logo
Are These Dangerous Apps Already Hacking Your Smartphone?

Are These Dangerous Apps Already Hacking Your Smartphone?

Forbes16-07-2025
Are these apps already attacking your phone? getty
There's a dangerous game of hide and seek taking place on your phone. The tradecraft behind the malicious app industry is fast becoming as much about hiding as attacking. If you can't be seen, then you can't be deleted. And more damage will be done.
That's the crux of the new warning from Zimperium, whose zLabs team followed up on Human's report into Konfety evil twin attacks that I covered a year ago. 'At its peak,' Human said, 'Konfety-related programmatic bids reached 10 billion requests per day.' Forbes Microsoft Confirms New Upgrade Deadlines—'Move To Windows 11' By Zak Doffman
'Bids per day' because this is an adware (advertising fraud) attack. The ruse is simple. The bad actors create two versions of an app with the same name. One is benign and is uploaded to Google's Play Store, with some basic, barely useful features. The second 'evil twin' version of the app is dangerous, and is distributed via other channels.
The evil twin overloads its host phone with unwanted ads, often taking up the entire screen, making it difficult to actually operate the phone. This generates revenue for the bad actors, tricking legitimate advertisers into paying for fraudulently delivered ads.
Now, 'as part of our ongoing mission to identify emerging threats to mobile security,' Zimperium says it has been 'actively tracking a new, sophisticated variant' of the threat.
The zLabs team says the threat actors behind Konfety 'consistently alter their targeted ad networks and update their methods to evade detection.' In the latest variants of the malware, this includes 'specifically tampering with the APK's ZIP structure… to bypass security checks and significantly complicate reverse engineering efforts, making detection and analysis more challenging for security professionals.'
The scale of this adware industry is out of control. Not all attacks operate in this scale way, but they are mostly (but not always) driven by apps sideloaded from outside the official app stores. That's the easiest way to stay safe — stop sideloading. Forbes Google Warns All Chrome Users—Update Now As Attacks Underway By Zak Doffman
That's why Google's new Advanced Protection Mode that comes with Android 16 restricts sideloading with no option to disable or workaround that protection. Apps installed in this way carry significantly more risks to users, phones and data.
'Konfety's operations depict the latest in a series of adaptations from ad fraudsters to cloak their activities using novel tactics that enable them to evade detection,' Human said last year. The new report from Zimperium shows nothing at all has changed.
Orange background

Try Our AI Features

Explore what Daily8 AI can do for you:

Comments

No comments yet...

Related Articles

New O3 Waterworks Ozone-Based Laundry System Is Tiny, Even More Useful
New O3 Waterworks Ozone-Based Laundry System Is Tiny, Even More Useful

Forbes

time2 hours ago

  • Forbes

New O3 Waterworks Ozone-Based Laundry System Is Tiny, Even More Useful

New Smart Laundry System +PLUS It's been four years since I ditched laundry detergent completely and switched to O3 Waterworks' aqueous ozone laundry system and it looks like the company is doing better than ever with a brand new system that will help even more people make the change. Smart Laundry System +PLUS Smart Laundry System +PLUS Announced this week, O3 Waterworks introduced the latest model of their O3 laundry system. It uses a diamond electrolytic cell to pass a charge through regular tap water, creating water that's infused with dissolved ozone. That ozone then reacts with organic compounds and oxidizes them, removing them from your clothes as effectively as detergent, but without the chemical runoff. That hasn't changed. The new system does exactly the same thing. What's noteworthy though is that it does it with a device that's less than half the size of the original system. New Smart Laundry System +PLUS (top) pictured with previous system (bottom) Instead of a "washing machine platinum" rectangle that literally was the length of a washing machine, O3 Waterworks' Smart Laundry System +PLUS is a compact, smallish briefcase-sized block with a carbon fiber and chrome trim finish. It's thinner than the original system and extremely light. And while some people may enjoy the more 'premium' finish, I think the size of the new unit is the real winner here. It's so small that the system can fit almost anywhere in your laundry room, even the little half-wall of your washing machine alcove. The other big innovation is the LCD screen on the front. It tells you exactly what's happening and when. So rather than have to remember that green means its creating a boosted O3 solution and blue is normal strength, you can see on the screen which mode the system is in. It has memory as well and automatically carries over the last setting used to the next laundry cycle. The screen also lets you know if the system detects leaks, a welcome addition. This smaller system does lose the on-device buttons of the previous model but given that they can be a point of failure, it makes sense to make the remote the single point of device control. And yes, the remote is smaller as well. Looking less like a car's keyfob this time. The power connector is the only thing that seems a little less premium than the previous model. It doesn't click in as you would expect, so it's extremely easy to unplug the unit if you jostle it. It's a minor design issue that I expect O3 Waterworks will address with future production runs. Installation and Usage If you can use a screwdriver, then you have all the capability needed to install the Smart Laundry System +PLUS. In the box are screw-in drywall anchors (I didn't even have to get out my drill, though that would have made it go a titch faster). Mark the installation points with the convenient template, screw in the anchors, screw the bracket into the anchors, hook up your cold water inflow and outflow hoses, and you're done. Given that the new system is so light, there no reason to be concerned about it pulling out of the drywall. Indeed, even with the last system that was substantially heavier, I wasn't concerned given that the bracket does a very nice job of distributing weight. Smart Laundry System +PLUS in Boost mode After installation, there's really nothing to do other than start a cold water laundry cycle and not use detergent. Your laundry room will smell a bit like ozone (think of how the air smells after a thunderstorm) but that's the only indicator that anything is different. The system itself will light up blue for a .5 solution and green for a boosted 1.0 solution when it's working. Afterwards, if you really need a "meadow fresh" smell to tell your brain that your laundry is clean, throw in a fabric softener in your dryer. I'm fragrance and additive sensitive, so I use natural wool balls to aid drying and eliminate static cling. The only "gotcha" switching from detergent to aqueous ozone is that if any of your clothes aren't colorfast, they will lose their dye faster. Availability The Smart Laundry System +PLUS is shipping soon and is available for pre-order now at $100 off its $499 MSRP through Sunday, July 27. Think of the cost as buying a few years of detergent all at once but without the surfactants and solvents that you'd deposit back into the water supply with traditional detergent.

As XRP Crosses $200 Billion Market Cap, HashJ Expands Support for Scalable XRP & Dogecoin Contract Rewards
As XRP Crosses $200 Billion Market Cap, HashJ Expands Support for Scalable XRP & Dogecoin Contract Rewards

Business Upturn

time5 hours ago

  • Business Upturn

As XRP Crosses $200 Billion Market Cap, HashJ Expands Support for Scalable XRP & Dogecoin Contract Rewards

London, United Kingdom, July 26, 2025 (GLOBE NEWSWIRE) — In response to XRP officially surpassing a $200 billion market capitalization, MGPD Finance Limited, doing business as HashJ, today announced the expansion of its mobile-based digital contract platform to further support XRP and Dogecoin-based reward systems. The platform allows everyday users to engage with the fast-growing digital asset economy—now including XRP-linked reward strategies and Dogecoin contract participation—entirely from their smartphones. This announcement reflects HashJ's continued mission to make crypto-based income tools more accessible and transparent to mainstream users. This article will deeply analyze the contract methods of these two digital assets and introduce how the HashJ platform makes it easy for every ordinary person to experience it. New users can visit the HashJ official website ( to register for free and receive a $118 gift package (including $100 trial money and $18 real rewards) to start the contract journey immediately. The XRP Challenge: Why Traditional Rewards Systems Fall Short XRP, developed by Ripple Labs, does not rely on Proof of Work or traditional blockchain-based reward systems. Unlike Dogecoin or Bitcoin, XRP does not support contract-driven earning mechanisms natively, due to its pre-issued total supply and consensus protocol based on validation nodes rather than computational method. To address this limitation, HashJ now offers XRP-related yield options via remote smart contract systems and diversified asset rewards—allowing users to engage with XRP's growth ecosystem even in the absence of contract-based mechanisms. Dogecoin Contracts: Still A High-Value Option in 2025 In contrast to XRP, Dogecoin remains a powerful option for daily crypto income. Through its Scrypt-based algorithm and merged structure with Litecoin, Dogecoin contract systems continue to deliver accessible and stable returns. Even without hardware, users can now access DOGE-linked rewards through HashJ's earning contracts: Daily income potential averaging 75 DOGE Net profit approximating $12.20/day with remote access No hardware or setup required—fully integrated mobile experience How HashJ Simplifies the Crypto Rewards Process Founded in 2018, HashJ is a global mobile-first platform that enables users to access crypto contract earnings with no prior technical background. The system supports BTC, ETH, DOGE, and XRP-related reward methods and is purpose-built for mobile access, remote management, and real-time daily income tracking. Key Benefits of HashJ's Contract Model: No hardware required – entirely app-based – entirely app-based Smart revenue automation – optimized by AI-based allocation – optimized by AI-based allocation Flexible entry points – users can start with as little as $10 – users can start with as little as $10 Zero risk onboarding – free $118 starter pack for new users Why choose HashJ'a contract system? In celebration of XRP's latest market milestone and growing Dogecoin contract demand, HashJ has launched the following upgrades for new registrants: $100 trial credit for contract experience for contract experience $18 in real crypto funds for immediate use for immediate use Access to XRP yield options, DOGE daily contracts, and multi-coin flexibility This total of $118 start-up funds is completely free, allowing every new user to participate in digital asset contracts with zero risk and achieve steady income. HashJ's Commitment to Broader Participation With the addition of XRP-focused rewards and stable DOGE-based contracts, MGPD Finance Limited (HashJ) continues to lead innovation in digital income tools. The platform is now used by over 2 million users globally and is positioned to support the next wave of crypto adoption across mobile and emerging markets. 'Crypto participation should be as easy as downloading an app,' said a spokesperson for HashJ. 'Our mission is to help everyday people build reliable digital income streams—even from assets like XRP that don't traditionally offer contract-based returns.' How To Start Your Digital Income Journey MGPD Finance Limited invites users to explore the new generation of smart contract tools that provide simple, secure, and consistent earning strategies across XRP, DOGE, and other leading assets. Register today at to claim your $118 starter bonus and begin earning from anywhere, anytime—no hardware, no experience, just results. About MGPD Finance Limited (doing business as hashj) Founded in 2018, MGPD Finance Limited (doing business as HashJ) is the world's leading mobile contract platform, dedicated to making it easy for everyone to participate in the income ecosystem of mainstream digital currencies. Users can sign contracts for BTC, ETH, DOGE and other currencies simply through their mobile phones. The platform operation is extremely simple and suitable for zero-based users. One-click operation, no technical background is required, you can start the digital asset income experience. For more information, visit: Download: Available on iOS and Android Business Inquiries: [email protected]

1Password subscriptions are on sale for 50 percent off right now
1Password subscriptions are on sale for 50 percent off right now

Engadget

time5 hours ago

  • Engadget

1Password subscriptions are on sale for 50 percent off right now

A password manager is a crucial tool for anyone, really, but especially students going back to school in the fall. If you're one of them, you probably have more logins to remember now than ever before. 1Password is having a notable back-to-school sale right now that can take the anxiety out of remembering all your credentials. Both Individual and Families plans have been discounted: the former is down to just $18 for a year, while the latter will run you $30 for the year. The plans are nearly identical in terms of features, but the Families plan accommodates five additional people. Just note that only new 1Password customers can get this deal, and the sale price only applies to the first year of access. The deal runs through September 12. The Families plan is also on sale. $18 at 1Password This provider actually topped our list of the best password managers, and for good reason. We appreciated the intuitive interface and the fact that it's available on most platforms, so you'll never be left out in the cold. These include Chrome, Firefox, Safari, Edge, macOS, iOS, Windows, Android and more. Subscriptions include industry standard encryption and a "secret key" that only you know on top of a master password. There's also two-factor authentication and the platform issues alerts when credentials have potentially been compromised. The only downside here is the one that accompanies many password managers. There is no free version. Obviously, this won't be an issue for the year, but it could once the plan runs out. Follow @EngadgetDeals on X for the latest tech deals and buying advice .

DOWNLOAD THE APP

Get Started Now: Download the App

Ready to dive into a world of global content with local flavor? Download Daily8 app today from your preferred app store and start exploring.
app-storeplay-store