Cybersecurity firm Kaspersky disclosed that apps laced with malware were installed 600 million times on Android phones irrespective of Google Play Protect scanning them before installation. In response, Google has developed a new onboarding UI for the Play Store, asking users to verify their identity and payment method, alongside other security features such as fingerprint or facial recognition to safeguard against accidental app installations and unauthenticated purchases. Settings may soon notify users of threats in real-time.

“PupkinStealer” A New .NET-Based Malware Steals Browser Credentials & Exfiltrate via Telegram
PupkinStealer is a C# malware that steals sensitive data, including browser credentials and desktop files, using Telegram for stealthy data exfiltration. Discovered in April 2025,