NewApp Digest
search bot

application

Hackers Disguise CHOSEN BRICK Malware as AI Apps, Antivirus Software and MRI Results
Tech Optimizer
September 16, 2026

Hackers Disguise CHOSEN BRICK Malware as AI Apps, Antivirus Software and MRI Results

Iranian state-affiliated cyber actors are targeting dissidents, activists, and journalists using fake AI applications, counterfeit antivirus tools, and fabricated MRI scan results, primarily through a spyware family known as CHOSEN BRICK, which is designed for Windows systems. This campaign has been active since at least 2025 and affects individuals globally, including in the UK, US, and Netherlands. The malware establishes persistence via the Windows Registry Run key and communicates through Telegram, utilizing unique Bot IDs for each victim. CHOSEN BRICK is capable of extensive data collection, including capturing screenshots, recording audio, and stealing email content. Personal information from victims has been found on pro-Iranian leak sites, increasing harassment risks. Security measures should include monitoring for suspicious Registry entries and unusual communications, while users are advised to avoid unsolicited software installations and keep their systems updated. The FBI refers to this malware family as HEAVYGRAM.
Windows Server 2022 Nears End of Mainstream Support
Winsage
September 16, 2026

Windows Server 2022 Nears End of Mainstream Support

Organizations using Windows Server 2022 will lose mainstream support on October 13, 2026, although security updates will continue through extended support until October 2031. Customers are encouraged to plan for an upgrade to Windows Server 2025 to avoid potential security vulnerabilities and complications in future migrations. Microsoft recommends early evaluation and testing of Windows Server 2025 to ensure compatibility and smooth transition. Additionally, support for the Azure Edition’s hotpatching capability has been extended to October 2027, providing some customers more time to strategize their migration. However, remaining on Windows Server 2022 means missing out on new features and enhancements.
How to manually update Android Auto (and what it might mean if you can't)
AppWizard
September 16, 2026

How to manually update Android Auto (and what it might mean if you can’t)

The Android Auto application is available on the Google Play Store and relies on smartphones for its features. It receives updates automatically, but users can manually check for updates if needed. Android 9.0 or higher is required for the latest updates. To force an update, users can reset the app by clearing its storage, which does not affect other apps. If issues persist, users can revert to the original version of Android Auto by uninstalling updates.
This Mac Antivirus Is Half Price, and It Now Covers Your iPhone Too
Tech Optimizer
September 16, 2026

This Mac Antivirus Is Half Price, and It Now Covers Your iPhone Too

Intego has reduced the price of its top-tier Mac security plan, the Intego ONE “Complete” plan, to half its usual cost during the back-to-school season. The plan, which covers one Mac and one iPhone, is now priced at .99 for a year, down from .99. A two-year subscription is available for .98, reduced from 9.99, equating to .74 per month. The promotion does not require a discount code, as the price is automatically applied at checkout, and it includes a 30-day money-back guarantee, valid until September 30. The “Complete” plan features Intego VPN and an iPhone app, providing comprehensive protection even when the laptop is not in use. The VPN encrypts internet traffic and conceals the user's IP address, while the iPhone app audits device settings and includes a Wi-Fi security check. Intego acknowledges that macOS has built-in security features and positions its antivirus as a complementary layer. The plan is particularly beneficial for users who travel frequently or connect to public Wi-Fi.
Google rolling out Android 17 QPR1 for Pixel
AppWizard
September 15, 2026

Google rolling out Android 17 QPR1 for Pixel

Android 17 QPR1 is rolling out for Google Pixel devices, coinciding with the September 2026 Feature Drop and security patch. Key updates include enhanced blur effects in the system UI, a redesigned system media player with a Material 3 carousel interface, updated Quick Settings with new animations and features, and improved app management options. The rollout includes Pixel 6, 7, and 8 series devices. Users can check for the update in Settings > System > System update. The Android Beta Program will continue for future testing, and users on the beta must opt out to receive the stable version without wiping their devices.
Iranian spies hit Windows machines with Chosen Brick data-stealing malware
Winsage
September 15, 2026

Iranian spies hit Windows machines with Chosen Brick data-stealing malware

Iranian state cyber actors are targeting individuals through popular messaging applications, using surveillance and data-stealing malware known as "Chosen Brick," which has been in use since at least 2025. This malware is designed for Windows systems and enables the theft of personal data, allowing Iranian spies to monitor perceived threats such as dissidents, activists, and journalists. The attacks typically begin with messages sent via WhatsApp or Telegram, impersonating trusted contacts. Attackers conduct extensive research on their targets to craft convincing messages that encourage victims to download malicious files disguised as legitimate applications. Once executed, Chosen Brick operates stealthily, evading detection and establishing a connection for command-and-control communications. It can enumerate processes, capture screen and audio content, extract sensitive information, and even wipe infected systems. Organizations suspecting compromise are advised to engage IT providers for investigations and to inform staff about potential risks. Recent alerts follow cyberattacks on water and energy sectors linked to Iran, with ongoing concerns about the implications for cybersecurity amid escalating military tensions. Additionally, five US agencies have reported that attackers are using AI-generated scripts to exploit vulnerabilities in critical infrastructure systems.
Search