Promoted Archives

AppWizard

September 18, 2026

Revealed: How Russia use mobile ‘super-app’ Max to spy on its citizens

A new messaging and payment app called Max has emerged in Russia, developed by VKontakte, and has become the country's most utilized messaging platform. Max integrates various services, including banking and government services, and has been adopted by tens of millions of Russians. It features extensive surveillance capabilities, allowing it to take screenshots, access information without consent, impersonate users, and potentially conduct cyberattacks. The app's adoption has been largely mandatory, particularly among state employees and students. Despite its rise, Max has not replaced Telegram as a primary news source, and users have raised concerns about privacy and surveillance. Experts warn that Russia's swift implementation of digital control strategies reflects a growing trend of digital authoritarianism.

AppWizard

September 18, 2026

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Cybersecurity experts have identified a new Android malware named RatHat, believed to be operated by Chinese threat actors. RatHat is distributed primarily through smishing and malvertising campaigns, leading users to deceptive download portals. It employs an automated multi-stage infection process and exploits Accessibility features along with a local ADB self-pairing mechanism to escape the Android application sandbox. The malware uses various anti-analysis techniques, including container tampering, manifest bombs, DEX bytecode poisoning, and dual string-encryption. RatHat's architecture consists of a malicious Android application, a Go agent, and an FRP reverse-proxy client, which together enable it to gain critical system permissions and perform various malicious activities such as credential capturing, screen recording, and SMS interception. Even if uninstalled, the malware retains shell access to the device, allowing attackers to reinstall it. RatHat can serialize the device's Accessibility tree to XML and communicate with a Generative AI assistant for tasks like screen coordinate determination and text extraction. The Go Agent, masquerading as a native library, exploits shell access to execute commands and establish a persistent connection to a command-and-control server via the FRP client. The C2 server can issue extensive commands to collect sensitive information, including SMS messages, credentials, files, and keystrokes, and RatHat also features a hardware-level keylogger.

AppWizard

September 15, 2026

XChat, X’s messaging app is unavailable on the Apple Store and Android’s Play Store

XChat was launched in April 2026 as a dedicated app for private conversations, featuring end-to-end encryption, disappearing messages, direct messaging, group chats, audio and video calls, file sharing, and PIN protection. It was designed to be ad-free and included features like message editing and notifications for screenshots. After its public launch, XChat's future became uncertain when it was abruptly removed from the digital landscape, with no explanation from X regarding the reasons for its withdrawal or its potential return.

AppWizard

September 14, 2026

One Click, Full Phone Access: Malicious Android Apps Raise Financial Fraud Risk

Malicious Android applications are being promoted through social media advertisements, particularly on platforms like Instagram and Facebook, posing significant risks to users. The Indian Cyber Crime Coordination Centre (I4C) has warned about deceptive apps advertised under names such as Night Play, Reloop, Kyss, Vimo, Rivo, Nezo, and Vixa, which often redirect users to pornographic websites to download APK files. These applications can exploit sensitive device permissions, leading to malware infections, unauthorized financial transactions, and various forms of cyber fraud. Users may be tricked into granting accessibility permissions that allow the malware to operate in the background and potentially install a VPN, rerouting internet traffic through servers controlled by attackers. Cybersecurity experts advise users to verify the legitimacy of applications before installation and to be cautious of permissions requested by unknown apps.

AppWizard

September 12, 2026

New Android Ransomware Records Screens, Steals OTPs and Secretly Takes Photos of Victims

A newly identified malware threat in the Android ecosystem, named Mantax Otax, combines ransomware with espionage capabilities. It targets users who install applications from untrustworthy sources, often through messaging apps or phishing attempts. The malware is linked to Indonesian cybercriminals and can steal sensitive information such as SMS one-time passwords, chat histories, and lock-screen PINs, facilitating account takeovers. Mantax Otax requests device-administrator rights and seeks access to SMS messages, contacts, and media files. It encrypts files on devices running Android 9 and earlier using AES encryption and demands a ransom for recovery. Although the impact is reduced on Android 10 and later due to Scoped Storage, the malware still poses significant surveillance risks. The malware collects extensive sensitive data, including contacts, call logs, and location data, and targets multi-factor authentication codes. It uses a deceptive system-lock overlay to capture PINs and has introduced features like WebSocket communications and disruptive pop-ups in its second iteration. Users are advised to be cautious when installing applications, avoid unsolicited APKs, and reject permissions that do not align with an app's purpose. In case of suspicious activity, users should disconnect from networks and seek help before entering sensitive information. Organizations should monitor for signs of this malware on managed devices.

AppWizard

September 10, 2026

Google Play Early Access Abused to Push Thousands of Deceptive Android Apps

Bad actors are exploiting Google Play's Early Access program to distribute misleading applications that promise money, rewards, and casino winnings. This program allows developers to gather user feedback on unreleased apps but lacks public reviews or star ratings, enabling malicious actors to launch numerous fraudulent applications without immediate scrutiny. An example is the app "Vice Streets: Open World," which mimics Grand Theft Auto, has over 1 million downloads, and recently disappeared from the store without reviews or ratings. These deceptive apps are often promoted on social media with misleading advertisements and promise cash rewards, but users face obstacles when trying to withdraw their earnings. The primary goal of these apps is to generate revenue through excessive advertisements while circumventing regulatory requirements for legitimate gambling apps. Additionally, various malware families targeting Android devices have emerged, including Hagaseca, Mantax Otax, StreamRat, and GoldFactory's use of the Gigabud banking trojan, highlighting ongoing security threats in the digital landscape.

Winsage

September 10, 2026

Windows users are getting Harry Potter ads as their Bing Wallpaper, and they aren’t happy

Microsoft's Bing Wallpaper app has faced backlash after users discovered that their daily wallpaper, typically featuring serene landscapes, was replaced by an advertisement for the Harry Potter and Fantastic Beasts film collection. This change has frustrated users, with some questioning the presence of ads and considering uninstalling the app. Social media reactions have been critical, with users expressing disappointment over the shift from nature images to promotional content. The choice of a Harry Potter-themed advertisement has also drawn ire due to the controversial views of series creator J.K. Rowling. This incident follows a history of Microsoft integrating advertisements into its Windows ecosystem, starting with ads in Windows 10 in 2016 and continuing with various promotional content in Windows 11.

AppWizard

September 10, 2026

How to Delete Your Digital Footprint From the Internet: A Complete Guide

Android privacy tools allow users to control camera access, microphone use, location permissions, and app activity, but they only protect information managed on the device or connected services. A digital footprint extends beyond the device, with personal information remaining accessible through search results, social media profiles, and data broker listings even after permissions are changed. To manage this footprint, users should identify publicly visible information, review old accounts, and delete unnecessary records. Simply deleting an Android app does not erase the associated account, which may retain personal data. Users should actively close unused online accounts to maintain digital hygiene. Data brokers publish personal information that cannot be removed through Android privacy settings, requiring users to follow an opt-out process to remove their data. While Android privacy settings are important, they do not eliminate external records. Data breaches require vigilance, including changing compromised credentials and monitoring for suspicious activity. Removing the source of information is more effective than just eliminating search results, and legal rights may exist in some regions for personal data removal. Completely erasing a digital footprint is rarely feasible due to public records and the persistence of past posts. The goal should be to minimize irrelevant content while retaining useful accounts. Users should begin by deleting information they control, then address data brokers and public profiles.

AppWizard

September 7, 2026

Xbox Cloud Gaming Caps Hours: 15 for Ultimate [2026]

On September 3, 2026, Microsoft announced that Xbox Game Pass subscribers will see a shift in cloud gaming access. Starting November 2026, unlimited cloud streaming will be replaced by a tiered hour bank system: 15 hours for Ultimate, 10 for Premium, and 5 for Essential subscribers. Once a subscriber exhausts their allotted hours, they must wait for the next billing cycle or purchase additional time. This change is the most significant since the beta launch of Xbox Cloud Gaming in 2019. The announcement was made on Xbox Wire, and the new structure is reflected on Xbox’s product pages. The new tiered system introduces a scarcity model, with every paid tier now having its own cloud gaming quota. Essential subscribers, who previously had no cloud access, will now receive 5 hours per month. The pricing for the Game Pass tiers is as follows: Ultimate at .99 for 15 hours, Premium at .99 for 10 hours, and Essential at .99 for 5 hours. The free ad-supported tier remains unchanged at 5 hours per month. Microsoft's rationale for the change is based on usage data indicating that most subscribers do not heavily utilize cloud streaming, coupled with the rising costs of operating cloud gaming services. The company has stated that additional hours can be purchased once a subscriber's monthly allotment is used up, although pricing details for these add-ons have not yet been disclosed. The new hour caps will take effect in November 2026, following a shorter notice period compared to NVIDIA's GeForce NOW service, which implemented a 100-hour monthly cap earlier in 2026. The response from gaming communities has been largely negative, with concerns about the limits falling short of typical usage patterns and conflicting with the marketing of Game Pass as offering unlimited access. The introduction of hour caps could impact Game Pass's subscriber base, particularly among those who rely on cloud gaming as their primary access point. Microsoft's internal usage data will determine the extent of this impact, as the company aims to control costs without raising subscription prices.

AppWizard

September 5, 2026

Dwarf Fortress co-creator Tarn Adams was amazed other devs had heard of his game the first time he went to a convention: ‘I didn’t know that anyone knew what we were doing’

Tarn Adams, co-creator of Dwarf Fortress, revealed in an interview that he was unaware of the game's significant following for many years. He recalled a moment around 2013 or 2014 at PAX in Seattle when he realized the game's impact, as most indie developers there recognized Dwarf Fortress and reacted with enthusiasm. Adams expressed a desire to have promoted the game more actively in its early years, noting that he had only met a few other developers from 2006 until around 2013 and described himself as "not a very social person" at that time. He reflected on the game's status as "outsider art" and considered giving his younger self advice to engage more with the gaming community.