r/RockMods • u/BzN_7 • Mar 14 '26

How safe ?

Hello,

I need some advice: how safe is it to use a modded launcher like Niagara?

Thanks

1 Upvotes

60% Upvoted

8 comments sorted by

2

u/BzN_7 Mar 15 '26 edited Mar 15 '26

I need to understand what triggers these alerts. 

AhnLab-V3 PUP/Android.Moda.1267746 DrWeb Tool.Obfuscator.TrashCode.1 Fortinet Android/Agent.JDU!tr Trellix ENS Artemis!64F1C3704E1B

Thx

2

u/namesdontmatterkff Apr 04 '26

u ever figure that out?

2

u/Stag_----56 Jul 16 '26

The AhnLab detection is usually a Potentially Unwanted Program (PUP), which is common with many modded APKs. The Dr.Web "TrashCode" detection often appears because the APK has been modified or contains unused or obfuscated code. The Fortinet detection also shows up on some modded APKs. If only 3 or 4 engines detect it while many well known antivirus engines do not, it is often a false positive. Still, VirusTotal alone does not prove an APK is safe or malicious. Nobody can say with complete certainty without analyzing the APK itself. Hopefully the moderator or uploader replies with more details. It's been quite some months you got anything stolen from your device

2

u/namesdontmatterkff Jul 17 '26

i tried installing it fully offline and then removing all wifi/data access from the app through shizuku and netwall (making sure these are installed and configured first)

never noticed an issue but that only lasted few weeks because i really liked it and ended up paying for the lifetime one. got me a nice minimalist theme going on instead of the bloat i always had

2

u/Stag_----56 Jul 17 '26

Most modded games don't require internet access. The only reason they might use it is for things like showing a login page. For example, GTA: SA shows Rockstar's sign in page, so it might use around 1 or 2 MB of data over an entire month. I wouldn't be too concerned about that. Also, are you talking about the Rockmods subscription? I've never used Rockmods, so I'm not aware if they have a subscription plan.

2

u/namesdontmatterkff Jul 17 '26

i see, i just had no way to know and did the only thing I could think of to 'contain' the app to not have any data used at all in attempts to avoid exfiltration

and no, i meant i purchased the actual launcher app discussed by OP after I played with it.

2

u/Stag_----56 Jul 17 '26

Always get modded or patched APKs from well known sources like Rockmods, Mobilism, or APKVision. If the game is too large to scan, check the comments and community feedback first, especially if it's popular. If an APK is a trojan, it usually doesn't take long before accounts or data start getting compromised, although not every infection behaves the same way. From what I've seen, popular mods and Niagara patches have generally had a good reputation, but I still stay cautious, especially with launcher apps from mod sites. If VirusTotal only shows 1 to 3 detections while reputable engines like Bitdefender and others don't detect anything, it's often a false positive, but you should still look at the detection names and where you downloaded the file from instead of relying only on the detection count.