sideloading

AppWizard
May 14, 2025
Google has introduced Advanced Protection for Android devices, aimed at enhancing security for users, especially those in public-facing roles. This feature was showcased on May 13, 2025, and will be released with Android 16 in June. Key functionalities include an Offline Device Key, Theft Detection, and Play Protect. Advanced Protection will restrict sideloading applications and downloading from third-party sources. It also blocks downloads from unknown sources during active phone calls and restricts access to banking applications during calls. Users will be unable to share screens with third-party applications while on calls. The initiative is currently being tested in various countries.
AppWizard
May 14, 2025
Google is implementing new features to enhance security for Android users against phone call scams. Users will be restricted from sideloading applications or granting sensitive permissions while on a call with an unknown contact, receiving a notification that states, “This setting is blocked to protect your device.” Google has also prevented users from disabling its Play Protect security service during calls. These measures are available for devices running Android 16. Additionally, Google is piloting a feature for banking apps in the UK that alerts users of a “likely scam” when accessing these apps while sharing their screen with an unknown caller. Users can choose to end the call or face a 30-second delay before accessing their banking app’s screen. This feature will roll out for devices running Android 11 and newer. These updates build on existing scam protection tools, including AI that identifies potential scam callers and integrates scam detection into Google Messages.
Winsage
May 10, 2025
Huawei has introduced HarmonyOS Next, its latest operating system for consumer laptops, designed exclusively for modern laptop models and lacking backward compatibility with older devices. The OS features AI-driven functionality through Celia, Huawei's AI assistant, and comes pre-installed with essential applications like WPS Office. Visually, it resembles Apple's macOS, including a software shortcut bar at the bottom of the screen. HarmonyOS Next restricts sideloading applications, requiring users to access software through Huawei's native "App Gallery," a strategy aimed at reducing reliance on Western software among Chinese consumers.
AppWizard
May 1, 2025
The Onyx Boox Page is a seven-inch E Ink display e-reader priced at 9. It operates on a simplified version of Android 11, allowing users to download various applications such as Kindle, TikTok, and Google Docs. The device facilitates note-taking and integrates apps for enhanced productivity. It includes a flip case for protection, customizable user interface options, and straightforward access to settings. The Boox Page features a Library and Store app for free book downloads and supports sideloading of ebooks and audiobooks. It has a battery life rated for up to six weeks, 32GB of base storage, and a microSD card slot for expansion. The device has received updates, including an AI assistant powered by ChatGPT.
AppWizard
April 21, 2025
Google has released version 8.7 of its Android Calculator app, which includes an increase in spacing between the last row of buttons and the gesture navigation bar to alleviate visual confusion. This adjustment is consistent across both portrait and landscape orientations. The update is currently being rolled out through the Play Store, with limited availability, and sideloading options are available for eager users. The previous significant overhaul of the app occurred in 2022, introducing a two-column user interface and a Quick Settings Tile.
Tech Optimizer
April 16, 2025
Windows Defender Application Control (WDAC) is a built-in security feature on Windows PCs that restricts the execution of unauthorized software by allowing only trusted applications. However, hackers have discovered multiple methods to bypass WDAC, exposing systems to malware and cyber threats. Techniques for bypassing WDAC include using Living-off-the-Land Binaries (LOLBins), DLL sideloading, and exploiting misconfigurations in WDAC policies. Attackers can execute unauthorized code without triggering alerts from traditional security solutions, enabling them to install ransomware or create backdoors. Microsoft operates a bug bounty program to address vulnerabilities in WDAC, but some bypass techniques remain unpatched for long periods. Users can mitigate risks by keeping Windows updated, being cautious with software downloads, and using strong antivirus software.
AppWizard
April 10, 2025
A report from DomainTools LLC reveals that cybercriminals are using newly registered domains to distribute the SpyNote Android remote access trojan (RAT) by creating fake websites that resemble legitimate Google Play app installation pages. These counterfeit pages often include familiar visual elements to deceive users into downloading harmful APK files, such as a site mimicking the TikTok installation page. The downloaded files typically contain variants of SpyNote, which can conduct surveillance, harvest sensitive information, and execute remote commands on compromised devices. The delivery mechanism involves a two-stage process where a dropper APK installs a secondary APK with core spyware functionalities, utilizing JavaScript to trigger downloads from fake install buttons. Common characteristics of the domains distributing SpyNote include registration with NameSilo LLC and XinNet Technology Corp., hosting on infrastructure linked to Lightnode Ltd and Vultr Holdings LLC, and the presence of SSL certificates. The malware delivery sites contain code in both English and Chinese, suggesting a Chinese-speaking threat actor may be involved. SpyNote has been associated with advanced persistent threat groups targeting individuals in South Asia, including those in the Indian defense sector. Once installed, SpyNote requests intrusive permissions to access SMS, contacts, call logs, camera, microphone, and location services, and employs persistence mechanisms that make it difficult to remove. DomainTools advises users to be vigilant against spoofed app pages and avoid sideloading APKs from unverified sources.
Search