Android spyware trojan targets Russian military personnel who use Alpine Quest mapping software

Doctor Web’s experts have discovered Android.Spy.1292.origin, spyware whose main target is Russian military personnel. The attackers hide this trojan inside modified Alpine Quest mapping software and distribute it in various ways, including through one of the Russian Android app catalogs. Among other things, the malware sends the attackers phonebook contact information and the infected device’s geolocation.

Moreover, this spyware collects data about the files stored on the devices and, when commanded by threat actors, can download additional modules possessing the functionality needed to steal the files.

#Spyware #Russia #Android #AlpineQuest

Prepare for Android 15: Key Requirements and What They Mean for You
https://www.gizchina.com/2025/04/22/prepare-for-android-15-key-requirements-and-what-they-mean-for-you/

Turns out Kernel SU's init is closed sourced unlike Magisk's.

https://fixvx.com/TheNotesOfJosh/status/1915012991034011992

🔥 Google pulls the plug on third-party cookie prompts in Chrome.

No more new pop-ups — just Incognito upgrades & IP protection by Q3 2025.

While Firefox & Safari banned 3rd-party cookies in 2020, Google stalls—caught between privacy & profit.

Read — https://thehackernews.com/2025/04/google-drops-cookie-prompt-in-chrome.html

🚨 Crypto Devs, Watch Out!

Ripple's xrpl.js library was backdoored to steal private keys! Over 2.9M downloads, 135K devs at risk.

🗓️ Malicious versions: 4.2.1–4.2.4, 2.14.2
🛡️ Safe versions: 4.2.5, 2.14.3
👤 Hacker hijacked a Ripple dev's npm account on April 21, 2025.

🔗 Learn more: https://thehackernews.com/2025/04/ripples-xrpljs-npm-package-backdoored.html

🚨 New Tactics from Russian Hackers!

Since March 2025, Russian threat groups UTA0352 & UTA0355 are targeting Ukraine-linked orgs via Microsoft 365 OAuth abuse.

No fake sites—just official Microsoft URLs, real Signal/WhatsApp invites, and compromised Ukrainian Gov accounts.

🔗 Learn more: https://thehackernews.com/2025/04/russian-hackers-exploit-microsoft-oauth.html

👀 Phishing isn't just an email problem anymore!

2025's #1 breach method? Identity attacks — phishing + stolen creds now top software exploits. MFA? Often bypassed. Detection? Too slow.

Real-time browser-based defense is the future. Stop attacks before passwords are stolen.

Learn more: https://thehackernews.com/2025/04/three-reasons-why-browser-is-best-for.html

⚠️ Target: Russian Military!

Android.Spy.1292.origin spyware steals data via fake Alpine Quest apps.

— Spread via fake Telegram & Rus. app stores
— Steals loc., contacts, files
— Sends data to Telegram bot, runs hidden malware

Doctor Web says it mimics Alpine Quest Pro, widely used in military zones.

Read: https://thehackernews.com/2025/04/android-spyware-disguised-as-alpine.html

👀 Kaspersky found a Windows backdoor in fake ViPNet updates targeting Russian government, finance, and industry.

💼 Dream Job? Or Cyber Trap?

Iranian hackers UNC2428 lured Israelis with fake jobs at defense giant Rafael. Victims downloaded “RafaelConnect.exe” — a trap that secretly installed the MURKYTOUR backdoor, giving attackers full access.

Read now → https://thehackernews.com/2025/04/iran-linked-hackers-target-israel-with.html

Music Time for Spotify ( Spotify Premium)

Music Time for Spotify is a VS Code extension that discovers the most productive music to listen to as you code.

🔗 Links:
- Download
- Screenshots
- Features
- Source code
Organization: swdotcom (Software)

❗️Friendly reminder:

If you find it useful, You may star the repo, donate to the developer, or perhaps you may also contribute to the development of this project.

🏷 Tags: #vscode #extention #spotify

Biometric Bypass

This LSPosed (Xposed) module streamlines face unlock by skipping the confirmation step enforced after biometric authentication. It applies the bypass system-wide — so it works across all apps, including banking or security-sensitive ones.

🔗 Links:
- Download
- Source code
Developer: Rafa Reborn

❗️Friendly reminder:

If you find it useful, You may star the repo, donate to the developer, or perhaps you may also contribute to the development of this project.

🏷 Tags: #Android #Root #Xposed #Modules

Tooooools

Minimalist and lo-fi effects for image and video processing online.

🔗 Links:
- Website
- Dev updates

❗️Friendly reminder:

If you find it useful, You may star the repo, donate to the developer, or perhaps you may also contribute to the development of this project.

🏷 Tags: #Website #Utilities

🌡️ That's hot: Android will soon add an easy shortcut to the Pixel Thermometer app

The new ‘Temperature’ shortcut will make it easier to launch Pixel Thermometer from the lock screen

More details 👇

🔗 https://www.androidauthority.com/pixel-thermometer-lock-screen-shortcut-3546974/

📱First look: Android 16 is testing a fresh design for the Pixel lock screen

Google is working on a new, less cluttered lock screen layout for Pixel phones in Android 16

Info + screenshots 👇

🔗 https://www.androidauthority.com/pixel-lock-screen-android-16-3546942/

When Is It Time to Say Goodbye to Your Smartphone?
https://www.gizchina.com/2025/04/23/when-is-it-time-to-say-goodbye-to-your-smartphone/

Realme GT7: The New Flagship Killer Arrives With Dimensity 9400+ and 7200mAh Battery
https://www.gizchina.com/2025/04/23/realme-gt7-launch-features/

Honor GT Pro Debuts with Snapdragon 8 Elite and 7,200mAh Battery
https://www.gizchina.com/2025/04/23/honor-gt-pro-debuts-with-snapdragon-8-elite-and-7200mah-battery/

Nubia RedMagic 10 Air Launches Globally
https://www.gizchina.com/2025/04/23/nubia-redmagic-10-air-launches-globally/

Huawei Enjoy 80 Debuts with Massive Battery and Affordable Price
https://www.gizchina.com/2025/04/23/huawei-enjoy-80-debuts-with-massive-battery-and-affordable-price/

HyperOS 3 Update: Eligible Xiaomi, Redmi & POCO Phones
https://www.gizchina.com/2025/04/23/hyperos-3-update-eligible-xiaomi-redmi-poco-phones/