warning Archives

AppWizard

March 25, 2026

Alert warns of cyber actors using Telegram messaging app to push malware

The FBI issued an alert on March 20 about a sophisticated cyber technique linked to the Iranian government, using the Telegram app to distribute malware globally. This has led to data breaches and reputational damage for many victims. The FBI provided recommendations for organizations and individuals to enhance cybersecurity, including staying informed about cyber threats, implementing security protocols, and educating employees on suspicious communications. Contacts for further insights at the AHA include John Riggi and Scott Gee, with resources available at aha.org/cybersecurity.

AppWizard

March 24, 2026

Indika forced me to confront some of life’s toughest questions, and I think it’s made me a better person

The author attended an all-girls Catholic high school where they observed a dissonance between the teachings of compassion and the actions of some devout Catholics who bullied peers. This experience led to a questioning of faith, which has diminished over time, although an appreciation for religious imagery remains. The author discusses the indie game Indika, developed by Odd Meter, which explores dark themes of faith and violence within an Eastern Orthodox convent. The gameplay combines puzzle-solving and parkour elements, with nostalgic pixelated segments. Indika's narrative is dark, lacking happy endings or divine intervention, prompting reflection on the nature of suffering and the absence of God in times of hardship. The game illustrates that even pious individuals can harbor darkness and encourages players to embody resilience and compassion in the face of evil.

AppWizard

March 23, 2026

Google’s killing QR code sign-ins for Messages on the web

The Google Messages web application will soon discontinue the QR code login option, requiring users to sign in using their Google account credentials instead. A warning within the app states that "QR code pairing is going away soon," prompting users to transition to the new login method. After signing in on the web app, users will need to complete a security check by selecting one of three emojis displayed on the web app. Users can manage their device pairings by accessing their profile picture and selecting Device pairing. The exact timeline for this change is not specified, but it is indicated to occur "soon."

AppWizard

March 23, 2026

FBI Warns of Russian Hackers Targeting Messaging Apps – The Advocate-Messenger

The FBI has issued a warning about phishing campaigns conducted by cyber actors linked to the Russian Intelligence Services (RIS), which target commercial messaging applications (CMAs). These actors have compromised numerous individual accounts, focusing on individuals with significant intelligence value, such as U.S. government officials and journalists, without breaching the encryption of the applications. The campaigns have allowed unauthorized access to private messages, contact lists, and the ability to send deceptive messages. Users of CMAs, especially Signal, are particularly targeted. The phishing tactics involve disguising messages as communications from automated CMA support, leading victims to click malicious links or provide sensitive information. To mitigate risks, users are advised to enhance their cybersecurity measures, remain vigilant, and follow best practices such as scrutinizing links, verifying group chats, and reporting suspicious activity to the Internet Crime Complaint Center or local authorities.

AppWizard

March 23, 2026

Russian hackers hijack thousands of ‘high intelligence’ messaging app accounts, FBI warns

Hackers linked to Russian intelligence are targeting high-profile users of popular messaging applications, according to a warning from the FBI and CISA. The primary targets include U.S. government officials, military personnel, political figures, and journalists. The attackers compromise accounts to access messages and contact lists, allowing for further phishing attempts. Signal users are particularly at risk, though techniques can extend to WhatsApp and Telegram. The hackers use social engineering tactics, impersonating official support accounts to trick users into revealing sensitive information. The FBI and CISA advise users to be cautious of unexpected messages and suspicious links. Victims are encouraged to report incidents to the Internet Crime Complaint Center (IC3).

AppWizard

March 23, 2026

Google adds ‘Advanced Flow’ for safe APK sideloading on Android

Google has introduced a new mechanism called Advanced Flow within Android to facilitate the sideloading of APKs from unverified developers for power users while enhancing security. This system will launch in August and aims to balance user flexibility with protection against malware and scams, which caused losses of approximately billion last year. To install APKs from unverified developers, users must complete a one-time process that includes activating Developer Mode, confirming they are not influenced by threat actors, restarting the device, and verifying the legitimacy of modifications after a day. Once completed, users can install applications from unverified developers and choose to enable them for a week or indefinitely, with Android providing a warning about the unverified source. The Advanced Flow process is designed to prevent users from being coerced into installing malicious software during scam attempts. Google emphasizes that this system is a compromise between Android's openness and necessary user protections, leading to upcoming developer verification requirements. All Android app publishers will need to undergo identity verification by Google, with non-compliance resulting in blocked software installations on certified Android devices. This verification initiative is now set for rollout in August 2026.

AppWizard

March 22, 2026

Steam Deck Users Warned About Playing #1 Selling Steam Game

Steam Deck users are experiencing performance issues with the best-selling game on Steam, Crimson Desert, which is marked as “Unknown” for compatibility with the device. Despite being a top title, its demanding technical requirements create significant challenges for the Steam Deck. Experts recommend waiting for patches before playing, as current performance struggles include difficulty achieving stable 30 FPS, especially in demanding sequences. Developer Pearl Abyss has not communicated plans for future support or optimization for the Steam Deck. The gaming community is encouraged to discuss their experiences regarding the game's performance on this platform.

AppWizard

March 21, 2026

Cyber actors linked to Russia target messaging app users, FBI warns

The United States has issued a warning about cyber actors linked to Russian intelligence targeting users of commercial messaging applications, particularly Signal, compromising thousands of accounts worldwide. The FBI and CISA released a public service announcement detailing the operation's focus on individuals of “high intelligence value,” including U.S. government officials, military personnel, political figures, and journalists. Attackers have not breached the encryption of these platforms but manipulate users into disclosing credentials or linking devices. Russian intelligence-linked actors often pose as official support accounts, creating urgency to obtain security codes. Dutch intelligence agencies also reported a similar campaign targeting Signal and WhatsApp accounts of dignitaries and military personnel. Users are urged to be cautious of suspicious messages and to avoid sharing personal information. Signal reaffirmed that its encryption remains intact, emphasizing that vulnerabilities arise from user behavior rather than technical flaws in the application itself.

AppWizard

March 21, 2026

FBI, CISA issue PSA on Russian intelligence campaign to target messaging apps

The FBI and CISA issued a joint public service announcement about Russian hackers targeting commercial messaging applications like Signal and WhatsApp. The hackers use social engineering tactics to deceive users into giving up account access, including impersonating support personnel and prompting users to click on malicious links or provide sensitive information. Although the hackers have not yet bypassed the apps' end-to-end encryption, compromised accounts can lead to serious consequences, such as reading messages and launching further phishing attacks. The agencies recommend that users enhance their cybersecurity measures to protect against these threats. This campaign is part of a broader trend to undermine the security of messaging apps, with previous warnings about spyware and attempts to infiltrate Signal users, especially in conflict zones.

AppWizard

March 20, 2026

Google slows Android sideloading to trip up scammers

Google is implementing a new flow for installing applications from unverified developers on Android, which includes several steps to reduce risks associated with sideloading. Users must first enable developer mode, followed by a verification check to ensure no external influence is guiding the installation. They then restart their devices and reauthenticate, disrupting any potential remote access. A one-day waiting period is enforced before installation, allowing users time to reconsider. Finally, users must confirm their action using biometric authentication or a device PIN. After successful verification, users can install apps from unverified developers for a limited duration or indefinitely, with warnings about the app's source provided throughout the process.