Android

Cybersecurity researchers identified an updated version of ToxicPanda 2.0, also known as TgToxic, featuring significant enhancements including a set of 167 remote commands and expanded global targeting. The Android malware specifically features a PIN harvesting workflow that targets over 140 banking and cryptocurrency applications.

A new malware named Manic has been identified for the Android platform. This malicious software specifically targets users located in multiple European countries. It possesses a sophisticated fallback data exfiltration mechanism that utilizes nearby infected devices.

Researchers at Group-IB discovered "WindRelay," a new NFC relay malware family designed to capture live card data and forward it in real time to attackers. The attack process involves tricking victims into installing an Android remote access Trojan (RAT) called SpyNote, which then enables the theft of contactless payment details from physical cards. This technology allows criminals to make purchases or withdraw cash remotely using dynamic transaction-specific codes.

Junk Cleaner, a new feature in Malwarebytes for Android 5.22, helps users remove storage clutter by identifying and deleting leftover files, old downloads, and hidden app caches. The tool focuses on freeing up space without affecting photos, messages, or documents.

Signal now allows users to link multiple phones, including Android and iPhone, to a single account. The update enables message syncing across devices and optional transfer of end-to-end encrypted messages to mitigate security risks. The feature is available with Signal versions 8.20 (Android) and 8.22 (iPhone/iPad).

A New York school district has paused plans to introduce an android into the classroom, raising questions about the future of robot teachers. The article humorously explores parental anxieties about education choices and the potential of humanoid robots in schools.

Gander is an Android file viewer that supports PDF, Word, Excel, PowerPoint, images, video, audio, Markdown, and code without requesting any permissions. It uses Pdfium, Media3, and bundled JS libraries in a WebView to render files locally, avoiding server uploads. The 14 MB MIT-licensed app is available on GitHub.

The source code for the Flying Eagle Android RAT framework is circulating in criminal Telegram channels. Hunt.io and researcher NetAskari linked it to 170 internet servers and a fake Chinese public security app targeting Android users.

Malwarebytes rebuilt its Mobile Security app to combat rising phone scams, which affect nearly half of users daily. Features like Scam Guard, Text/Call Protection, and the Digital Footprint Portal aim to detect AI-driven threats, block scams, and expose compromised personal data. A 2025 survey found 25% of victims faced harassment or blackmail, 20% had private information exposed, and 15% lost money.

Aftercall is a campaign of deceptive Android apps on Google Play that display intrusive pop-up ads after phone calls by exploiting overlay permissions. These apps masquerade as alarm clocks, calendars, and other tools, making it difficult for users to identify and uninstall them. The ads waste advertisers' money and cause significant user frustration.

The article highlights multiple cybersecurity threats and breaches, including TikTok resin art scams, fake Call of Duty Mobile promotions, OpenAI's sandbox escape during a security test, Android threat distribution methods, vehicle tracking vulnerabilities, WhatsApp Web exposure via Adobe's Acrobat extension, Chick-fil-A account hijacking, the Paidwork data breach affecting 23 million users, and the ClickLock Stealer ransomware for Macs.

Motorola phones are highlighted for their reasonable prices, colorful designs, and simple software, positioning them as good, wallet-friendly Android smartphones. The article references models like the Razr and Moto G.

The Vision 50 Years Phone project aims to maintain performance on old Android devices without rooting. It is hosted on GitHub and linked to a Hacker News discussion with 6 points and 0 comments.

Qualcomm, the maker of processors powering numerous Android devices, is raising its prices. The price increase is reportedly planned for the end of the summer.

The article discusses methods to increase storage on Android devices without using a microSD card, noting that cloud storage is not the only available solution.

The article outlines potential disadvantages for users switching from Android to iPhone, focusing on transition challenges.

Android is considering implementing restrictions on on-device ADB (Android Debug Bridge), a tool commonly used for debugging and development. The blog post and Hacker News comments discuss the potential policy change.

Apple and Ford are collaborating to integrate Apple Maps into Ford's lower-cost electric vehicles, enabling native navigation without requiring an iPhone. The partnership also involves developing hands-free driving technology using Apple's road data and extends into autonomous driving systems through Ford's Latitude AI subsidiary.

The European Union fined Google 890 million euros for violating the Digital Markets Act by prioritizing its own services in search results and imposing restrictive practices on its Play Store. The penalties, split into 460 million euros for self-preferencing and 430 million euros for app store restrictions, mark Google as the third company sanctioned under the DMA.

The European Union fined Google 890 million euros ($1 billion) for allegedly violating antitrust regulations by favoring its own services in Google Play and search, limiting competition. Google disputed the fine, claiming it will harm consumers by removing features like real-time pricing, while the European Commission argued for fair competition and consumer choice.

The article discusses Android users disabling Google Play Protect due to its restrictive nature, outlines the process for disabling the security feature, and highlights the associated risks.

A Samsung S26 Ultra was purchased in Canada through Karrot for CAD $990, but the phone's interface resembled an older Android version, raising suspicions of it being illegitimate. The buyer provided matching IMEI numbers but noted discrepancies during setup.

The EU will require Google to allow competing AI models to operate within its Android ecosystem, challenging the dominance of Google's Gemini tool. This decision aims to benefit AI companies like Anthropic, OpenAI, and French startup Mistral by increasing access to Android devices used by 60% of EU adults.

Signal's latest beta version introduces a feature allowing users to add an Android phone or tablet as a secondary device, facilitating easier use of the app across multiple devices.

Google is addressing a security flaw in Android 16 that allows unauthenticated users to send SMS or WhatsApp messages via Gemini from the lock screen without a PIN. The bug, reported to The Register, enables physical attackers to bypass device authentication using a specific multi-touch gesture, with Google confirming a fix will deploy this week.

Google's €4.6 billion EU antitrust fine will be allocated to the EU's 2026 budget, reducing member state contributions. The payment, confirmed after a legal battle, provides temporary financial relief for EU countries but does not resolve ongoing debates over future budget cycles.

Google will open its Google Play Store to third-party app stores starting July 22, 2025, following a court-ordered injunction from U.S. District Judge James Donato. The injunction, part of a 2023 lawsuit by Epic Games, prohibits Google from favoring its own app store and requires it to carry competing app stores on Android devices in the U.S. through 2029.

The EU has directed Google to share its search data and make the Android platform accessible to competitors in the AI sector. This regulatory action aims to foster competition in artificial intelligence by opening Android to rival AI developers.

The EU has mandated that Google share anonymized search data with competitors by 2027 and open its Android OS to rival AI companies to promote competition. Google argues these rules could compromise user privacy and national security, while the EU aims to foster innovation and reduce market dominance.

The European Union has mandated that Google share anonymized search data with rivals and open its Android operating system to third-party AI agents by 2027. The rules aim to foster competition and innovation in AI by enabling rival services to function on Android devices at the same level as Google's Gemini AI.

The European Union has mandated that Google share its search data and open the Android system to rival AI companies. These new rules aim to promote competition in the tech sector by allowing other AI firms access to Google's platforms.

The European Union mandated Google to share anonymized search data and open its Android system to rival AI companies to promote competition. Google argues the rules could compromise user privacy and security, while the EU claims the measures will foster innovation and consumer choice in the AI sector.

The European Union mandated Google to share anonymized search data and enable rival AI access on Android to foster competition. Google criticized the rules, warning they could compromise privacy and security, while the EU emphasized promoting user choice and innovation.

Google will allow third-party app stores on Android, effective July 22. This change permits users to install apps from sources other than the Google Play Store.

The article reviews MagSafe power banks for iPhone and Qi2 Android devices, highlighting top options and those to avoid for portable charging needs.

Google will now count all Android backup data toward your storage cap. The change is noted to not take too much extra space.

The article discusses a method to escalate privileges from Firefox to Android root, highlighting a potential security vulnerability. It references a specific article URL and Hacker News comments.

A new Linux kernel vulnerability, Bad Epoll (CVE-2026-46242), allows unprivileged users to gain root access on Linux desktops, servers, and Android devices. A fix is available, and the flaw exists in the same kernel code area where an AI model previously found another bug.

A botnet named Popa, part of the Vo1d and BADBOX ecosystems, exploits Android-based streaming devices to facilitate ad fraud, account takeovers, and data scraping, with compromised devices routing malicious traffic through home internet connections. The FBI and security researchers warn that these devices, often sold as cheap alternatives for streaming content, can be used for criminal activities without the owner's knowledge.

A user discovered fake apps on the Google Play Store disguised as AAA games like No Man's Sky, which are actually ad-filled scams that prevent gameplay. These apps use misleading titles and package names, and Google has not removed them despite reports.