Technology
Beware of a new Android threat targeting your photos and texts without even opening them
What is malware?
Kurt ‘CyberGuy’ Knutsson discusses how to protect yourself from malware and ransomware.
Another day, another malware threat is trying to get your data.
Well, brace yourself, because there’s a virus that’s been around for a while that’s out there that’s gotten even worse.
It’s called XLoader, and it’s after your photos and texts on your Android device. Yes, you heard that right.
Your precious memories and messages are in danger of being snatched by this malicious software.
CLICK TO GET KURT’S FREE CYBERGUY NEWSLETTER WITH SECURITY ALERTS, QUICK VIDEO TIPS, TECH REVIEWS, AND EASY HOW-TO’S TO MAKE YOU SMARTER
Android phone. (Kurt “CyberGuy” Knutsson)
What is malware?
Malware is technically any software that’s designed to disrupt the system of its intended target. With malware, the person or entity behind the attack can gain access to your data, leak sensitive information, block you out and take control of other aspects of your privacy and security.
MORE: TIPS TO FOLLOW FROM ONE INCREDIBLY COSTLY CONVERSATION WITH CYBERCROOKS
What is the XLoader malware strain?
According to McAfee, the XLoader malware — also known as MoqHao — has been around since 2015, targeting Android users in the U.S., Europe and Asia. Once it’s on your device (which it’s gotten much better at doing), it’s able to run in the background, taking your sensitive data, whether it be photos, text messages, contact lists, hardware details and more.
Hacker typing on a laptop. (Kurt “CyberGuy” Knutsson )
MORE: BEWARE OF NEW ANDROID MALWARE HIDING IN POPULAR APPS
How does XLoader get onto your device?
One of the reasons XLoader is such a major threat is because, unlike its previous strains and other malware, it can get on your device that much easier than before. Generally, malware gets onto your device via a phishing scam. However, because people are more skeptical about opening or clicking on suspicious files or links — and because there are integrated apps that help warn you of these files — it’s more difficult for these traditional phishing scams to be effective, but XLoader has gotten clever.
First, you receive a text from an unknown sender
Like ordinary malware, XLoader often spreads through malicious links sent via text messages. This is a unique type of phishing scam known as “smishing.” However, scammers are aware that most people don’t click on texts from people they don’t know. So, another way they attempt to be successful at this is by first gaining access to a phone number that has your number in their contacts, and they target you that way. You won’t think twice when you receive a text from someone you know. Once it gets past this step, XLoader can get onto your Android device in two ways:
1: You click on the link which leads to downloading the APK file
Next, the unsuspecting victim would see a link in the text message. The link may look less suspicious than typical malware links because they are typically shortened and look less spammy and more legitimate, like a link that someone you know would send you.
A RANSOMWARE REALITY CHECK AS US IS A TOP TARGET OF ATTACKS
If you end up clicking on this link, it will direct you to download an Android APK file (standard file format for Android), which are files that are used to sideload apps outside the official Google Play Store. This method, therefore, bypasses Google’s security measures and increases the risk of malware infections. It can happen in a matter of seconds, and if you click “install,” then the XLoader malware will be on your phone before you know it.
Once the malicious APK is downloaded and installed, XLoader can launch on its own without any further action from the user, silently running in the background and performing its malicious activities.
2: You launch the app yourself, but fall for a Google Chrome decoy
If you decide you want to launch the app directly on your own, XLoader is already there waiting for you by impersonating Google Chrome. When you click “launch,” the XLoader malware displays a very familiar-looking Chrome pop-up that will first ask you to grant it permissions by clicking “allow” or “deny.” If you click “Allow” (thinking it’ll lead you to the “app”), you’ll be unknowingly giving it access to your SMS.
Afterward, it will even display a pop-up that says, “Choose Chrome to prevent spam,” giving you two options — your default SMS app or Chrome. Because these decoy pop-ups replicate Google’s style completely, it gives the user a false sense of security that it can be trusted.
Once it’s there, it can grab your photos, texts and other sensitive data on your Android, most of the time, without you even realizing it.
Google Chrome decoy. (McAfee)
6 ways to protect your Android from XLoader and other malware
Now that you know what XLoader is and how it gets onto your Android device, be sure not to click on any links in text messages that are unusual. If the text came from someone in your contacts, reach out to them directly (via phone call or messaging on another app) and confirm that they meant to send you it before clicking on it. Here are some other ways to protect yourself from XLoader and other malware attempts.
1. Avoid sideloading apps and shortened URLs: Refrain from sideloading apps (installing apps from unofficial sources) and clicking on shortened URLs in messages, as these are common vectors for malware distribution.
2. Be careful granting permissions: Exercise caution when granting permissions to apps. The question is whether an app truly needs access to certain device functions or data.
3. Limit the apps you have on your phone: Sometimes, having a lot of apps on your phone can make it easy for you to be exposed to malware. These apps can let in malicious code over time, and the more apps you have to keep track of and update, the more likely your Android will be vulnerable.
4. Only download reputable apps: Additionally, when you download apps, make sure they are from reliable and legitimate developers. Check reviews and do some research before just hitting “install.”
5. Don’t neglect software updates: Your phone has a way of keeping itself safe with software and security updates. Don’t forget to do them.
6. Have good antivirus software on all your devices: The best way to protect yourself from malware like this Xloader virus is to install antivirus protection on all your devices. Having antivirus software on your devices will make sure you are stopped from clicking on any potential malicious links that may install malware on your devices, allowing hackers to gain access to your personal information. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android & iOS devices.
Kurt’s key takeaways
Malware is, unfortunately, inevitable. As we become more educated about how to prevent these threats, the hackers creating them are always working on ways to outsmart us, while the malware itself becomes more sophisticated. This new strain of XLoader is just one example of that. And, while it’s currently focused on targeting Android users, it’ll likely be just a matter of time before it begins targeting Macs and other devices.
The best way to protect yourself, therefore, is to stay up-to-date with the latest cybersecurity trends and ensure your devices have good antivirus protection. Additionally, continue best practices for protecting yourself from suspicious links and downloads.
How stressed are you these days with malware like XLoader or other types of viruses trying to steal your data? Should more be done to stop these crooks? Let us know by writing us at Cyberguy.com/Contact
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter
Ask Kurt a question or let us know what stories you’d like us to cover.
Answers to the most asked CyberGuy questions:
Copyright 2024 CyberGuy.com. All rights reserved.
NEWYou can now listen to Fox News articles!
Just about every day, we receive emails from readers who have encountered new scams. Many involve cryptocurrency. The pattern keeps repeating. Someone receives a message that feels urgent, emotional or exciting. The person on the other end sounds confident and persuasive. Before long, the victim is being asked to send money through cryptocurrency. Once the money is sent, it often disappears forever.
Cryptocurrency appeals to scammers for a simple reason. Transactions move quickly, often cross international borders and usually cannot be reversed once completed. That combination makes crypto payments especially attractive to criminals.
Kate recently wrote to us with a great question.
“Could you do an article that illustrates the scripts used by scammers to lure people to send money using cryptocurrency. Those scripts must be very convincing to get so many reasonably intelligent people to send money. Maybe five or six examples of the scripts, so people, especially seniors, will know what to watch out for.”
Kate is absolutely right. These scripts are convincing because scammers practice them constantly. They use psychology, urgency and emotion to push people toward quick decisions.
FAKE GOOGLE GEMINI AI PUSHES ‘GOOGLE COIN’ CRYPTO SCAM
Crypto scammers use polished scripts built on urgency, trust and emotion to pressure victims into sending irreversible payments. (gpointstudio/Getty Images)
Let’s break down some of the most common crypto scam scripts, so you know what they sound like before they reach your inbox or phone.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
The investment opportunity script
This script often begins with a friendly introduction through social media, email or even a text message.
Example script:
“Hi, I work with a private investment group that trades cryptocurrency. We’ve helped many people earn steady returns. If you invest $500 today, you could earn $5,000 within weeks. I can show you proof of other investors’ success.”
The scammer may send fake screenshots of profits. Some will even allow a small withdrawal early on to build trust. Eventually, they push the victim to send larger deposits. Once the larger transfer is sent, the account suddenly stops responding.
The romance crypto script
This scam often starts with a simple message on a dating app, Facebook or Instagram. The first contact is friendly and low-pressure.
Example initial script:
“Hi, insert name here, I hope you don’t mind me saying hello. Your profile caught my attention, and you seem like a very kind person. How has your day been?”
After a few days of conversation, the scammer begins sharing details about their life. They often claim to work overseas as an engineer, doctor or business owner. Eventually, they mention cryptocurrency trading as something they do on the side.
Later message in the script:
“I have been doing some short-term crypto trading after work. It has helped me save a lot faster. If you are interested, I can show you the platform I use. It is very easy to start with a small amount.”
From there, the scammer guides the victim to a fake trading site or asks them to transfer cryptocurrency to a wallet they control. At first, the account may show fake profits. The victim believes the investment is working and sends more money. Eventually, the victim cannot withdraw any money.
MALICIOUS MAC EXTENSIONS STEAL CRYPTO WALLETS AND PASSWORDS
From romance schemes to fake government threats, scammers often follow repeatable crypto scripts designed to sound convincing. Knowing the pattern can help you stop the fraud early. (Nhac NGUYEN / AFP via Getty Images)
The government impersonation script
Scammers often pretend to represent government agencies or law enforcement.
Example script:
“This is an urgent notice regarding your tax account. Your Social Security number has been linked to suspicious activity. To prevent legal action, you must verify your identity and pay the outstanding balance today using cryptocurrency.”
Government agencies do not demand payment through cryptocurrency. The goal is to scare you into acting quickly without checking the facts.
The tech support emergency script
This scam often begins with a pop-up warning or an unexpected phone call.
Example script:
“Your computer has been compromised by hackers. Your bank information may be at risk. To secure your system, we need you to transfer funds temporarily into a protected cryptocurrency wallet.“
The scammer claims the funds will be returned once the system is secure. In reality, the transfer moves the money directly to the criminal.
The crypto giveaway script
This scam frequently appears on social media or video platforms.
Example script:
“We are celebrating a new crypto launch. Send 0.1 Bitcoin to this wallet, and we will immediately send back double the amount.”
The message may appear to come from a well-known company or public figure. The wallet address belongs to the scammer. Anyone who sends funds receives nothing in return.
The fake recovery service script
This scam targets people who have already lost money.
Example script:
“We specialize in recovering stolen cryptocurrency. Our investigators located the wallet that received your funds. To begin the recovery process, we require a small crypto payment to unlock the legal tracing tools.”
The victim believes they are hiring professionals to recover their money. Instead, they are being scammed again.
Why these scripts work so well
These scams succeed because they exploit human behavior. First, they create urgency. Victims feel pressured to act quickly.
Second, they create trust. The scammer may sound friendly or sympathetic.
Third, they promise rewards. Investment scams offer profits that feel life-changing.
Finally, cryptocurrency adds confusion. Many people are still learning how it works. Criminals take advantage of that uncertainty.
Understanding these scripts is the first step to protecting yourself. Once you recognize the patterns scammers use, it becomes much easier to stop the conversation before money is involved.
How to protect yourself from crypto scams
Crypto scammers rely on urgency, trust and confusion to pressure victims into sending money. These practical steps can help you recognize warning signs and avoid costly mistakes.
1 CLICK COST A FATHER $4 MILLION IN BITCOIN TO VISHING SCAMMERS
Criminals favor cryptocurrency because transactions move fast, cross borders easily and usually cannot be reversed. That makes crypto a powerful tool for scammers. (Mario Tama/Getty Images)
1) Slow down when money is involved
Scammers depend on urgency to push victims into fast decisions. If someone pressures you to send money immediately, treat it as a warning sign. Pause the conversation and verify the situation independently. Contact the company, agency or person through a known phone number or official website. Taking even a few minutes to step back can stop a scam before money leaves your account.
2) Never send cryptocurrency to someone you do not know
Cryptocurrency transactions work very differently from credit cards or bank transfers. Once funds are sent, they usually cannot be reversed. Scammers prefer crypto because it moves quickly and often crosses international borders. If someone asks for payment through Bitcoin, Ethereum or another digital currency, assume the request is suspicious until proven otherwise.
3) Verify investment opportunities independently
Many crypto scams promise fast profits or guaranteed returns. Legitimate investments never guarantee profits. Before investing, search the company name, website and contact information online. Look for warnings from regulators or consumer protection agencies. If you cannot find reliable information about the company, that is a major red flag.
4) Use strong antivirus software on your devices
Scammers frequently use phishing links, fake websites and malicious downloads to trick victims. Strong antivirus software can help detect these threats before they cause damage. Strong antivirus software can warn you about suspicious websites, block malicious downloads and help stop phishing attempts that try to steal your financial information. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.
5) Reduce the personal information scammers can find online
Scammers often research their targets before sending messages. They may gather details from public records, social media or data broker websites. Limiting the amount of personal information available online can make it harder for criminals to craft convincing messages. Removing your data from people search sites with a data removal service can reduce the chances of becoming a target. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
6) Be cautious with online relationships
Romance scams often begin with friendly messages on dating apps or social media. Over time, the scammer builds trust and eventually introduces a crypto investment opportunity. If someone you have never met begins discussing cryptocurrency investments or asks you to move money, take a step back. Real relationships do not require financial transfers to strangers.
7) Never trust screenshots or profit dashboards
Crypto scammers often show screenshots of trading accounts that appear to generate large profits. These images are easy to fake or are displayed on fraudulent websites controlled by the scammer. Even if a platform shows profits, it does not mean the money exists. If you cannot withdraw funds easily through a verified exchange, the investment may be fake.
8) Watch for requests to move conversations off the platform
Many scams begin on social media, dating apps or messaging platforms. After the first contact, scammers often ask victims to continue the conversation on WhatsApp, Telegram or another private messaging app. Moving the conversation helps them avoid detection by the original platform. If someone quickly asks you to switch apps, treat it as a warning sign.
9) Talk to someone you trust before sending money
Scammers often isolate their victims and discourage them from discussing the situation with friends or family. Before sending cryptocurrency or making a large investment, pause and talk to someone you trust. A second opinion can often spot warning signs that are easy to miss when emotions are involved.
What to do if you already sent cryptocurrency to a scammer
If you believe you sent cryptocurrency to a scammer, act quickly. Contact the exchange or platform you used to send the funds and report the transaction immediately. Some exchanges may be able to flag the receiving wallet and help investigators track suspicious activity.
You should also report the scam to the FTC at reportfraud.ftc.gov and notify your local law enforcement agency. If the scam began on a social media site, dating app or messaging platform, report the account there as well so it can be investigated and removed.
While recovering funds can be difficult, reporting the incident can help authorities identify larger fraud networks and potentially prevent others from becoming victims.
Kurt’s key takeaways
Cryptocurrency scams continue to grow because the scripts are polished and carefully tested. The criminals behind them understand human psychology. They know when to apply pressure, when to build trust and when to promise rewards. Recognizing these patterns is one of the most powerful ways to stop them. When you know the script, the scam becomes much easier to spot.
Have you ever received a message that tried to convince you to send cryptocurrency, and did the script almost sound believable? Let us know by writing to us at Cyberguy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
As if there weren’t already enough devices listening in on everything being said in your home, Prego, the pasta and pizza sauce brand, is releasing a device designed to record everything said around the dinner table for posterity. The Connection Keeper, which looks like an oversized pasta jar lid, was created in collaboration with StoryCorps, the nonprofit organization focused on preserving the stories of Americans in a collection housed at the Library of Congress’ American Folklife Center. There’s no AI, Wi-Fi, or Bluetooth, but you can optionally upload recordings to StoryCorps’ website to make them easier to share with family.
Prego says the goal of the device is to encourage families to make memories through conversation during dinner instead of staring at their phones — but only for a small number of families. The company is only planning to make less than 100 of them. The Connection Keeper will be available for purchase online starting on April 27th for $20 as part of a bundle that includes the device, a jar of Prego sauce, spaghetti noodles, and a deck of cards featuring conversation prompts and ideas.
Using the device is as easy as plopping the Connection Keeper down in the middle of everyone at the table and pressing one button to start recording. Using a pair of microphones, it captures CD-quality audio to a 16GB microSD card for up to eight hours when fully charged.
When dinner’s over, the recordings can be transferred to a computer over USB-C and then uploaded to a dedicated microsite created by StoryCorps where they’re preserved and accessible only by the uploader, unless they choose to share them with other StoryCorps users or the general public. You even have the option to archive them within the Library of Congress, which makes them public automatically, so hopefully your family talks about more than just stealing brainrots.
The recordings can be accessed on a smartphone through the StoryCorps app, but Prego intentionally left phones out of the rest of the process to discourage their use at the table. It’s also why the Connection Keeper lacks a screen. The goal was to minimize interactions with the device so family members instead focused on talking with each other.
NEWYou can now listen to Fox News articles!
BMW Group has spent years testing automation, but this latest move feels different. Instead of robotic arms locked in cages, the company is now using humanoid robots that move through factories more like people. After a successful pilot in Spartanburg, South Carolina, BMW is bringing that same idea into its Leipzig, Germany, factory, where it is testing robots in real production environments. This time, it is partnering with Hexagon Robotics to introduce a new generation of AI-powered machines. Unlike many robot demos you see online, this one is already being tested inside a real production environment.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
CHINESE ROBOT BREAKS HUMAN WORLD RECORD IN BEIJING HALF-MARATHON
BMW’s new AI-driven robots are now operating inside active factories, marking a shift from traditional automation to flexible, human-like systems. (Christof Rührmair/picture alliance via Getty Images)
How BMW’s humanoid robot pilot built over 30,000 vehicles
BMW’s earlier pilot used Figure 02 humanoid robots for a very specific task. They handled the precise positioning of sheet metal for welding on the BMW X3 production line. That task may seem small, but it plays a key role in keeping production moving smoothly. Precision work like this can easily slow things down or create bottlenecks. According to BMW, those robots helped contribute to building more than 30,000 vehicles. Because of that success, the company now feels confident about expanding the concept. Instead of limiting testing to one plant, BMW is moving forward with its iFACTORY initiative in Leipzig, where EV production is already a major focus.
BMW’s new AI humanoid robots for EV factories
The new robots, called AEON, come from Hexagon Robotics. They are designed to work inside active factory environments without constant human direction. They rely on AI-based motion control, which helps them move through complex spaces. At the same time, built-in sensors allow them to understand their surroundings in real time. Because of that, they can adjust their actions on the fly instead of following fixed instructions. Hexagon refers to this as “Physical AI.” In simple terms, the robot can make decisions based on what it sees around it. As a result, the robot does not stop when something unexpected happens. Instead, it adapts and keeps working. That marks a clear shift from traditional factory automation.
Why BMW is investing in humanoid robots now
BMW executives have made it clear that this is not about replacing people overnight. Instead, the goal is to test what actually works in real production environments. Michael Nikolaides, who oversees BMW’s production network, says these pilot programs help the company refine how AI-powered robots learn on the job. He goes on to point to a broader vision, saying: “Digitalization improves the competitiveness of our production, here in Europe and worldwide. The symbiosis of engineering expertise and artificial intelligence opens up entirely new possibilities in production.” There is also a practical reason for the humanoid design. Factories are already built for human workers. Because of that, a robot that can use the same spaces and tools is much easier to integrate than one that requires a complete redesign.
HUMANOID ROBOTS HIT MASS PRODUCTION IN CHINA
After a successful U.S. pilot, BMW is deploying humanoid robots in Leipzig to improve efficiency and adaptability in electric vehicle manufacturing. (Christof Rührmair/picture alliance via Getty Images)
How humanoid robots could transform factory work
For years, humanoid robots felt more like something you saw in those social media demo videos than something you would trust on a real factory floor. Yes, they looked impressive, but they struggled in real environments. That is starting to change. Factories are still unpredictable. Parts do not always arrive in the exact same position. Workers move around constantly, and tools and materials shift throughout the day. Because of this, traditional robots often struggle since they rely on tightly controlled conditions. AI-powered humanoid robots can handle that kind of variability. They move around people and equipment without stopping. They adjust when parts are slightly off, and they work in spaces built for human workers. That level of flexibility is what sets this new wave of AI-powered robotics apart from earlier forms of automation.
What this means to you
Even if you never step inside a factory, this shift still matters. For one, it could change how cars are built, whether they are electric or gas. When production speeds up, costs can come down over time, which could affect what you pay for your next vehicle. At the same time, factory jobs are likely to change. Some repetitive or physically demanding work may move to robots. In many cases, that means people shift into roles focused on oversight, maintenance or more skilled tasks. Step back for a second, and you can see this is a sign of where AI is headed next. It is no longer limited to apps on your phone or software on your computer. Now, it is starting to show up in the physical world in ways you can actually see and interact with.
Take my quiz: How safe is your online security?
Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com
HOME ROBOT COOKS, CLEANS AND ORGANIZES YOUR LIFE
BMW is expanding its humanoid robot program into a German EV factory, testing AI-powered machines designed to work alongside humans in real production environments. (Christof Rührmair/picture alliance via Getty Images)
Kurt’s key takeaways
BMW is not the only company testing humanoid robots, but it is one of the first to bring them into real production environments. That is a big shift from the testing phase most of us are used to seeing. The fact that these robots are already helping build tens of thousands of vehicles shows that this is moving beyond early trials. It is starting to become part of how factories actually run. Where this goes next is still an open question. If the technology keeps improving, you could see more of these robots show up in factories and warehouses over time.
So here is the bigger question. How do you feel about humanoid robots working alongside people in factories? Would you trust them to help build the car you drive? Let us know by writing to us at Cyberguy.com
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
-
Politics1 minute agoSoros-linked dark money network fuels Virginia redistricting push backed by national Democrats
-
Health7 minutes agoDeaths from one type of cancer are surging among younger adults without college degrees
-
Sports13 minutes agoStephen A. Smith makes brutal gaffe while talking about the Golden State Warriors
-
Technology19 minutes ago6 crypto scam scripts criminals use to steal your money
-
Business25 minutes agoTim Cook steps back as Apple appoints hardware chief as new CEO
-
Entertainment31 minutes agoEddie Murphy’s son and Martin Lawrence’s daughter welcome first child: ‘That baby gonna be funny!’
-
Lifestyle37 minutes agoBoF and Marriott Luxury Group Host the Luxury Leaders Salon
-
Politics43 minutes agoGovernor’s race wildly unpredictable two weeks before Californians receive ballots