NewApp Digest
search bot

sources

I4C warns against malicious Android apps from social media ads
AppWizard
September 4, 2026

I4C warns against malicious Android apps from social media ads

The Indian Cyber Crime Coordination Centre (I4C) has issued an advisory about malicious Android applications disguised as adult-content apps, which are promoted through social media and distributed outside official app stores. The National Cybercrime Threat Analytics Unit (NCTAU) warned that these apps can compromise mobile device security by requesting sensitive permissions and may install additional software without user consent, leading to unauthorized financial transactions. Users are advised to download apps only from trusted sources like the Google Play Store, avoid installing APK files from unverified sources, and refrain from granting accessibility permissions to untrusted applications. Recommendations include regularly reviewing installed apps, keeping Google Play Protect enabled, and monitoring bank accounts for unauthorized activities. Victims of cyber fraud are encouraged to report incidents via the national cybercrime helpline or the government’s reporting portal.
Fake porn apps that can hijack your Android phone
AppWizard
September 3, 2026

Fake porn apps that can hijack your Android phone

The National Cybercrime Threat Analytics Unit (NCTAU) has reported a rise in financial fraud linked to deceptive Android applications that pose as pornography apps. These apps are advertised on social media platforms like Facebook and Instagram under names such as ‘Night Play’, ‘Reloop’, ‘Kyss’, ‘Vimo’, ‘Rivo’, ‘Nexo’, and ‘Vixa’. Users who click on these ads are redirected to websites promising adult content, where they are encouraged to download APK files. Once installed, these apps often request sensitive permissions, particularly Accessibility access, which can allow malware to take control of the device and facilitate financial fraud. Some malicious apps may also install a VPN, rerouting internet traffic through servers controlled by attackers and exposing sensitive data. The malware is primarily promoted through ads linked to pornographic content, redirecting users to phishing websites that prompt APK downloads from non-Google Play sources, often using the “.live” domain extension. After installation, the initial app may download a second malicious package disguised as an update, exploiting the permissions granted to the original app.
Star Wars Zero Company is a great game that's busted and may never be fixed
AppWizard
September 2, 2026

Star Wars Zero Company is a great game that’s busted and may never be fixed

Star Wars Zero Company has an aggregate critic score of 85 on Metacritic and is regarded as one of the most acclaimed Star Wars games recently. The game features tactical gameplay similar to X-COM but suffers from technical issues, particularly on PC, including traversal stutters, input lag, and game-breaking bugs. Players have reported frequent crashes, with some needing to restart missions multiple times. The game has a "mostly positive" rating on Steam from nearly 9,000 reviews, yet many highlight similar performance problems. Console players on Xbox Series and PlayStation 5 have also experienced these issues. Bit Reactor, the independent studio behind Zero Company, has furloughed a significant portion of its workforce, with reports indicating that up to 80 percent of employees are currently unpaid. The studio faces an ongoing legal dispute among its co-founders, and confidence in receiving adequate post-launch support is low. Acknowledgment of issues was made on Steam's Community forums on the game's release day, but no further updates have been provided since.
Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems
Winsage
September 2, 2026

Fake Microsoft Edge, Kaspersky and Razer Installers Used to Compromise Windows Systems

An ongoing malware campaign is targeting Windows devices through counterfeit download pages for well-known software brands like Microsoft Edge, Kaspersky, and Razer. The campaign affects various sectors, including healthcare, manufacturing, gaming, technology, logistics, government, and education. It utilizes high-fidelity fraudulent websites that closely mimic legitimate vendors, with observed lure domains such as app-microsoft-edge[.]com[.]cn and kaspersky-lab[.]hl[.]cn. Attackers employ evasion tactics like server-side payload regeneration and create multiple copies of the same archive in quick succession. Victims are lured into downloading ZIP files that contain a bundled wrapper installer, which activates a stage-one executable in randomized directories. The malware often masquerades as legitimate software, with some payloads impersonating known applications. Persistence is achieved through scheduled tasks with unusual names, and the malware employs various evasion techniques, including deleting shadow copies and altering file permissions. Microsoft Defender has identified activity across multiple stages of the attack, including delivery, execution, and command-and-control communications. To mitigate risks, organizations are advised to block downloads from unofficial sources, enforce Tamper Protection, and implement Attack Surface Reduction rules. Indicators of compromise (IOCs) include specific lure domains and URLs associated with the campaign.
Sony и Warner подают в суд на Anthropic из‑за обучения Claude на пиратских песенниках
TrendTechie
September 2, 2026

Sony и Warner подают в суд на Anthropic из‑за обучения Claude на пиратских песенниках

Sony Music Publishing and Warner Chappell Music have filed a lawsuit against Anthropic, claiming that the company used pirated songbooks and song lyrics from "shadow libraries" to train its AI model, Claude. The lawsuit cites approximately 7 million books obtained through torrent downloads and web scraping, including unauthorized sheet music and songbooks. The plaintiffs are seeking statutory damages of up to 0,000 for each work that is found to have been willfully infringed. The lawsuit was filed on August 28, 2026, in the U.S. District Court for the Northern District of California, naming Anthropic and its co-founders as defendants. The plaintiffs allege that the data sources used for training included 5 million books downloaded from Library Genesis and 2 million from Pirate Library Mirror, as well as scraped song lyrics from licensed platforms Musixmatch and LyricFind. The use of BitTorrent for downloads introduces legal risks due to the simultaneous distribution of files. The lawsuit emphasizes the distinction between legally purchased and pirated materials, with prior cases indicating that downloads from pirate libraries constitute significant copyright infringement.
What a smart firewall does and why it matters on home Wi-Fi
Tech Optimizer
September 1, 2026

What a smart firewall does and why it matters on home Wi-Fi

Home Wi-Fi connects various devices and presents security risks, making firewalls important for network protection. A router firewall is built into the home router and protects all connected devices, while a software firewall operates on individual devices for additional security. Inbound traffic is data coming to a device, while outbound traffic is data leaving it; firewalls analyze this traffic to manage connections. Network security is critical as sensitive information is often accessed on devices used for leisure, and remote work increases data overlap. Firewalls can control network connections and filter unwanted traffic but cannot replace weak passwords or antivirus protection. To enhance home network security, users should secure router settings, keep routers updated, strengthen Wi-Fi access, check connected devices, and replace outdated routers. A comprehensive security strategy includes keeping software updated, using multifactor authentication, being cautious with links, and strengthening firewalls with antivirus protection. Protecting valuable data is essential, and understanding ransomware risks is crucial. The 3-2-1 backup strategy involves maintaining three copies of data on two different storage types, with one copy offsite. Regularly testing backups and knowing how to respond to ransomware incidents are also important.
Fake Porn Apps Target Android Users Via Ads On Facebook, Instagram: How To Stay Safe
AppWizard
September 1, 2026

Fake Porn Apps Target Android Users Via Ads On Facebook, Instagram: How To Stay Safe

Cybercriminals are targeting Android users with deceptive advertisements for malicious applications disguised as pornographic content on platforms like Facebook and Instagram. The National Cybercrime Threat Analytics Unit (NCTAU) has reported that these ads lead users to phishing traps or malware downloads that can compromise banking credentials. Malicious applications linked to this threat include “Night Play,” “Reloop,” “Kyss,” “Vimo,” “Rivo,” “Nexo,” and “Vixa.” The scam involves promoting these apps through enticing ads, redirecting users to websites offering pornographic content, and prompting them to download APK files directly from these sites, often using “.live” domains. The initial app may request users to download a second package disguised as an update, which can exploit permissions granted to the first app. This malware can gain extensive control over the device, potentially installing a VPN that routes internet traffic through attackers' servers. To protect against this threat, users should download apps only from trusted sources, avoid installing APK files from ads or suspicious links, refrain from granting Accessibility access to unknown apps, regularly review installed apps, keep Google Play Protect enabled, and monitor bank accounts for unusual activity. If a suspicious app cannot be uninstalled, users can try Safe Mode, remove special permissions, or perform a factory reset as a last resort.
Search