#android

9 articles

Android can now move your passkeys between password managers. Whether it asks for your fingerprint is up to the app you leave

2026-09-15Gadgets

Google has switched on direct transfers of passwords and passkeys between password managers on Android, built on the FIDO Credential Exchange Format and live in Google Password Manager, 1Password, Bitwarden and Dashlane. Apple describes its version as secured by Face ID. Android's developer guide leaves the biometric prompt to the exporting app, and its sample code marks it optional.

The fake reward apps moved to the one Play Store shelf where nobody can leave a public review

2026-09-12Gadgets

Bitdefender found thousands of apps in Google Play's Early Access program — fake casino, reward and cash-out games promoted with deepfake celebrity ads. Early Access exists so unfinished apps are not judged too soon, which means only the developer sees feedback. For an app that never intends to launch, that shield never comes down.

The bank's app caught the malware. The money left from the work profile, where the bank could not see it

2026-09-11Security

Group-IB found GoldFactory's Gigabud trojan using a Shelter fork called Vwork to create an Android work profile and clone a banking app into it. The bank's malware check had already fired in the personal profile. The fraudulent transfer came from the other side of the wall, looking like a clean new device.

Android 17 will send fake encryption data on your behalf — and that is the clever part

2026-08-29Security

Encrypted Client Hello hides which sites you visit from your ISP and anyone on the network. Android 17 turns it on at platform level, and where a server does not support it, sends convincing fake ECH anyway. That second half matters more than the first: privacy that only some people have is a label, not a protection.

It takes the phone's VPN slot and uses it to cut off Google Play — then installs the payload

2026-08-24Security

Zimperium's analysis of ToxicPanda 2.0 describes malware that claims the VPN permission, filters the device's own traffic, and blocks Google Play and Play Services so security updates and app verification cannot run. It targets 349 apps across 16 countries and supports 167 remote commands.

The malware reaches the car through the update channel the car trusts

2026-08-22Gadgets

Kaspersky found previously unknown malware on Android head units running DoFun, delivered through the legitimate update mechanism of a system app over an MQTT broker. It checks in every 90 minutes, runs ad fraud, and is attributed with high confidence to the group behind the BADBOX botnet.