breach Archives

TrendTechie

April 11, 2026

Пираты слили на торренты Resident Evil Requiem

Hacker voices38 has successfully circumvented the Denuvo anti-piracy protection in Resident Evil Requiem, marking the first breach of a project secured with the current version of Denuvo without using hypervisor techniques. The method used is described as a native approach, which avoids the complications and risks associated with hypervisor solutions. This breakthrough claims to improve performance, mitigating frame rate drops that typically average 11 fps with previous methods. The version of Denuvo in Resident Evil Requiem has only minor modifications from the 2025 release. Resident Evil 9: Requiem debuted in February 2026, featuring Leon Kennedy and FBI agent Grace Ashcroft. Additionally, Android smartphones can run Resident Evil Requiem at 90 fps.

AppWizard

April 10, 2026

These two huge PC performance app downloads have been infected by a virus

The download pages for CPU-Z and HWMonitor have been compromised, redirecting users to malware-infected files. Users should verify that downloaded files are named "hwmonitor1.63.exe" or "cpu-z2.19-en.exe" and be cautious of files like "HWiNFOMonitorSetup.exe." A virus scan is recommended, as Windows Defender has flagged the compromised versions. The malicious files were identified approximately nine hours ago, indicating a successful attack on the CPUID download site. The correct download links have been restored, but CPUID has not issued an official statement. The breach was reported by a Reddit user who experienced a warning from Windows Defender after downloading a suspicious file. CPUID's website and social media have not been updated since 2024, and users are advised to stay vigilant.

Winsage

April 9, 2026

This fake Windows support website delivers password-stealing malware

A phishing campaign has been identified that uses a counterfeit Microsoft support website, microsoft-update[.]support, to trick users into downloading a malicious Windows update disguised as WindowsUpdate 1.0.0.msi. This file, created on April 4, 2026, appears legitimate but contains malware designed to steal sensitive information. The campaign targets French-speaking users, leveraging recent data breaches in France to create convincing scams. The malware, once executed, installs an Electron application that runs a Python interpreter, which then deploys various data theft tools. It employs two persistence mechanisms: modifying the Windows registry and creating a shortcut in the Startup folder. The malware connects to external sites for reconnaissance and data exfiltration, using domains like datawebsync-lvmv.onrender[.]com and store8.gofile[.]io. The malware's components have evaded detection by antivirus tools, with VirusTotal reporting zero detections for the main executable and its launcher. Users are advised to check their registry, remove suspicious files, change passwords, and run a full system scan if they suspect installation of the malicious update. Safe updating practices include using the built-in Windows update feature and being cautious of phishing attempts. Indicators of compromise include specific file hashes, domains associated with the phishing campaign, and file system artifacts related to the malware's installation.

AppWizard

April 8, 2026

Apple pulls Jack Dorsey’s messaging app from the Chinese App Store

Apple has removed the messaging app Bitchat from the Chinese App Store at the request of the Cyberspace Administration of China (CAC), which cited regulatory concerns. Bitchat, originally launched as Bitchat Mesh and developed by Jack Dorsey, allows anonymous, peer-to-peer communication using Bluetooth-based mesh networking, without relying on internet-connected servers. The app gained popularity in regions with internet shutdowns and social media restrictions. The CAC has alleged that Bitchat violated regulations requiring security assessments for apps that can influence public opinion or mobilize users. Dorsey confirmed the removal on X but has not disclosed any plans for Bitchat's return to the App Store.

AppWizard

April 8, 2026

The FBI Warns That Foreign Cybercriminals Have Targeted Messaging App Users

Cybercriminals connected to Russian intelligence are conducting a large phishing campaign targeting messaging applications, impacting thousands of accounts worldwide. A joint advisory from the FBI and CISA reveals that these attacks focus on individuals with access to sensitive information, including government officials, military personnel, political figures, and journalists. The campaign relies on deception, with attackers impersonating official support channels on platforms like Signal, sending messages that prompt victims to click malicious links or provide confidential information. Victims who comply risk losing control of their accounts, allowing attackers to read private messages and access contact lists. This trend has been observed not only in the U.S. but also in the Netherlands, where similar tactics are used against government employees. The FBI notes that the security of the messaging apps is not the issue; rather, the vulnerability lies in human error. The rise of social engineering tactics poses a risk to both high-profile individuals and potentially everyday users, and users are advised to be cautious with unsolicited messages and not to share sensitive information.

Winsage

April 7, 2026

“This was not opportunistic. It was precision.” — How North Korean hackers used Microsoft Teams and Slack to compromise Windows PCs with an elaborate ploy

On March 30, 2026, axios, a JavaScript HTTP client library, was temporarily compromised by suspected North Korean hackers who hijacked maintainer Jason Saayman's account. This allowed them to publish two malicious versions of axios on npm. The malicious versions were identified and removed within three hours by StepSecurity. A post-mortem blog on GitHub provided security measures for users of Windows, macOS, and Linux, highlighting risks from a Remote Access Trojan (RAT) introduced during the breach. The attack was attributed to a group known as UNC1069, which has been active since at least 2018. Two weeks prior to the breach, Saayman was targeted in a social engineering campaign where attackers posed as a legitimate company founder, leading him to install the RAT via a fake update during a Microsoft Teams meeting. Microsoft Teams was not compromised; it was used as a delivery method for the Trojan. Saayman noted the operation's sophistication.

Tech Optimizer

April 7, 2026

Webroot cuts prices by 50% on Total Protection plans — get the bundled VPN, antivirus software, and more from $90 for your first year

Webroot by OpenText is offering a promotion on its Total Protection software services. The Total Protection subscription is available for .99, reduced from .99, covering protection for five devices under one user identity for the first year. The Total Protection Family plan is priced at .99, down from .99, extending protection to ten devices and accommodating ten distinct identities for the first year. Both plans include antivirus, anti-phishing, malware and ransomware protection, a secure VPN, a password manager, unlimited cloud backup for one PC or Mac, advanced dark web monitoring, account monitoring, parental controls, and identity theft insurance with up to million in expense reimbursement.

Tech Optimizer

April 7, 2026

Norton 360: Comprehensive Cybersecurity for Devices

Norton 360 is a comprehensive cybersecurity solution that protects consumers and businesses from digital threats, integrating features like a VPN and password manager. It safeguards various devices, including PCs and smartphones, and offers multiple editions for individuals, families, and small businesses. Key features include real-time threat detection, a smart firewall, a no-logs VPN, a password manager, parental controls, behavior-based detection for zero-day threats, cloud backup functionality, and performance optimization tools. The suite is effective against phishing, malware, and ransomware, with a 100% detection rate confirmed by independent tests. Norton 360 also caters to small businesses with endpoint protection, compliance tools, and secure file sharing. It employs heuristics and machine learning for threat adaptation and supports unlimited devices in premium plans. The software is compatible with Windows, macOS, Android, and iOS, and offers a VPN service with servers in over 30 countries. Norton 360 competes in the global cybersecurity market, maintaining a strong presence in North America and Europe, with subscription models ranging from basic to deluxe editions. Demand for the product has increased due to high-profile data breaches, and it is available in over 150 countries. Common use cases include protecting home networks, securing client data for freelancers, and safeguarding school-issued laptops. Norton 360 is part of Gen Digital Inc., which focuses on consumer cybersecurity.

AppWizard

April 6, 2026

World of Warcraft reveals secret phase of new raid boss to give us the best moment in Race to World First

A new raid in the World of Warcraft saga, part of the Midnight Falls expansion, features a boss named L'ura, whose abilities have been adjusted by Blizzard to make the encounter more manageable. Notably, her Phase 1 attacks have been toned down, with her Heaven's Glaives ability now having shuriken-like projectiles that travel 20% slower and have improved visibility. A hidden fourth phase in the encounter surprised Team Liquid, who initially celebrated their progress after the third phase, only to realize the fight was ongoing. Team Liquid has faced L'ura 450 times, reducing her health in the fourth phase to 44%, while their closest competitor, Echo, has not surpassed 65% health in the same phase. Team Liquid currently leads the Race to World First after defeating another boss, Chimaerus the Undreamt God, in three attempts.

AppWizard

April 3, 2026

NCSC warns of messaging app targeting by Russia-linked actors

The UK National Cyber Security Centre (NCSC) has warned of an increase in cyber threats from Russia-based actors, targeting high-risk individuals through messaging applications like WhatsApp, Signal, and Messenger. These threats involve deceptive tactics such as coaxing users for login codes, unauthorized device access, group chat infiltration, impersonation of trusted contacts, and phishing links. The targeting is linked to state-affiliated groups from Russia, China, and Iran. High-risk individuals are those with access to sensitive information or influential roles. The NCSC recommends several protective measures: enabling two-step verification, not sharing verification codes, monitoring linked devices, being cautious with unknown contacts, limiting personal app use for work, and using disappearing messages to reduce data exposure.