September 24, 2024 at 12:42PM Altered versions of popular Android apps linked to Spotify, WhatsApp, and Minecraft have been distributing a new iteration of Necro, a known malware loader, with some of these apps even present on the Google Play Store. This sophisticated malware is designed to carry out various malicious activities on infected devices, … Read more
July 31, 2024 at 06:09AM A new malicious campaign has utilized over 107,000 unique samples of Android apps to steal SMS messages and intercept one-time passwords (OTPs). This large-scale operation has targeted users in 113 countries, with India and Russia topping the list. Malware remains hidden, continuously monitoring new incoming messages to obtain OTPs for … Read more
May 3, 2024 at 07:27AM Microsoft has issued a warning about the Dirty Stream attack method, which affects Android applications and allows threat actors to take control and gather sensitive data. The vulnerability impacts popular apps like Xiaomi File Manager and WPS Office, potentially affecting over 1.5 billion installs. Microsoft has alerted developers and urged … Read more
April 1, 2024 at 06:21AM Malicious Android apps on Google Play turned devices into proxies for threat actors. HUMAN’s Satori team identified 29 of these VPN apps, named PROXYLIB. Google removed them. These residential proxies help hide IP addresses but are misused by threat actors for attacks. LumiApps’ SDK is used to create and monetize … Read more
March 5, 2024 at 02:28PM Microsoft has announced the end of support for Windows Subsystem for Android on March 5th, 2025. This feature allows users to run native Android apps in a virtualized environment on Windows 11. Amazon has also provided details on the end of support, with users able to continue using installed apps … Read more
January 22, 2024 at 12:06PM New software supply chain attack method MavenGate targets public and popular libraries used in Java and Android apps. Vulnerabilities allow hijacking of artifacts and injecting malicious code. Oversecured sent reports to tech companies. Attack involves domain name purchases and exploiting abandoned libraries. Sonatype claims automation prevents attacks, but recommends end … Read more
December 11, 2023 at 03:00AM Cybersecurity researchers have uncovered 18 malicious loan apps on the Google Play Store, collectively downloaded over 12 million times. These apps target users in Southeast Asia, Africa, and Latin America, gathering personal and financial information for blackmail. It’s crucial to download apps from official sources and scrutinize permissions and reviews … Read more
November 4, 2023 at 05:24AM Google is introducing an “Independent security review” badge in the Play Store’s Data safety section for Android apps. This badge will be given to apps that have undergone a Mobile Application Security Assessment (MASA) audit. The goal is to provide users with more transparency and help them make informed choices … Read more