SDKs Archives

AppWizard

January 31, 2026

Google takes down an invisible network that was secretly using your phone’s internet

Google has dismantled the IPIDEA residential proxy network, which had exploited millions of devices for cybercrime. This operation resulted in the liberation of approximately nine million Android devices and the removal of hundreds of compromised applications. IPIDEA's infrastructure was integrated into various software development kits (SDKs), allowing it to covertly enlist devices into its proxy pool. Google updated its Play Protect system to identify and eliminate affected applications and collaborated with partners to disrupt the network's underlying systems. The efforts led to a significant decrease in hijacked devices available for exploitation.

AppWizard

December 2, 2025

Android users warned to check phones now as Google bans apps

Recent findings have revealed that certain widely-used Android applications have been involved in an adware campaign, identified as 'GhostAd', which drains phone resources and disrupts normal usage. This malicious software disguised itself as utility and emoji-editing tools and infiltrated at least 15 applications, targeting unsuspecting users. Many of these compromised apps were available on Google’s Play Store, including the GenMoji Studio app, which became popular in the 'Top Free Tools' category. Users reported issues such as disappearing app icons, intrusive advertisement pop-ups, and sluggish device performance after installation. Google has removed all compromised applications from its Play Store, but users who installed them must manually delete the harmful software. Check Point noted that the GhostAd campaign blurs the line between marketing and malware, repurposing users' phones to generate revenue. To protect against future threats, users are advised to scrutinize app reviews, verify the app creator's reputation, and exercise caution with permissions.

AppWizard

November 30, 2025

Google removes apps that slow down Android phones – check yours now

A significant adware campaign named "GhostAd" has been identified, affecting Android devices globally. This adware operates through benign-looking utility and emoji-editing applications, which drain battery life and disrupt phone functionality without compromising personal data. At least 15 compromised applications were used in the campaign, some of which were available on Google’s Play Store, with one app reaching the second position in the "Top Free Tools" category. Users have reported issues such as incessant pop-up ads and sluggish device performance. Google has removed the compromised applications from the Play Store, but users must manually uninstall them to restore their device's performance. The incident highlights the misuse of legitimate software development kits (SDKs) and the need for users to review application ratings and developer reputations.

AppWizard

November 30, 2025

Urgent Google app ban affects millions of Android users, check your phone now

A significant adware campaign named "GhostAd" has been identified, affecting Android users globally. This adware infiltrates various applications that appear to be benign utility tools and emoji-editing software, operating a persistent advertising engine that drains device resources and disrupts functionality. At least 15 different infected applications were deployed, some of which were available on Google’s Play Store, including one that reached the number two spot in the "Top Free Tools" category. Users have reported issues such as persistent pop-up ads, disappearing app icons during uninstallation attempts, and slowed device performance. Google has removed the identified infected applications from the Play Store, but existing installations will not be automatically deleted, requiring users to review their apps. The campaign highlights the risks of advertising tools being misused to erode user trust in mobile ecosystems.

AppWizard

November 21, 2025

Bad battery life? Google will name-and-shame Android apps that drain your phone faster than expected

Google is overhauling the Google Play Store to address Android apps that excessively drain device batteries. New regulations require developers to minimize unnecessary background activities and adhere to stricter guidelines on how often their apps can wake devices or access system resources. Non-compliant apps will receive warnings on their Play Store listings, and their visibility may be reduced. A new measurement system, developed with Samsung, tracks "excessive partial wake locks," which monitor how long apps keep devices awake while the screen is off. If an app exceeds a threshold of 5% of total user sessions with excessive wake locks over a 28-day period, it will trigger notifications on the developers' dashboard. Developers must rectify these issues by March 1, 2026, to keep their apps on the Play Store. This initiative is part of a broader strategy to enhance transparency regarding app resource utilization and improve battery performance across Android devices.

AppWizard

November 16, 2025

Google to flag Android apps with excessive battery use on the Play Store

Google is implementing measures to enhance battery performance on Android devices by monitoring apps in the Google Play Store for high background activity and excessive battery drain. Applications that exceed a defined "bad behavior threshold" may be flagged, affecting their visibility. Developers must adapt their apps to a new metric called "excessive partial wake locks" by March 1, 2026. This metric tracks the duration apps maintain background activity while the screen is off and will measure non-exempt wake locks over a 28-day period. An app is considered excessive if it accumulates over two hours of non-exempt wake locks in a 24-hour period, with the threshold set at 5% of user sessions. Developers exceeding this threshold will be notified. The initiative aims to improve user experience by addressing excessive resource consumption, though it is not specifically targeting malware.

AppWizard

November 1, 2025

Minecraft Java edition code no longer obfuscated

Microsoft plans to remove code obfuscation from Minecraft to simplify the modding experience for users. This change aims to make it quicker and easier for modders to create and improve mods, as it will eliminate the need to untangle complex code and deal with unclear names. While the source code will be more accessible, the licensing terms will remain unchanged, meaning it is not freely available for all.

AppWizard

October 25, 2025

OWASP Mobile Top 10 for Android – How AutoSecT Detects Each Risk?

Mobile applications account for 70% of global interactions, with over 6.8 billion smartphone users. In 2023, 40% of data breaches are linked to vulnerabilities in mobile applications. The OWASP Mobile Top 10 outlines critical security risks for mobile apps, including: 1. Improper Credential Usage: Mishandling of passwords and session tokens. 2. Inadequate Supply Chain Security: Risks from unverified third-party components. 3. Insecure Authentication/Authorization: Failures in verifying user identities. 4. Insufficient Input/Output Validation: Lack of checks on incoming and outgoing data. 5. Insecure Communication: Unprotected data during transmission. 6. Inadequate Privacy Controls: Poor safeguards for personal data. 7. Insufficient Binary Protections: Lack of defenses against reverse engineering. 8. Security Misconfiguration: Improperly secured application settings. 9. Insecure Data Storage: Weak protection of sensitive information on devices. 10. Insufficient Cryptography: Use of weak or improperly implemented encryption. AutoSecT, an AI-driven mobile app security testing platform, detects these risks through various methods, including static code analysis, software composition analysis, and dynamic testing. It helps developers identify and mitigate vulnerabilities effectively.

Winsage

August 6, 2025

OpenAI open weight models now available on AWS

AWS has introduced two new OpenAI models with open weights, the gpt-oss-120b and gpt-oss-20b, available through Amazon Bedrock and Amazon SageMaker JumpStart. These models are designed for text generation and reasoning tasks, excelling in coding, scientific analysis, and mathematical reasoning, with performance comparable to leading alternatives. They support a context window of 128K and adjustable reasoning levels (low, medium, high). Users can access these models via an OpenAI-compatible endpoint in Bedrock, utilizing the OpenAI SDK or Bedrock APIs for integration. To access the models in Amazon Bedrock, users must request access through the console and can evaluate them using the Chat/Test playground. The process for using the OpenAI SDK involves configuring the API endpoint and authentication with an Amazon Bedrock API key. Users can build AI agents using frameworks that support the Amazon Bedrock API or OpenAI API, with deployment facilitated by Amazon Bedrock AgentCore. The OpenAI models are available in the US West (Oregon) region through Amazon Bedrock and in the US East (Ohio, N. Virginia) and Asia Pacific (Mumbai, Tokyo) regions via SageMaker JumpStart. Each model provides full chain-of-thought output capabilities for enhanced interpretability. They can be modified and customized to meet specific needs, and security measures are in place to ensure robust evaluation processes. Compatibility with the standard GPT-4 tokenizer is also included. For cost details, users can refer to the Amazon Bedrock and SageMaker AI pricing pages.

AppWizard

July 31, 2025

Revolutionizing Android Casino Apps with Hybrid Monetization

In 2025, Android casino apps are adopting a hybrid monetization model that combines free play, in-app purchases, advertising, and subscription services, moving away from traditional revenue streams like paid downloads. This model allows for free downloads and offers players various options, such as watching ads for rewards or subscribing for premium features. Developers are utilizing online casino content aggregators to access a wide range of games without the need for in-house development, which streamlines licensing and updates. The success of this model relies on selecting the right content aggregator, which can vary in terms of game library size, certification coverage, API integration, analytics capabilities, and revenue share structures. Continuous analysis of player behavior is essential to optimize monetization strategies, allowing developers to adjust ad frequency, subscription pricing, and game offerings based on user feedback.