🚀 Medial Secures Investment on Shark Tank India - Fueling the Future of Professional Social Networking. 🔥

Startup Showcase

Premium Content

Try our Valuation Calculator →

News on Medial

Novel technique allows malicious apps to escape iOS and Android guardrails

Arstechnica

Arstechnica · 1y ago

Novel technique allows malicious apps to escape iOS and Android guardrails

Phishing campaigns are now using a new method to trick iOS and Android users into installing malicious apps that bypass the safety measures put in place by Apple and Google. The attackers are able to install a phishing application without the user having to allow third-party app installation. The technique involves enticing users to install a Progressive Web App (PWA) that looks like an official banking app. Once installed, the malicious app steals account credentials and sends them to the attackers in real time. This method has been observed in attacks against banks in Czechia, Hungary, and Georgia.

Related News

Meta and Yandex are de-anonymizing Android users’ web browsing identifiers

Arstechnica

Arstechnica · 2m ago

Meta and Yandex are de-anonymizing Android users’ web browsing identifiers

Researchers have discovered that Meta and Yandex are using tracking code embedded in millions of websites to de-anonymize Android users by exploiting Internet protocols. This allows them to turn ephemeral web identifiers into persistent identities linked to mobile apps. By bypassing Android’s sandboxing and browser privacy protections, these companies can track detailed browsing histories linked to users' app accounts. Google is investigating this breach of its terms, which is exclusive to Android, not iOS.

Apple patches 0-day exploited in “extremely sophisticated attack”

Arstechnica

Arstechnica · 5m ago

Apple patches 0-day exploited in “extremely sophisticated attack”

Apple has patched a critical zero-day vulnerability in Webkit affecting iPhones and iPads, potentially exploited in a sophisticated attack targeting specific individuals. This vulnerability allowed malicious web content to escape the security sandbox. It impacts several iPhone and iPad models, requiring users to update to iOS and iPadOS 18.3.2. While there’s no indication of widespread exploitation, targets of entities like law enforcement or nation-state spies should update immediately for security.

Want to keep a YouTube video playing on repeat? Here’s how to loop it on mobile, desktop | Mint

Livemint

Livemint · 6m ago

Want to keep a YouTube video playing on repeat? Here’s how to loop it on mobile, desktop | Mint

YouTube allows users to loop videos on both mobile apps and desktops, enabling them to restart automatically once ended. On Android and iOS, open the YouTube app, play a video, tap the video player, select the gear icon, choose Additional settings, and enable Loop video. For desktops, play a video on YouTube, right-click on the player, and select Loop. These steps ensure continuous playback of the selected video.

Microsoft releases a new Windows app called Windows App for running Windows apps

Arstechnica

Arstechnica · 11m ago

Microsoft releases a new Windows app called Windows App for running Windows apps

Microsoft has unveiled a new app called Windows App that allows users to run Windows and Windows apps on various platforms, including Windows, macOS, iOS, web browsers, and Android. The app is a replacement for the Microsoft Remote Desktop app and offers a unified way to access Windows PCs, cloud-hosted Windows 365, and remotely hosted apps provisioned by work or school. Windows App provides improvements such as easier account switching, enhanced device management for IT administrators, support for frontline workers, and the "Relayed RDP Shortpath" feature for enabling Remote Desktop on restricted networks.

iOS and Android juice jacking defenses have been trivial to bypass for years

Arstechnica

Arstechnica · 4m ago

iOS and Android juice jacking defenses have been trivial to bypass for years

Researchers have discovered that juice-jacking defenses on iOS and Android, meant to prevent data theft via charging connections, have been easily bypassable for years. The new ChoiceJacking attack can exploit weaknesses to gain data access by a malicious charger. Apple and Google recently updated their systems to enhance security against these attacks, but many Android devices remain vulnerable due to ecosystem fragmentation. Users are advised to avoid public charging stations to prevent potential risks.

How Google protects you from dangerous apps: Top Play Protect features on Android | Mint

Livemint

Livemint · 6m ago

How Google protects you from dangerous apps: Top Play Protect features on Android | Mint

Google has enhanced its app safety measures on Android, blocking 2.36 million policy-violating apps and banning 158,000 harmful developer accounts last year. Combining human reviewers and AI, Google identifies and blocks malicious apps effectively. Google Play Protect continuously scans devices for threats, even covering externally sourced apps. Play Protect’s features include real-time malware scanning, reminder notifications, protection against social engineering attacks, and automatic app permission revocation for infrequently used apps.

Biggest DDoSes of all time generated by protocol 0-day in HTTP/2

Arstechnica

Arstechnica · 1y ago

Biggest DDoSes of all time generated by protocol 0-day in HTTP/2

Threat actors recently carried out massive distributed denial-of-service (DDoS) attacks using a novel technique called HTTP/2 Rapid Reset, exploiting a vulnerability in the HTTP/2 protocol. These attacks were the largest in Internet history and reached unprecedented levels of intensity, peaking at 201 million requests per second. Despite the relatively small number of malicious machines involved, the attacks caused intermittent errors for legitimate users trying to connect to websites, exposing the menacing potential of this vulnerability. The HTTP/2 protocol, introduced in 2015, allowed for higher utilization of connections, making it attractive for DDoS attacks.

'SpyLoan' apps offer easy money but come with death threats

Gizmodo

Gizmodo · 1y ago

'SpyLoan' apps offer easy money but come with death threats

According to a report from ESET Research, malicious loan apps on the Google Play Store have been downloaded 12 million times by Android device owners since 2020. These fraudulent apps, known as "SpyLoan apps," promise quick loans but actually steal users' personal and financial information to blackmail them. The apps have grown by 90% in the first half of 2023, primarily targeting users outside of the U.S. and Europe. Google confirmed the report and stated that they take security claims seriously and take appropriate action against violating apps.

Truecaller Launches AI-Powered Call Recording Feature For Indian Users

Inc42 · 1y ago

Truecaller Launches AI-Powered Call Recording Feature For Indian Users

Truecaller has introduced an AI-powered call recording feature in India for iOS and Android users. Available as part of the brand's Premium plan, the feature allows users to record incoming and outgoing calls directly through the Truecaller app. iOS users can record calls after answering by calling the recording line, while Android users can simply tap the record button during a call. The recordings are stored locally for iOS users and can be stored on iCloud for added security. Transcriptions are currently offered in English and Hindi, with more languages and markets to follow.

Malware-riddled Android apps spotted on Google Play Store

Techradar

Techradar · 1y ago

Malware-riddled Android apps spotted on Google Play Store

A recent report from ESET reveals the discovery of 12 malware-infected Android apps that were used in a social engineering attack. The attackers created fake social media accounts, masquerading as attractive individuals to gain the victims' trust. They would then suggest moving the conversation to an Android chat app and offer one of the malicious apps. These apps contained a Remote Access Trojan (RAT) called VajraSpy, developed by the Patchwork APT group. The Trojan could retrieve sensitive data such as contacts, files, call logs, SMS messages, and even access WhatsApp and Signal messages. Google has removed the apps from the Play Store, but they are still available on third-party platforms.

Trackers

Active Indian VC’s

OG Capital Email

With a hands-on approach, OG Capital aims to invest in over 20 promising...

Accel Partners Email

Early and growth-stage investments in disruptive technology companies with...

Early-stage venture capital firm investing in technology startups in India. Focus on...

Access All Trackers

Startup Showcase Winners

June 2025

Helping your parents when you are miles away

The Pit Stop Your Cravings Deserve

The next generation E-commerce platform

Enter Ongoing Startup Showcase

Top Users

Trending News on Medial

Just Months After Promotion, Open ...

Microsoft locks down a building a ...

Gaming Ban Stumps Cricket: Virat ...

Download the medial app to read full posts, comements and news.