attacks Archives

AppWizard

April 6, 2026

Dangerous “NoVoice” malware found in over 50 Play Store apps that were installed 2.3 million times

A new malware threat called "NoVoice" has been found in over 50 applications on the Google Play Store, with 2.3 million installations on Android devices. Discovered by McAfee, this malware is hidden in seemingly harmless apps like system cleaners, games, and image galleries. It exploits Android vulnerabilities to gain root access, potentially allowing attackers to steal sensitive information and manipulate applications without user consent. In some cases, it may persist even after a factory reset. Google has stated that Android devices updated since May 2021 are protected against this threat and that Google Play Protect actively removes malicious apps and blocks new installations. The malware was not able to infect devices in Beijing and Shenzhen, suggesting the attackers may be avoiding local law enforcement. One identified app carrying the NoVoice payload is SwiftClean, developed by Biodun Popoola. The malware operates using a silent audio file, executing its code without user detection. Users are advised to download apps only from the Google Play Store and keep their devices updated.

Winsage

April 6, 2026

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit

Exploit code for a Windows privilege escalation vulnerability, named BlueHammer, has been released, allowing attackers to gain SYSTEM or elevated administrator permissions. This zero-day vulnerability was disclosed by a researcher, Chaotic Eclipse, who expressed frustration with Microsoft's handling of the issue. The exploit combines a time-of-check to time-of-use (TOCTOU) issue with path confusion, granting local attackers access to the Security Account Manager (SAM) database, which contains password hashes for local accounts. While the exploit is confirmed to work, it has been found unsuccessful on Windows Server due to bugs that hinder its effectiveness. Attackers can gain local access through various means, raising significant security risks. Microsoft has not yet responded to inquiries about the BlueHammer flaw.

AppWizard

April 6, 2026

World of Warcraft reveals secret phase of new raid boss to give us the best moment in Race to World First

A new raid in the World of Warcraft saga, part of the Midnight Falls expansion, features a boss named L'ura, whose abilities have been adjusted by Blizzard to make the encounter more manageable. Notably, her Phase 1 attacks have been toned down, with her Heaven's Glaives ability now having shuriken-like projectiles that travel 20% slower and have improved visibility. A hidden fourth phase in the encounter surprised Team Liquid, who initially celebrated their progress after the third phase, only to realize the fight was ongoing. Team Liquid has faced L'ura 450 times, reducing her health in the fourth phase to 44%, while their closest competitor, Echo, has not surpassed 65% health in the same phase. Team Liquid currently leads the Race to World First after defeating another boss, Chimaerus the Undreamt God, in three attempts.

AppWizard

April 5, 2026

Age of Empires 4’s next chapter tests your will to survive as the “ruthless” Jin Dynasty arrive

The Age of Empires 4 DLC titled "Yue Fei's Legacy" introduces the Jin Dynasty as a new faction, characterized as "fast and ruthless." Players will initially face the Jin as adversaries in an eight-mission campaign where they lead the Song Dynasty, commanded by Yue Fei, against the invading Jin forces. The Jin Dynasty features strengths in cavalry and siege capabilities, utilizing Horse Grasslands for military production and introducing elite units like Iron Pagoda cavalry and Mohe Tribesman. Strategic elements include Mounted Villagers for resource gathering and Emissaries for capturing settlements. The use of gunpowder becomes significant in later stages, with the addition of Mounted Grenadiers and Eruptors. The DLC also introduces two new biomes—Madagascar and Yellow River—and four additional maps. It is set to launch on May 7, 2026, priced at .99 / £12.49, with a 15% pre-purchase discount available before the release date.

Tech Optimizer

April 4, 2026

Best antivirus for Windows 11: Guide to choosing the right software

Windows 11 provides a more secure environment than previous versions, but recovery remains a concern for users. Built-in protections are limited against threats like phishing and ransomware. The need for antivirus solutions has evolved to include comprehensive protection and recovery options. Basic threat prevention is often insufficient for home users and remote workers, who risk losing important files. Microsoft Defender offers a solid foundation, but products like Acronis True Image combine anti-malware capabilities with backup and recovery features. Antivirus software is essential for Windows 11 users, protecting against various malicious software. Modern antivirus programs offer real-time protection, web protection, and identity theft protection. Users must consider free versus paid solutions, as premium options typically provide advanced features. Top antivirus picks for Windows 11 in 2026 include Acronis True Image, Bitdefender Total Security, McAfee Total Protection, Norton 360 Deluxe, and Microsoft Defender Antivirus. Acronis True Image stands out for its dual functionality of prevention and recovery, utilizing AI-driven analysis to monitor unauthorized changes. Backup-focused alternatives like EaseUS Todo Backup Home and Macrium Reflect Home specialize in recovery but lack comprehensive antivirus protection. The choice between paid and free antivirus depends on whether Microsoft Defender meets users' needs. Paid suites generally offer deeper protection and advanced features. The best antivirus should provide robust protection while minimizing system impact, tailored to users' specific needs for prevention or recovery.

AppWizard

April 3, 2026

NCSC warns of messaging app targeting by Russia-linked actors

The UK National Cyber Security Centre (NCSC) has warned of an increase in cyber threats from Russia-based actors, targeting high-risk individuals through messaging applications like WhatsApp, Signal, and Messenger. These threats involve deceptive tactics such as coaxing users for login codes, unauthorized device access, group chat infiltration, impersonation of trusted contacts, and phishing links. The targeting is linked to state-affiliated groups from Russia, China, and Iran. High-risk individuals are those with access to sensitive information or influential roles. The NCSC recommends several protective measures: enabling two-step verification, not sharing verification codes, monitoring linked devices, being cautious with unknown contacts, limiting personal app use for work, and using disappearing messages to reduce data exposure.

Winsage

April 2, 2026

Malwarebytes highlights Microsoft findings on WhatsApp attachments used in Windows attacks

A campaign targeting Windows users exploits WhatsApp attachments to execute a malicious .vbs script. Victims receive what appears to be a harmless attachment, which, when opened, duplicates legitimate Windows tools into a hidden folder and renames them to avoid detection. These tools are then used to download additional malware from reputable cloud services, disguising the malicious activity. The malware seeks administrator privileges by altering User Account Control settings and registry entries for persistence. It ultimately installs remote-access software and other payloads to maintain control over the compromised device. Malwarebytes recommends safety measures such as avoiding unsolicited attachments, enabling file extensions, using updated anti-malware tools, downloading software from official sites, being cautious of unexpected UAC prompts, and keeping systems updated.

Tech Optimizer

April 2, 2026

Cybersecurity expert highlights mobile device vulnerabilities

Cybersecurity expert John Joyce emphasizes the vulnerabilities of mobile devices, noting that many users mistakenly believe their smartphones are secure. He highlights that smartphones often serve as primary computing devices, storing sensitive personal information, which makes them attractive targets for cybercriminals. Joyce advises users to look for signs of compromise, such as device slowdowns or unusual app behavior, and to keep their devices updated with the latest operating systems and security patches to reduce risks. He recommends using a Virtual Private Network (VPN) when on public Wi-Fi and suggests utilizing security apps like Norton and TotalAV for additional protection. Joyce also points individuals to Cirrus Technology Consultants' online resources for further information on mobile cybersecurity.

AppWizard

April 2, 2026

Everything we know about Sulfur Cube in Minecraft

The upcoming release of Chaos Cubed for Minecraft introduces a new underground biome and a creature called the Sulfur Cube. The Sulfur Cube is a passive, bucketable mob found in the Sulfur Caves biome, immune to fall damage, and can split into smaller cubes upon impact. These smaller cubes can grow larger over time when nurtured with golden dandelions. The Sulfur Cube can absorb various blocks, including all wood variants, stone, coral, slime, honey, sculk, froglight, resin, ore, metallic blocks, ice, concrete, sulfur, and cinnabar, but cannot consume walls, stairs, slabs, or fences. Once it absorbs a block, it becomes impervious to damage from player attacks and most mobs, instead being launched away from the attack. Players can retrieve the absorbed block using shears. The Sulfur Cube is expected to debut in the second quarter of 2026, following its appearance in the recent Minecraft Bedrock beta.

AppWizard

April 1, 2026

NCSC warns of messaging app targeting | National Cyber Security Centre

The National Cyber Security Centre (NCSC) has issued guidelines for individuals vulnerable to targeted attacks via messaging applications, particularly due to increased malicious activities from actors based in Russia. High-risk individuals, such as those with access to sensitive information, are especially susceptible. Past incidents involve state-affiliated groups like APT31 from China, the Russian FSB actor Star Blizzard, and Iran's IRGC targeting government officials. Attackers may use deceptive methods to obtain login codes, add devices to accounts, infiltrate group chats, impersonate contacts, and execute phishing attempts. To mitigate risks, individuals should avoid sharing sensitive information via messaging apps, use corporate services for work-related communications, refrain from sharing verification codes, activate two-step verification, utilize passkeys, regularly review linked devices, stay alert for impersonations, and consider using disappearing messages. The NCSC also provides guidance for enhancing account and device security for high-risk individuals.