Snowblind Archives

BetaBeacon

September 26, 2025

The best PS2 emulator on Android just got a big update with fixes for GTA, MGS, Jak, and more

The PS2 emulator NetherSX2 released update 2.1, improving performance and fixing regressions and visual bugs. The update includes fixes for popular games like Jak, Grand Theft Auto: San Andreas, Metal Gear Solid 3, and Timesplitters. There are two versions of the update available for download, each based on different versions of AetherSX2. Users can choose between the two builds on GitHub, but only one build can be installed at a time and saves are not cross-compatible. NetherSX2 remains a reliable option for PS2 emulation on Android devices.

AppWizard

July 1, 2024

CapraRAT Spyware Disguised as Popular Apps Threatens Android Users

- Transparent Tribe continues malware campaign targeting Android users - Group embedding spyware into curated video browsing applications targeting mobile gamers, weapons enthusiasts, and TikTok fans - Campaign dubbed CapraTube delivering spyware called CapraRAT - CapraRAT used in attacks targeting Indian government and military personnel - New malicious APK files identified - CapraRAT abusing permissions to access sensitive data - Malware developers focusing on making the tool more reliable and stable - Snowblind, a novel type of Android banking malware, discovered using seccomp technique to bypass anti-tampering mechanisms - Malware authors in Southeast Asia becoming extremely sophisticated

AppWizard

June 26, 2024

Snowblind is a new Android banking malware abusing a safety tool

Snowblind is a first-of-its-kind Android banking malware that manipulates a Linux kernel safety feature called "seccomp" to bypass security checks and anti-tampering mechanisms. It exploits accessibility services to gain system-level access to an infected device and can disable security features such as two-factor authentication and biometric verification. The malware targets banking Android apps in Southeast Asia and is effective on all modern Android devices. Promon has developed protective measures against Snowblind and other potential variants of seccomp-based attacks.