Singapore Archives

AppWizard

October 3, 2026

Guided Vision launches in Gemini Live, and Google says it is not a white cane replacement

On October 1, Google introduced the Guided Vision feature within the Gemini Live platform, aimed at enhancing the experience for users with visual impairments. This feature provides real-time descriptions of camera focus and verbal guidance for optimal viewing. It is designed to assist individuals who are blind or have low vision, as well as those needing visual support, but is not a replacement for medical devices or mobility aids. Guided Vision offers coaching capabilities, giving users verbal prompts to adjust camera positioning for clearer visuals. Practical applications include reading small print, identifying items, choosing outfits, and understanding unfamiliar room layouts. Google collaborated with Aira to train the feature using extensive real-world data and feedback from blind and low-vision communities across multiple countries. Users can activate Guided Vision on Android devices through the Gemini app, Android accessibility shortcuts, or the TalkBack menu. It is compatible with Android devices running version 9 and above and is available in regions and languages where Gemini Live is supported.

AppWizard

October 2, 2026

Android’s new sideloading rules are here

Google has begun rolling out new Android developer verification rules starting September 30, affecting users in Brazil, Indonesia, Singapore, and Thailand. Certified Android devices running Android 7 or later will require apps from participating stores to come from verified developers. Approved platforms include Google Play, Samsung’s Galaxy Store, HONOR App Market, OPPO App Market, Xiaomi GetApps, vivo V-Appstore, and Transsion’s Palm Store. While sideloading apps from unverified developers is still possible, the process has become more complicated. Users must enable a setting through Developer Options, authenticate their identity, restart their device, and wait 24 hours before installing such apps. Once activated, users can allow installations from unverified developers for seven days or indefinitely. ADB installations are exempt from the waiting period. No immediate changes are occurring for users in the United States, and the global rollout of these requirements is planned for 2027.

AppWizard

October 2, 2026

Opera offers an eSIM in its Android browser: available in 47 regions, with 3 GB free

Opera has introduced its own eSIMs, allowing users to install them directly through the Opera browser for a data-only service tailored for travelers. Users can access a complimentary 3GB data package valid for three days post-activation in select countries, including the US, UK, Germany, France, Canada, UAE, Brazil, Netherlands, Norway, Sweden, and Poland, without needing to provide payment information or an email address. The eSIM service is built into the Opera browser for Android, requiring a device that supports eSIM hardware and runs on Android 10 or newer. Users can activate the service by navigating to their profile, selecting the eSIM option, and confirming their choice. Once the free package is used, additional data plans of 3GB, 5GB, or 10GB are available. The eSIM can be used across multiple countries, with activation occurring upon arrival in the selected country, although it is not available in Ukraine.

AppWizard

October 2, 2026

Google Brings Real-Time Visual Assistance to Blind Users on Android

On October 1, 2026, Google launched Guided Vision within its Gemini Live platform, providing real-time, voice-driven visual assistance for individuals who are blind or have low vision. The feature is available on Android devices running Android 9 and above in regions where Gemini Live is accessible. Guided Vision allows users to share their phone's camera feed for spoken descriptions of their environment and responds to follow-up questions, offering verbal cues for better navigation. It was developed in collaboration with Aira and the accessibility community, involving extensive testing with over 1,000 members of Aira’s Trusted Tester network. The technology aims to assist with tasks such as reading fine print, locating objects, and exploring unfamiliar environments. Users can access Guided Vision through the Gemini app, an Android Accessibility shortcut, or Google TalkBack, but it is not a substitute for medical devices or safe travel practices.

AppWizard

October 1, 2026

Google’s new Android sideloading rules are live — and here are all the ways to already bypass them

Google has implemented new developer verification rules for Android sideloading, affecting users in Brazil, Indonesia, Singapore, and Thailand. Apps from unverified developers are automatically blocked on certified Android devices with Google Play Services. This change is part of a global rollout expected in 2027. Users can still install apps from recognized app stores like Google Play Store, HONOR App Market, and others, but third-party developers not registered with Google’s Android Developer Verification Program face restrictions. To circumvent these restrictions, users can: 1. Rely on established app stores. 2. Use Google’s Advanced Flow, which involves enabling Developer Options, confirming choices, and waiting a mandatory 24-hour period before installation. 3. Utilize ADB for installation without waiting periods. 4. Use Shizuku for on-device wireless debugging. 5. Root their devices to bypass restrictions entirely. Apps installed before the new rules will remain functional but cannot be updated without following the new procedures. Developer Options do not need to remain enabled after completing the Advanced Flow. If the process is not completed after the waiting period, users must restart it. Uninstalling the Android Developer Verifier app while using Shizuku may not affect the waiting period. Users in regions not yet impacted by these changes do not need to take immediate action.

AppWizard

September 28, 2026

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

The operators behind RatHat have created an advanced Android banking trojan that allows control of infected devices through a web console. Since April 2026, nearly 100 instances of this console have been identified, indicating a malware-as-a-service model. The console collects sensitive data from compromised phones, including text messages and passwords. It uses Google's Gemini AI to assess victims' bank balances, categorizing them into high-value and mid-value segments, but does not facilitate financial transactions. The malware has remained largely unchanged since late 2025, but the console has seen significant updates, leading to three new versions: BlackCat Remote Control Management, Panda Workshop V5, and V6. These versions serve as both control interfaces and build tools for creating and distributing malware. The latest version includes templates for deceptive download pages. RatHat infiltrates devices via text messages and online ads, requesting Accessibility access to read screens and simulate user interactions. This access allows the malware to activate wireless debugging and connect to the Android Debug Bridge (ADB), giving operators elevated privileges to execute commands. A Go program can be deployed to maintain control, even after the app is uninstalled. Cleafy has tracked console deployments through web code analysis, noting that many IP addresses originate from a Singapore-registered network. The initial console version allowed operators to choose AI providers, but the latest exclusively uses Gemini. RatHat also utilizes Gemini on infected devices to determine tap locations based on screen layouts. Cleafy has compiled indicators related to the consoles' command-and-control servers, download links, and malware samples, including specific domains, IP addresses, and MD5 hashes. The consoles often use web addresses starting with "admin." and inexpensive top-level domains. Security tools are advised to monitor processes running under the shell user on affected devices.

AppWizard

September 15, 2026

Latest Pixel Feature Drop Expands Access to Scam-Text Detection

Google has released a feature update for Pixel phones that enhances existing functionalities and introduces new elements. The update expands scam-text detection capabilities to chat applications using Gboard, compatible with devices as old as the Pixel 6, and is available in multiple countries including the US, UK, Australia, Canada, France, Germany, India, Mexico, Japan, and Singapore. It also improves VIP notifications by allowing users to add home-screen widgets for designated contacts and includes a new navigation menu for easier contact switching, available for Pixel 6 and newer models. Additionally, a Harry Potter-themed pack with wallpapers, icons, and audio effects is offered, along with a two-month free subscription to Audible. For Pixel Watch users, the update introduces a one-handed pinch gesture for easier access to notifications and improved functionality for the raise-to-talk gesture on newer models.

Winsage

September 9, 2026

Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week

Recent investigations have identified the BlueMoon exploit kit, used by espionage-driven threat activity clusters, particularly linked to APT31, a China-aligned state-sponsored group, since August 28, 2026. BlueMoon exploits three vulnerabilities: CVE-2026-85046 (a type confusion vulnerability in Google Chrome's V8 engine), an unassigned V8 sandbox escape, and CVE-2026-85880 (a heap-based buffer overflow in Windows ALPC). Google and Microsoft have released patches for these vulnerabilities, which were exploited as "patch-gap" zero-days. The attack vectors typically begin with phishing emails that lead victims to malicious URLs, triggering the vulnerabilities for code execution and privilege escalation. Variants of BlueMoon have been detected, featuring modifications for specific campaigns. Notable attack chains include: - APT31 targeting NGOs and mining firms in the U.S. with a malicious browser add-on called GemStone. - UNK_LateNight targeting U.S. aerospace companies, deploying BlueMoon alongside the ShadowPad backdoor. - UNK_DoubleCheck targeting a Vietnamese manufacturer, using DLL sideloading to execute a Rust binary. - UNK_QuietRacket targeting government and financial organizations in Indonesia and Singapore, modifying BlueMoon to execute a .NET assembly. CISA added the Chrome flaw to its Known Exploited Vulnerabilities catalog on September 4, 2026, requiring federal agencies to apply patches by September 18, 2026. Indicators of compromise include specific process trees, files, folders, scheduled tasks, mutexes, and registry keys. Proofpoint has released detection rules to help organizations identify and mitigate these threats.

AppWizard

September 8, 2026

Telegram down in Singapore: Thousands report messaging app outage

On Tuesday, Telegram users in Singapore reported nearly 4,000 service disruptions, peaking shortly after 10:30 AM local time, with about half related to the app itself, 40% to messaging issues, and 5% to login challenges. Downdetector's figures are based on user reports. Telegram has been releasing new features this year, including enhancements introduced in August, such as welcome messages, interactive buttons, and AI bots. The platform faces challenges from government restrictions, particularly in Russia, where authorities have imposed fines on Telegram for non-compliance with local regulations and accused it of harboring illegal content. In March, Telegram was fined 35 million roubles for failing to remove prohibited content.

AppWizard

September 8, 2026

Messaging app Telegram down for thousands in Singapore

On September 8, a significant number of Telegram users in Singapore experienced service disruptions, with over 1,500 reports of issues starting around 10:20 AM. By 10:30 AM, reports peaked at nearly 4,000, but by 11:30 AM, complaints had decreased to approximately 350. According to Downdetector data, 50% of users reported problems with the app, 40% faced messaging challenges, and 5% had difficulties logging into their accounts.