses a combination of plaintext, RSA, and AES-encrypted communication, complicating detection efforts. The trojan can read everything displayed on the smartphone screen in real time, including sensitive messages and contacts. CISA also identified tactics used by cyber threat actors, such as phishing, zero-click exploits, and impersonation to gain unauthorized access to messaging apps. Users are advised to keep Google’s Play Protect activated, avoid unauthorized app stores, and be cautious with accessibility permissions to protect against these threats.
AppWizard
October 21, 2025
Meta is enhancing user safety on WhatsApp and Messenger by introducing protective measures aimed at curbing scams, particularly targeting older adults. WhatsApp will display a warning when users share screens during calls with unknown contacts, discouraging the sharing of sensitive information. Messenger is piloting a scam detection system that alerts users to potential fraud indicators, allowing them to block or report suspicious contacts. Research shows that timely alerts can reduce compliance with fraudulent requests. Meta has disrupted around 8 million scam accounts and removed over 21,000 impersonating profiles. The company is also collaborating with the National Elder Fraud Coordination Center, which includes various major corporations, to combat scams across platforms.
Search