NewApp Digest
search bot

signatures

Numo Launches Bitcoin Tap-to-Pay App For Merchants
AppWizard
February 25, 2026

Numo Launches Bitcoin Tap-to-Pay App For Merchants

Numo has introduced a tap-to-pay point-of-sale app that allows merchants to accept Bitcoin payments without additional hardware, utilizing the Cashu open-source ecash protocol. The app is available for free as an open-source Android download, with plans for a Google Play Store release. It uses NFC technology for quick transactions, enabling customers to pay via a Cashu wallet interacting with an NFC tag on the merchant's device. Payments are settled in Cashu ecash, which can be automatically transferred to a merchant's Lightning address once a specified balance is reached. Numo also supports Lightning invoices and offers features like inventory management, payment history tracking, offline payment support, and tipping options. The app has no platform fees and is developed under the MIT license, aiming to simplify Bitcoin payments for merchants. Cashu employs blind signatures for privacy-preserving custodial payments and connects independent mints over the Lightning Network.
Wary of strangers recording you? This app warns you when smart glasses are nearby
AppWizard
February 25, 2026

Wary of strangers recording you? This app warns you when smart glasses are nearby

A new Android application called Nearby Glasses, developed by Yves Jeanrenaud, alerts users when smart glasses are nearby by scanning for specific Bluetooth signatures. It is available on the Google Play Store and GitHub, functioning by identifying Bluetooth advertising frames from brands like Meta and Luxottica Group S.p.A. The app aims to address privacy concerns associated with smart glasses, particularly in light of reports about facial recognition technology being integrated into these devices. Jeanrenaud created the app to provide a countermeasure to surveillance technology, though he warns it may generate false positives with other devices that emit similar signals. The market for smart glasses is expanding, with companies like Google, Samsung, and Apple expected to enter the market.
Fake Huorong Site Delivers ValleyRAT Backdoor in Targeted Malware Campaign
Tech Optimizer
February 24, 2026

Fake Huorong Site Delivers ValleyRAT Backdoor in Targeted Malware Campaign

A cyber operation is targeting users of Huorong Security antivirus software through a typosquatted domain, huoronga[.]com, which mimics the legitimate site huorong.cn. Users who mistakenly visit the counterfeit site may download a file named BR火绒445[.]zip, which contains a trojanized installer that leads to the installation of ValleyRAT, a remote access trojan. The malware employs various techniques to evade detection, including using an intermediary domain for downloads, creating Windows Defender exclusions, and establishing a scheduled task for persistence. The backdoor facilitates activities such as keylogging and credential access while disguising its operations within legitimate processes like rundll32.exe. Attribution points to the Silver Fox APT group, and there has been a significant increase in ValleyRAT samples documented in recent months. Security measures include ensuring software downloads are from the official site and monitoring for specific malicious activities.
MyDoom virus: What it is and why it mattered
Tech Optimizer
February 13, 2026

MyDoom virus: What it is and why it mattered

In January 2004, the MyDoom computer worm quickly spread to email inboxes in 168 countries, becoming one of the fastest-spreading pieces of malware in internet history. It exploited human behavior by enticing users to open email attachments that appeared to be delivery errors or system notifications. MyDoom replicated itself through email without corrupting files or destroying data, harvesting email addresses from infected computers to send copies to new victims. The two main variants, MyDoom.A and MyDoom.B, targeted the SCO Group and Microsoft, respectively, and demonstrated the potential for email worms to be weaponized for coordinated attacks. MyDoom primarily targeted Windows-based operating systems and used deceptive emails to propagate. Once infected, it installed a backdoor for unauthorized remote access, forming a botnet for further attacks. MyDoom's effectiveness was due to its alignment with user behavior and the limited security measures of the time, leading to significant disruptions in email communication and an estimated economic impact of approximately billion. Although no longer a current threat, MyDoom's legacy influenced modern email security protocols, leading to improved filtering, behavior-based detection, and multi-layered defense strategies.
Surveillance tool or accessible messenger? All we know about MAX, Russia's alternative after WhatsApp fully blocked
AppWizard
February 12, 2026

Surveillance tool or accessible messenger? All we know about MAX, Russia’s alternative after WhatsApp fully blocked

The Russian government has fully blocked Meta's WhatsApp due to its non-compliance with local laws. In response, the Kremlin has promoted MAX, a state-backed messaging application introduced in 2025. MAX aims to serve as a universal mobile application, consolidating various digital services and was pre-installed on smartphones sold in Russia from September 2025. The Kremlin claims MAX is an accessible alternative for users, but critics view it as a potential surveillance tool due to its design that collects extensive user data and lacks end-to-end encryption.
Hackers Used Hugging Face to Distribute Android Banking Trojans
Tech Optimizer
February 11, 2026

Hackers Used Hugging Face to Distribute Android Banking Trojans

Cybersecurity researchers have identified a malware campaign that exploited Hugging Face's AI infrastructure to distribute Android banking trojans. The attackers used a deceptive app called TrustBastion, which tricked users into installing what appeared to be legitimate security software. Upon installation, the app redirected users to an encrypted endpoint that linked to Hugging Face repositories, allowing the malware to evade traditional security measures. The campaign generated new malware variants every 15 minutes, resulting in over 6,000 commits in about 29 days. It infected thousands of victims globally, particularly in regions with high smartphone banking usage but lower mobile security awareness. The operation is believed to be linked to an established cybercriminal group. Security experts warn that this incident highlights vulnerabilities in trusted platforms and calls for improved security measures, including behavioral analysis systems and verification of application authenticity. The incident has also sparked discussions about the need for enhanced security protocols for AI platforms.
GuLoader Leverages Polymorphic Malware and Trusted Cloud Infrastructure to Evade Detection
Tech Optimizer
February 10, 2026

GuLoader Leverages Polymorphic Malware and Trusted Cloud Infrastructure to Evade Detection

GuLoader, also known as CloudEye, is a downloader malware that has been active since late 2019, primarily used to fetch and install secondary malware like Remote Access Trojans (RATs) and information stealers. It employs legitimate cloud services such as Google Drive and Microsoft OneDrive to host its malicious payloads, allowing it to evade detection by security tools. GuLoader utilizes advanced techniques including polymorphic code, which alters its appearance to avoid static detection signatures, and exception-based control flow to confuse analysis tools. Over the years, GuLoader has refined its tactics, including the use of software breakpoints and various exception types to redirect its operations. It also employs dynamic XOR encryption to obfuscate internal data, making it difficult for analysts to extract URLs. The malware's continuous evolution poses ongoing challenges for security researchers. Indicators of Compromise (IOCs) include specific hash values for different versions of GuLoader from 2022 to 2024.
Ultimate Best Android Fax Apps Guide for Users
AppWizard
January 30, 2026

Ultimate Best Android Fax Apps Guide for Users

In 2026, faxing remains prevalent in industries like healthcare, real estate, and law, despite advancements in technology. Modern Android fax applications have replaced bulky fax machines, allowing users to send documents quickly by snapping photos or uploading PDFs. These apps offer features such as digital signatures, cloud storage, and security measures, making them ideal for travelers and remote workers. The Municorn Android Fax App is highlighted for its HIPAA compliance and user-friendly interface. Over 30% of healthcare providers still use faxing to meet compliance requirements, with businesses sending billions of pages annually. Modern fax apps eliminate issues like jammed paper trays and busy signals, enabling users to send documents from various locations. A small clinic reported saving hours weekly by using on-site scanning instead of visiting a fax center. Seven top Android fax apps for 2026 include Municorn Fax App, Fax.Plus, iFax, eFax, Simple Fax, Genius Fax, and Tiny Fax, each with unique features catering to different user needs. Many apps now incorporate AI for scan quality improvement and offer Optical Character Recognition (OCR) for searchable text. Security is crucial, especially for compliance, and users are advised to check for HIPAA compliance when handling sensitive information.
Search