accounts Archives

Tech Optimizer

September 16, 2026

AI helps scammers build convincing antivirus renewal pages

Antivirus renewal scams often begin with messages claiming automatic subscription renewals, leading victims to counterfeit pages designed to collect personal information. These scams impersonate well-known brands and do not indicate that the sender has accessed the recipient's device. Responding to such messages can provide scammers with valuable data, including names and phone numbers, which can be sold or used for further scams. A specific scam site impersonating Avast targeted users in Belgium, falsely claiming a subscription renewal for €129.99. The site appeared polished and requested basic contact information without asking for sensitive data. It contained notes suggesting AI involvement in its creation, indicating it was a half-finished project. To identify antivirus renewal scams, individuals should verify any claimed charges directly with their bank, check subscriptions through official channels, be cautious of cancellation forms requesting phone numbers, treat follow-up calls as potential threats, and avoid installing remote access software. If engagement with a scam occurs, disconnect from the internet, remove any installed software, and change passwords. Tools like Malwarebytes Browser Guard can help block malicious sites, and Scam Guard can analyze suspicious communications.

Tech Optimizer

September 16, 2026

Best Antivirus for Windows 2026: 5 to Install, 1 to Avoid

Windows is the only desktop platform where antivirus software is essential. Microsoft has patched many vulnerabilities, but the OS still allows installations from unverified sources and connects to potentially untrustworthy networks. As of 2026, the top antivirus solutions for Windows include: - Norton 360: Best overall, with a full scan time of 13 minutes and 22 seconds, robust firewall, and up to 250 GB cloud backup. - Bitdefender: Best for older PCs, maintaining peak CPU usage at 11% and memory at 183 MB during scans. - Avast One: Best free option for Windows 11, achieving a perfect score in AV-TEST. - NordVPN Threat Protection Pro: Best for VPN users, blocking 90% of malware. - McAfee+: Best for households with multiple devices, offering unlimited coverage but is the slowest scanner. - Microsoft Defender: Best free option included with Windows, awarded Top Product by AV-TEST. Norton 360 has a 99.8% detection rate and offers a 60-day refund window. Bitdefender also has a 99.8% detection rate with low resource usage. Avast's free version is effective, while NordVPN provides integrated malware protection for existing VPN users. McAfee is suitable for large households but has slower performance. Microsoft Defender is adequate for single users practicing safe browsing but lacks multi-device support. Kaspersky is unavailable in the U.S. due to supply chain concerns.

AppWizard

September 16, 2026

Denuvo Suing Prolific Pirate, But They Don’t Seem Worried At All

Denuvo has filed a lawsuit against an individual known as "voices38" for allegedly tampering with and bypassing its anti-piracy technology, which is used in various popular PC games. The lawsuit was initiated in the U.S. Northern District Court of California, claiming violations of the Digital Millennium Copyright Act (DMCA). Denuvo describes voices38 as a "computer hacker" who has cracked numerous games, including titles like Doom: The Dark Ages and Hogwarts Legacy. Voices38 responded casually on Reddit, indicating a lack of concern for the lawsuit. Denuvo's business model relies on selling DRM solutions, and while it cannot sue for copyright infringement, it claims to be harmed by voices38's activities. The lawsuit lists several games that voices38 has allegedly cracked and marks Denuvo's first legal action against a video game pirate in the U.S. The company is also attempting to uncover voices38's true identity and may file subpoenas to gather more information. Public sentiment appears to be against Denuvo, with criticism regarding its software's impact on legitimate users.

Winsage

September 16, 2026

Microsoft built a local PC-to-PC transfer tool for Windows 11, now it’s killing it to push OneDrive-based solution

Microsoft has discontinued its PC-to-PC transfer tool for Windows 11, which allowed file transfers over Wi-Fi or LAN without using OneDrive. The company has shifted its focus to the Windows Backup solution that relies on OneDrive for file storage. Users must now restore backups linked to their Microsoft accounts and retrieve synced files via OneDrive, which has a 5GB storage limit for free accounts. The PC-to-PC transfer tool, tested in July 2025, enabled users to transfer documents, photos, videos, and user settings locally, but did not support the transfer of saved passwords, credentials, or installed applications.

Tech Optimizer

September 16, 2026

Chinese state security authorities warn outdated antivirus software can expose systems to cyberattack

Chinese state security officials have emphasized the necessity for organizations to keep antivirus software and virus databases updated to prevent data breaches and unauthorized access. The Ministry of State Security (MSS) highlighted that neglecting these updates has led to significant security incidents, including the theft of sensitive data and cyberattacks on work email accounts. Specific cases include a research institute that suffered a breach due to unpatched vulnerabilities, an institution exposed to cyberattacks for not enforcing regular virus scans, and a company that operated a poorly protected server with outdated antivirus software. Contributing factors to delayed updates include a lack of awareness about cybersecurity risks, insufficient network maintenance, and unclear responsibilities within organizations. Under China's Cybersecurity Law, network operators must implement measures to protect against cybersecurity threats. The MSS advises organizations to enhance their cybersecurity measures by adopting technologies like automated risk alerts and intelligent behavioral analysis.

AppWizard

September 15, 2026

Active Exploitation Alert: Threat Actors Abuse Anthropic Claude AI to Extract Secrets from 1.8M Android Apps in Major Credential Theft Campaign

Between December 2025 and August 2026, a coalition of advanced threat actors exploited the Claude AI model by extracting sensitive information from approximately 1.8 million Android applications. The operation involved groups such as ShinyHunters, Midnight Blizzard (APT29/Nobelium), and the Chinese-speaking entity GTG-10007. They automated the mass download, decompilation, and analysis of Android APKs for hardcoded credentials, API keys, and authentication tokens, leading to extensive credential theft and breaches across various sectors. The attack utilized a distributed pipeline on ten AWS EC2 instances to download APKs, which were then scanned using TruffleHog. Verified secrets were organized and routed in real-time to a private Telegram group for operational deployment. Over 2,100 Azure AD authentication tokens were extracted from more than 40 Microsoft tenants within 34 hours. The operation also included a carding component where stolen payment card data was sold. The tactics employed aligned with several MITRE ATT&CK techniques, including file discovery, unsecured credentials, valid accounts, phishing, and exploitation of remote services. ShinyHunters gained administrative control over targeted environments rapidly, leading to bulk data theft affecting over 200 organizations. Midnight Blizzard automated malware creation and phishing campaigns, targeting government and defense entities. GTG-10007 used Claude for coordinated offensive operations, discovering zero-day vulnerabilities and delivering exploits. Initially, the campaign targeted a broad range of Android APKs but later focused on organizations with valuable credentials across various sectors, including government, technology, and healthcare. Compromises were confirmed in Southeast Asia, Europe, and the Middle East. Organizations are advised to audit Android applications for hardcoded secrets, monitor API key usage, and implement robust security practices to mitigate risks.

Winsage

September 14, 2026

September Patch Tuesday: 963 CVEs, 2 exploited flaws, 1 message

Microsoft has addressed 24 Common Vulnerabilities and Exposures (CVEs) in its developer tooling, with 23 classified as important and one as critical. The critical entry, CVE-2026-34182, has a CVSS score of 9.1 and affects CMS AuthEnvelopedData processing in Visual Studio versions 2017 to 2022. The highest-scoring entry is CVE-2026-81376, a security feature bypass in Visual Studio Code, with a CVSS score of 9.6. Visual Studio Code and its Copilot extensions account for ten of the CVEs, primarily related to security feature bypasses. The .NET framework has updates for SDK versions 8.0.131, 8.0.425, 9.0.121, 9.0.318, 10.0.112, and 10.0.401. Monthly rollups for the .NET Framework have been released for various operating systems, including Windows Server 2012 and Windows 10 versions. Adobe has released 963 CVEs, with 55 flagged by Microsoft as high risk, primarily in printing and fonts.

Winsage

September 13, 2026

4 classic Windows tools that did things Windows 11 still can’t

Several utilities have been left out of Windows 11, including: - Windows Easy Transfer: A tool that allowed users to transfer files and settings between PCs using a USB flash drive. It was not included in Windows 10 and remains absent in Windows 11. - Windows Media Center: An application that transformed PCs into media hubs for watching movies, listening to music, and recording television shows. It did not transition to Windows 10 and is also missing in Windows 11. - Taskbar Toolbars: A feature that enabled users to pin folders to the taskbar for quick access. This feature is not present in Windows 11. - Steps Recorder: A troubleshooting tool that recorded screen actions and documented steps taken during processes. Although initially available in Windows 11, it has been deprecated. These omissions have disappointed users who valued the functionality these tools provided.

AppWizard

September 12, 2026

New Android Ransomware Records Screens, Steals OTPs and Secretly Takes Photos of Victims

A newly identified malware threat in the Android ecosystem, named Mantax Otax, combines ransomware with espionage capabilities. It targets users who install applications from untrustworthy sources, often through messaging apps or phishing attempts. The malware is linked to Indonesian cybercriminals and can steal sensitive information such as SMS one-time passwords, chat histories, and lock-screen PINs, facilitating account takeovers. Mantax Otax requests device-administrator rights and seeks access to SMS messages, contacts, and media files. It encrypts files on devices running Android 9 and earlier using AES encryption and demands a ransom for recovery. Although the impact is reduced on Android 10 and later due to Scoped Storage, the malware still poses significant surveillance risks. The malware collects extensive sensitive data, including contacts, call logs, and location data, and targets multi-factor authentication codes. It uses a deceptive system-lock overlay to capture PINs and has introduced features like WebSocket communications and disruptive pop-ups in its second iteration. Users are advised to be cautious when installing applications, avoid unsolicited APKs, and reject permissions that do not align with an app's purpose. In case of suspicious activity, users should disconnect from networks and seek help before entering sensitive information. Organizations should monitor for signs of this malware on managed devices.

AppWizard

September 12, 2026

Android Users Can Now Share Their Passkeys In Just A Few Steps

Ditching passwords for passkeys has become a more secure option, but these keys are often tied to a single device, posing challenges for cross-platform usage. Google has improved the process for Android users to share and transfer passkeys, allowing easier transitions between password management tools like 1Password and Bitwarden. Previously, transferring passkeys required creating new keys, but now users can move both passwords and passkeys through a secure mechanism within Android. This feature supports popular tools such as 1Password, Bitwarden, Google Password Manager, and Dashlane. Users can transfer passkeys to preferred mobile password managers, facilitating access across multiple devices. The transfer feature is valuable for migrating passkeys between applications, enhancing user experience and security as more individuals adopt passkeys.