NewApp Digest
search bot

Command Prompt

Microsoft warns fake CAPTCHA is tricking Windows users into running malware
Winsage
September 4, 2026

Microsoft warns fake CAPTCHA is tricking Windows users into running malware

Microsoft has identified a new malware campaign called TerminalFix that uses fake CAPTCHA prompts to trick Windows users into executing malicious commands. This campaign is a variation of ClickFix attacks and employs deceptive pages that impersonate reputable services like Cloudflare. Instead of traditional CAPTCHA challenges, users are instructed to open PowerShell or Command Prompt and paste in commands, allowing attackers to execute complex scripts more easily. TerminalFix initiates a multi-stage intrusion, granting attackers persistent proxy access to the infected machine, which can lead to further exploitation of the company's network. The campaign relies on social engineering tactics, requiring user compliance with counterfeit verification instructions. Microsoft has released mitigation guidance, recommending restrictions on PowerShell access, monitoring for DLL sideloading, blocking outdated Flash plugins, and enabling cloud-delivered protection in Microsoft Defender Antivirus. The campaign poses significant risks to enterprise networks, but individual users should also be cautious about executing commands requested by websites.
TerminalFix Attacks Use Fake CAPTCHAs To Secretly Hack Windows PCs
Winsage
September 1, 2026

TerminalFix Attacks Use Fake CAPTCHAs To Secretly Hack Windows PCs

Microsoft Threat Intelligence has identified a new variant of the ClickFix malware campaign called "TerminalFix." This variant uses deceptive CAPTCHAs that mimic trusted services like Cloudflare and directs users to PowerShell or a command prompt, allowing for the execution of complex scripts. TerminalFix aims to orchestrate a multi-stage attack that provides attackers with persistent, network-level proxy access through the compromised host, potentially leading to significant data theft and malware propagation within unsecured enterprise networks. Recommendations for defense against TerminalFix include restricting access to PowerShell and Windows Run dialogs, monitoring for DLL sideloading indicators, blocking Flash plugins, and enabling cloud-delivered protection in Microsoft Defender Antivirus. The attacks primarily target enterprise environments rather than individual consumers.
6 awesome things you can do with a terminal emulator on Android
AppWizard
August 29, 2026

6 awesome things you can do with a terminal emulator on Android

Terminal emulators allow users to interact with operating systems through text commands. Termux is an open-source terminal emulator for Android available on the F-Droid store. Users can test internet speed directly from Termux by installing Python and using the speedtest command. Weather information can be accessed using the curl command for a three-day forecast, and users can create shortcuts for convenience. Termux can display system information using colorful ASCII art with tools like fastfetch or macchina. It allows remote access to the phone via SSH after installing openssh. Users can run AI chatbots locally using the command-line tool Ollama. Termux can also facilitate the installation of Linux-based operating systems on Android devices using the proot-distro tool.
Windows update that breaks some multiplayer games linked to our desire for gaming PCs that light up all the colors of the rainbow
AppWizard
August 25, 2026

Windows update that breaks some multiplayer games linked to our desire for gaming PCs that light up all the colors of the rainbow

A bug following the Windows update KB5121003 has caused several games, including Arc Raiders, Marvel Tōkon: Fighting Souls, and The Finals, to become unresponsive. Embark Studios suggested that the crashes are linked to the driver inpoutx64.sys and recommended disabling it through the Command Prompt. Microsoft confirmed that the update is the cause of the issues and is investigating a potential connection between RGB lighting components and the affected games. They provided a method to disable the driver via the registry, advising users to back up the registry first. Disabling the driver may affect RGB lighting features. Users can also consider rolling back to a previous Windows update as a temporary solution.
Tested: Windows 11 has fully removed the legacy tool abused by cybercriminals for malware and ransomware, called WMIC
Winsage
August 22, 2026

Tested: Windows 11 has fully removed the legacy tool abused by cybercriminals for malware and ransomware, called WMIC

Windows 11 will remove the Windows Management Instrumentation Command-line (WMIC) tool in the upcoming September 2026 Update, marking its complete elimination after being deprecated in earlier versions. Testing of early builds shows that WMIC is no longer accessible, with attempts to use it resulting in a "command not recognized" error. Previously, WMIC was available as an optional feature, but it will no longer be included or reactivatable in the new update. Microsoft stated that this removal aims to improve the security and reliability of Windows, as WMIC has been exploited by cybercriminals for attacks. The September 2026 Update will also introduce other enhancements, including the ability to disable Bing in Windows Search and improvements in app speed.
silver Android smartphone
Winsage
August 22, 2026

Someone discovered that Windows 11 nukes your GPU drivers if you leave your laptop in eco mode

A user on the Zephyrus G14 subreddit discovered that using the eco power mode on Windows 11 for 15 consecutive days leads to the automatic deletion of GPU drivers. The eco mode power-gates the discrete GPU off the PCIe bus, causing Windows to treat it as disconnected. After 15 days of inactivity, Windows performs a cleanup and removes the GPU driver package. When switching back to standard power mode, the GPU is identified as a "Basic Display Adapter." Users can check if their GPU drivers have been removed using specific command prompt commands. To prevent driver cleanup, users can either switch to a non-eco power plan occasionally or modify the registry to set Autorun (DWORD) = 0.
Search