artifacts Archives

Tech Optimizer

August 31, 2026

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

Silver Fox is linked to the distribution of a backdoor malware called ValleyRAT, disguised as the legitimate QN Wallpaper adware application. Once installed, ValleyRAT provides complete control over the compromised machine. The malware uses DLL sideloading to operate under the guise of a legitimate process, bypassing security measures. It disables Windows Defender and adds itself to autorun entries, and can mark its process as critical, causing system crashes if terminated. Kaspersky has identified specific indicators of compromise (IoCs) including hashes, command-and-control servers, and associated domains. In 2026, Kaspersky recorded over 100,000 detections of ValleyRAT affecting more than 1,500 unique users, mainly in China and India.

Winsage

August 24, 2026

You don’t want this Sleepwalker backdoor on your Windows machine

Malware researcher Dominik Reichel has discovered a sophisticated Windows backdoor named Sleepwalker, which remains dormant in memory until activated by a specially crafted network packet. Sleepwalker uses a 23-instruction command language to execute tasks, including running code in memory and exfiltrating data. It activates through a proprietary activation packet that does not contain readable commands. The malware targets a VMware VMCI and disguises itself as Microsoft's dpapi.dll, mimicking its functions while redirecting calls to a non-existent file. Once it confirms its host process as ERAAgent.exe, it enters a dormant state to evade detection. Sleepwalker monitors for a specific pattern known as a magic packet to decrypt and interpret commands. Commands sent to it are encrypted with AES-256-CCM and must be read in a specific order. The backdoor includes functionalities for sending and concealing data, receiving tasks, and executing programs. Reichel has developed a toolkit to decode Sleepwalker’s bytecode and a mitigation guide for affected users. However, there are significant gaps in knowledge regarding the initial access method, victim identification, and the malware's operator.

Winsage

August 23, 2026

An ultra-rare piece of Microsoft history could be hiding on your shelf

Rare red Tetris stickers and a shirtless child hologram from Windows 95 are sought-after collectibles from Microsoft's early days. The Microsoft Entertainment Pack for Windows, launched in 1990, initially featured a sticker instead of a printed Tetris promotion due to unresolved licensing rights at the time of the first print run. The later versions incorporated the sticker into the box art. Additionally, an anti-piracy hologram from Windows 95 depicted a child without a shirt, which was later replaced with a version showing the child clothed. Both original items have become valuable to collectors.

AppWizard

August 17, 2026

Amazon Prime gets another batch of ‘free’ PC games this August

Amazon Prime subscribers can access a monthly selection of PC games, which they can claim and keep indefinitely, even after their subscription ends. The August lineup includes notable titles such as SteelRising and several others, with four games still available for claim. An Amazon Prime subscription costs R60 per month, and users must create accounts with Good Old Games (GOG), the Epic Games Store, and Legacy Games to claim certain titles. Current available games include Pyramids and Aliens: Escape Room, Airship: Kingdoms Adrift, and SteelRising, among others. Upcoming titles include Royal Romances: Forbidden Magic and Havendock.

AppWizard

August 15, 2026

Amazon Luna

Amazon Prime subscribers will have access to new games on Amazon Luna in August, including the addition of "Batman: Caped Crusader – Chronicles" to the GameNight library. The Luna Standard lineup features three games currently available: "Bluey: The Videogame," "Disney/Pixar Brave: The Video Game," and "Disney/Pixar: WALL-E." Two more games, "Assassin’s Creed Valhalla" and "Assassin’s Creed Mirage," will be released later in the month. Additionally, subscribers can claim downloadable PC games, including "Right and Down," "Hiveswap Friendsim," "Pyramids and Aliens: Escape Room," "Airship: Kingdoms Adrift," "Steelrising," "Royal Romances: Forbidden Magic," "Spray Paint Simulator," "Havendock," and "Clash: Artifacts of Chaos," throughout August.

AppWizard

August 15, 2026

Amazon Prime offers 9 free PC games to claim this month

Amazon Prime subscribers can claim a selection of free games this month, including the notable title Steelrising, an action-RPG set during a reimagined French Revolution. Players control Aegis, an automaton bodyguard, and engage in combat against mechanical forces. Other games available include Airship: Kingdoms Adrift, a tactical RPG, and various titles across platforms such as GOG, the Epic Games Store, and the Amazon Games App. The lineup includes: - Available now: - Right and Down (GOG) - Hiveswap Friendsim (GOG) - August 13: - Pyramids and Aliens: Escape Room (GOG) - Airship: Kingdoms Adrift (Epic Games Store) - Steelrising (Epic Games Store) - August 20: - Royal Romances: Forbidden Magic (3P) - Spray Paint Simulator (Amazon Games App) - August 27: - Havendock (Amazon Games App) - Clash: Artifacts of Chaos (Epic Games Store)

AppWizard

August 14, 2026

Games are more fun, and more memorable, with a notebook by your side

In digital gaming, there is a desire for the tactile experience of traditional board games, creating a balance between the complexity of video games and the physical joy of board games. Some video games inspire players to take notes, which aids in understanding gameplay and adds an analog warmth to the digital experience. Players often jot down character names, skill sets, key highlights from matches, and create sketches that reflect the excitement of gameplay. These handwritten notes, including maps and lists of in-game suspects, have become valued artifacts that connect the digital and physical realms of gaming.

Tech Optimizer

August 4, 2026

Automated PII redaction for Amazon RDS for PostgreSQL audit logs

The article discusses a serverless pipeline for creating an irreversibly redacted and queryable archive of Amazon RDS for PostgreSQL audit logs. It sanitizes sensitive information, such as Social Security numbers, credit card details, and email addresses, before storing the clean logs in Amazon S3, which can be queried using Amazon Athena. The deployment process is facilitated by a single AWS CloudFormation template. The challenge is that pgAudit logs sensitive data in cleartext to Amazon CloudWatch Logs, which poses compliance risks under regulations like GDPR and HIPAA. While CloudWatch Logs Data Protection offers reversible masking of PII, this is insufficient for compliance needs requiring permanent separation of PII from audit evidence. The proposed pipeline creates an irreversibly redacted copy stored in Amazon S3, ensuring original values cannot be restored. The deployment requires an active AWS account with specific permissions, AWS CLI v2, a compatible AWS region, and confirmation of service quotas. The CloudFormation template has four main parameters for deployment, including ProjectName, DBInstanceClass, DBAllocatedStorage, and EnvironmentType, with sensible defaults provided. Three deployment options are available: via the AWS console, AWS CLI, or a deploy script. After deployment, users can generate test data, trigger the redaction pipeline, and verify results in Athena. The process includes steps to create a PostgreSQL table, insert records with PII, run queries, and monitor the execution of the redaction pipeline. The article emphasizes that unredacted PII remains in the source CloudWatch Logs, recommending enabling CloudWatch Logs Data Protection for added security. To clean up resources and avoid charges, users must empty the S3 buckets and delete the stack. Cost considerations for the pipeline include infrastructure costs and the expense of achieving irreversibility.

Winsage

August 4, 2026

This handy free Windows update tool drops a feature Windows 11 users can live without

Windows 11 updates include security and feature updates, with recent improvements in update management. Microsoft has introduced the option to pause updates for extended periods and users can utilize WUView, a tool that consolidates installed updates into a navigable list, providing detailed information and advanced logging capabilities. WUView supports saving update history in various formats and allows filtering and excluding specific updates. The latest version of WUView will only support 64-bit systems, reflecting the trend towards 64-bit usage. Enhancements in the new version include theme selection, a new light theme named Pale Graphite, improved localization, and various updates to logging and UI elements. WUView is available on its official GitHub repository.

Winsage

August 3, 2026

Meet deGDID: Windscribe’s answer to the Windows tracker that VPNs cannot mask

Windscribe has introduced deGDID, a tool aimed at countering the Global Device Identifier (GDID), a Windows tracking mechanism that can trace user activities despite VPN usage. The GDID is a persistent identifier assigned to individual Windows installations, remaining unchanged through updates but reset during a clean reinstallation. It can link telemetry data and browsing history to a specific device, allowing Microsoft to track users across different sessions. deGDID works by modifying the hosts file and implementing firewall rules to prevent Windows from retrieving the GDID and to erase local identity artifacts. Users can download and execute the degdid.ps1 script from GitHub in PowerShell, which includes options for checking status, blocking the GDID, and reversing changes. The tool is not designed for corporate machines and may disrupt access to services like Xbox and Outlook due to its firewall rules. Windscribe warns that it cannot guarantee the complete eradication of GDID pathways or existing records held by Microsoft.