NewApp Digest
search bot

payment

RUSSIA Mammut virus hits Russia’s patriotic messaging app
AppWizard
March 19, 2026

RUSSIA Mammut virus hits Russia’s patriotic messaging app

A virus known as Mamont is targeting users of the messaging platform Max, which has 100 million registered profiles. Mamont infiltrates online banking applications and spreads primarily through family and parental chat groups, allowing cybercriminals to steal payment information. The virus often begins with a deceptive message prompting users to click, leading to the silent download of a Trojan that siphons off data. Despite claims from the Max press service that the virus's spread is exaggerated, concerns remain about the security of user data, particularly given that all communications on Max are monitored by the state. Many users resort to using a second device, referred to as Maxofon, to comply with the platform's requirements while keeping their primary device for other applications.
How AI And Hacking Professionalism Are Overwhelming Endpoint Security
Tech Optimizer
March 19, 2026

How AI And Hacking Professionalism Are Overwhelming Endpoint Security

The digital landscape is transforming due to the professionalization of cybercrime, which is now a significant part of organized crime, second only to drug trafficking. Malware includes various types such as viruses, browser hijackers, password stealers, Trojans, botnet malware, and ransomware. Traditional antivirus solutions rely on signature-based detection, heuristic analysis, and behavior monitoring, but these methods can lead to false positives and negatives. The evolution of cybersecurity has seen the rise of "Ransomware-as-a-Service" (RaaS) and the use of polymorphic malware that changes its signature, making traditional defenses ineffective. Hackers are also using AI and machine learning to evade behavioral monitoring. New defense strategies include Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR), which focus on monitoring for breaches rather than preventing them. Leading vendors in this space include CrowdStrike, SentinelOne, Microsoft, and Palo Alto Networks. The zero trust security framework treats all access attempts as potentially hostile and emphasizes the integration of various security technologies. Emerging startups like FinalAV Security are developing zero trust solutions for consumers and small businesses, focusing on prevention rather than detection.
What Is a Crypto Miner Virus?
Tech Optimizer
March 16, 2026

What Is a Crypto Miner Virus?

A crypto miner virus, or cryptojacking malware, secretly uses a device’s CPU or GPU to mine cryptocurrency for an attacker, leading to increased electricity costs and potential hardware damage for the victim. It typically infects devices through phishing emails, pirated software, compromised websites, and malicious browser extensions. Monero is the preferred cryptocurrency for mining due to its efficiency on standard CPUs and privacy features. Signs of infection include overheating, high CPU usage, and increased electricity bills. Detection involves monitoring system performance and running antivirus scans. Prevention includes using antivirus software, keeping systems updated, and avoiding pirated software. Notable incidents include attacks on a European water utility and the Los Angeles Times website.
МТС начал брать деньги за использование VPN и торрентов
TrendTechie
March 15, 2026

МТС начал брать деньги за использование VPN и торрентов

MTS has introduced a fee structure for VPN and torrent services, requiring separate payment for traffic through file-sharing networks. Subscribers will incur a daily charge of 80 to 87 rubles for VPN usage, which includes a limit of 5 GB per day. The policy classifies file-sharing networks to include torrents, VPNs, certain online games, and P2P services. Charges apply only on days when these services are used, but if a VPN is activated and not deactivated, daily charges will continue. Users can block the service to avoid charges.
Africa’s monetisation debate: founders weigh in on mobile, PC, and the realities of game revenue
AppWizard
March 14, 2026

Africa’s monetisation debate: founders weigh in on mobile, PC, and the realities of game revenue

African founders view the continent's mobile gaming market as facing significant constraints, including challenges related to payments, purchasing power, and infrastructure, rather than being fundamentally broken. Industry leaders like Hugo Obi and Abdallah Elshabrawy highlight that while monetization is a global challenge, it is particularly exacerbated in Africa due to economic realities. Advertising, especially rewarded video ads, is currently the most reliable revenue model, though lower advertising rates necessitate a larger user base for sustainable revenue. Mobile gaming accounts for about 87% of African gamers and 90% of gaming revenue, emphasizing its reach despite higher spending in PC gaming. Founders stress the importance of targeting global audiences and adapting monetization strategies to the diverse payment ecosystems and cultural dynamics across the continent. A hybrid approach to monetization, combining mobile and PC gaming, is seen as a potential future direction for the industry.
Six Android Malware Families Target Pix Payments, Banking Apps, and Crypto Wallets
AppWizard
March 12, 2026

Six Android Malware Families Target Pix Payments, Banking Apps, and Crypto Wallets

Cybersecurity researchers have identified six new families of Android malware designed to extract sensitive data and facilitate financial fraud. Notable threats include: - PixRevolution: Targets Brazil's Pix payment platform, activates during Pix transfers, and uses real-time monitoring to intervene in transactions. Victims are tricked into installing malicious apps from counterfeit Google Play Store listings, which enable accessibility services for the malware to capture screens and overlay fake interfaces to reroute funds. - BeatBanker: Spreads through phishing attacks disguised as legitimate Google Play Store pages. It uses an inaudible audio loop for persistence, functions as a banking trojan, and includes a cryptocurrency miner. It creates deceptive overlays for platforms like Binance and Trust Wallet to divert funds and can monitor web browsers and execute remote commands. - TaxiSpy RAT: Exploits accessibility services to gather sensitive information such as SMS messages and call logs, targeting banking and cryptocurrency applications with overlays for credential theft. It employs advanced evasion techniques like native library encryption and real-time remote control. - Mirax: A private malware-as-a-service (MaaS) offering with a subscription model that provides tools for banking overlays and information gathering, including keystrokes and SMS. - Oblivion: Another Android RAT available at a competitive price, featuring capabilities to bypass security measures on various devices. - SURXRAT: Distributed through a Telegram-based MaaS ecosystem, it uses accessibility permissions for persistent control and communicates with a Firebase-based command-and-control infrastructure. Some samples incorporate a large language model component, indicating experimentation with AI by threat actors.
Search