sideloading Archives

AppWizard

April 21, 2026

NGate NFC malware targets Android users through trojanized payment app

NFC-based payment fraud targeting Android users in Brazil has been linked to a campaign using a trojanized version of the HandyPay app, part of the NGate malware family, since November 2025. The malware is distributed through a counterfeit website mimicking a lottery and a fraudulent Google Play page. The operators chose HandyPay for its low cost and minimal permissions required. The malware requests users to set it as the default NFC payment app, allowing it to capture payment card PINs and relay NFC card data to attackers. ESET Research identified this campaign and discovered logs from compromised devices containing sensitive information. The trojanized app has never been on the official Google Play store, and ESET has notified Google and the HandyPay developer about the issue.

AppWizard

April 20, 2026

Amazon chooses nuclear option for Fire TV Sticks – no Android, no sideloading, no installing apps

Amazon will transition all future Fire TV devices to its proprietary Vega OS, which will eliminate the ability to sideload apps on Fire TV Sticks. This change aims to enhance security and reduce illegal streaming but limits user customization. The latest models, including the Fire TV Stick 4K Select and the upcoming Fire TV Stick HD, will feature Vega OS. The cloud-based system allows for seamless access to updated streaming services like Netflix and Disney+, reducing reliance on device processing power and production costs. However, it significantly reduces user autonomy by removing the option to sideload third-party applications.

Winsage

April 19, 2026

Zorin OS 18.1 adds guided migrations, stronger app compatibility and wider hardware support, making switching from Windows far more practical for millions [clone]

Zorin OS has released version 18.1, enhancing hardware compatibility and introducing fingerprint reader support for older devices. The update recommends native Linux alternatives when detecting Windows applications, making it easier for users transitioning from Windows. Since the end of support for Windows 10, Zorin OS has gained popularity, reaching 3.3 million downloads. The update supports over 240 Windows applications, suggesting compatible Linux versions, and includes improvements to desktop features and pre-installed applications. Zorin Lite has also been updated to version 17.3 with fingerprint reader support and a redesigned File Manager. Meanwhile, Windows 11 is facing challenges in adoption due to hardware requirements and design issues, prompting discussions about the potential need for Windows 12. Alternative operating systems like Zorin OS are becoming more appealing to users dissatisfied with Windows.

Winsage

April 17, 2026

“Over 3.3 million downloads”: This Linux alternative to Windows 11 is winning over Microsoft’s customers with a huge update

Zorin OS, a Linux-based operating system, launched late last year alongside Microsoft's decision to end support for Windows 10 on October 14, leading to approximately 780,000 users migrating to Linux and a surge in Zorin OS downloads to 1 million. Three months later, Zorin OS 18 was released, increasing downloads to 2 million, and six months post-launch, total downloads reached 3.3 million. The latest version, Zorin OS 18.1, includes new features and improved hardware support, expanding its database to support over 240 Windows applications. Zorin Lite has also been updated to version 17.3, designed for older computers, featuring support for fingerprint readers and a redesigned File Manager. Meanwhile, Windows 11 has struggled with adoption due to strict hardware requirements but is gaining traction after the end-of-life status of Windows 10. Microsoft is working to improve user sentiment around Windows 11 by allowing users to bypass updates during setup and reintroducing features like a movable Taskbar. Some experts suggest that Microsoft should focus on developing Windows 12 instead of enhancing Windows 11, as significant improvements may require more drastic changes. Alternative operating systems like Zorin OS are becoming increasingly appealing to users dissatisfied with Windows.

BetaBeacon

April 14, 2026

Another Elder Scrolls Game Set To Be Unplayable Later This Year

Google Play changes may render Daggerfall Unity Android unplayable. Google announced it will phase out sideloading apps from unverified developers on Android devices, encouraging the use of the Google Play store. This move has attracted criticism from developers and users. Daggerfall Unity Android cannot be published on the Google Play Store due to copyright reasons and cannot be emulated via a Rom. The game may become unplayable on mobile unless Google clarifies if sideloading apps will still be allowed.

Tech Optimizer

April 13, 2026

Fake Claude site installs malware that gives attackers access to your computer

Claude, an AI tool developed by Anthropic, receives nearly 290 million web visits monthly and has become a target for cybercriminals. A fake website has been found that impersonates Claude, distributing a trojanized installer named Claude-Pro-windows-x64.zip. This installer, while appearing legitimate, deploys PlugX malware, granting attackers remote access to users' systems. The fraudulent site mimics the official download page and uses passive DNS records linked to commercial bulk-email platforms, indicating active maintenance by the operators. The ZIP file contains an MSI installer that incorrectly spells "Claude" as "Cluade" and creates a desktop shortcut that launches a VBScript dropper. This script runs the legitimate claude.exe while executing malicious activities in the background, including copying files to the Windows Startup folder to ensure persistence after reboot. The attack utilizes a DLL sideloading technique recognized by MITRE as T1574.002, where a legitimate G DATA antivirus updater is exploited with a malicious DLL. Within 22 seconds of execution, the malware establishes a connection to an IP address associated with Alibaba Cloud, indicating control over the compromised system. The dropper script also employs anti-forensic measures to delete itself and the VBScript after deployment. Indicators of compromise include the filenames Claude-Pro-windows-x64.zip, NOVUpdate.exe, avk.dll, and NOVUpdate.exe.dat, along with the network indicator 8.217.190.58:443 (TCP) as the command and control destination. Users are advised to download Claude only from the official site and to remain vigilant against potential compromises.

AppWizard

April 4, 2026

Android’s controversial sideloading changes pushed me to build my own app installer

Using ADB via the command line can be cumbersome, prompting the desire to create a tailored application focused on the APK installation workflow, including wireless debugging pairing, file browsing, and bundle unpacking. A recent poll indicated that 48% of respondents use ADB fairly often, while 35% have used it once or twice. The author, a moderately skilled programmer, explored AI-assisted "vibe coding" to develop an app in Go, chosen for its simplicity and cross-platform capabilities. The project began with outlining its structure and creating a basic ADB wrapper in Go, which evolved into a functional terminal application within three days of part-time effort. The app, a compact 7MB executable, manages ADB sessions, allows pairing with Android devices over USB or Wi-Fi, includes a file explorer, and supports installing and unpacking various app bundles. Despite its usefulness, the author noted a limited understanding of Go due to reliance on AI for problem-solving. The app's source code is available on the Tiny APK Installer GitHub repository.

AppWizard

April 3, 2026

2.3 Million Users Affected by New Android Malware Hid in 50 Google Play Apps

Google has imposed strict restrictions on sideloading applications on Android devices due to concerns about risks from external sources. A new malware named NoVoice has been discovered on Google Play, embedded in over 50 applications with at least 2.3 million downloads, potentially compromising that many devices. The malware seeks root access by exploiting vulnerabilities in older Android versions and can steal sensitive data and install/remove apps without consent. It is difficult to remove, as it installs recovery scripts that survive factory resets. However, Google has stated that devices updated since May 2021 are protected against this threat, and Google Play Protect removes these apps and blocks new installs. Users with devices updated after May 2021 are considered safe, while those with infected apps should consider their devices compromised.

AppWizard

March 30, 2026

New ‘Android Developer Verifier’ app coming to phones as Google shares verification timeline

Google has launched the Android developer verification process, available to all developers through the Play Console and the new Android Developer Console for app distribution outside the Play Store. Key dates in the rollout include: - April 2026: The Android Developer Verifier will appear in users' Google Systems services settings. - June 2026: Early access for limited distribution accounts for students and hobbyists, allowing app sharing across up to 20 devices without a government ID. - August 2026: Global launch of limited distribution accounts and advanced flow for power users. - September 30, 2026: Requirement in Brazil, Indonesia, Singapore, and Thailand for apps to be registered by verified developers for installation and updates on certified Android devices, with users still able to sideload unregistered apps. - 2027 and beyond: Global rollout of the verification requirement, with specific dates to be announced. The Android Developer Verifier will use Play services to ensure all Android versions benefit from the verification process, and users will see it installed on their devices by April.

AppWizard

March 30, 2026

Google’s New Android Developer Verifier Service is Here for Your…

Google has begun rolling out its Android developer verification system, requiring developers who distribute apps outside the Google Play Store to register and verify their identities. This affects primarily those using alternative distribution channels. A new Android Developer Verifier app will be integrated into Google System services settings starting in April 2026 to verify app associations with registered developers. The verification checks are expected to occur during the installation of sideloaded apps, with warnings for unverified developers. The rollout timeline includes: - April 2026: Android Developer Verifier available in Google System services settings. - June 2026: Early access for limited distribution accounts for students and hobbyists. - August 2026: Global launch of limited distribution accounts and advanced flow for power users. - September 30, 2026: Apps must be registered by verified developers to be installed on certified Android devices in Brazil, Indonesia, Singapore, and Thailand; unregistered apps can still be sideloaded using ADB or the advanced flow. - 2027 and beyond: Global rollout of the requirement.