communications Archives

AppWizard

June 30, 2026

Open source game engine Godot will no longer accept AI-authored code contributions: ‘We can’t trust heavy users of AI to understand their code enough to fix it’

The Godot Foundation has decided to implement new guidelines to prohibit AI-authored code, pull requests from AI agents, and AI-generated text in communications between contributors. This decision follows concerns about the increasing number of AI-generated contributions, which have made code review more challenging for maintainers. The Foundation aims to reduce the burden on maintainers and ensure that all contributions come from accountable humans. The new policies will explicitly reject AI-authored code and advise contributors to use AI assistance only for minor tasks while requiring disclosure of its use. Machine translations of human-authored text will still be allowed. The Foundation plans to adopt a cautious approach to AI tools and will re-evaluate its policies as the situation evolves.

AppWizard

June 29, 2026

US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve

The US government is offering rewards of up to million for information on individuals associated with two Russian-linked cyber threat groups, UNC5792 and UNC4221, which target US officials, military leaders, journalists, and personnel in Ukraine. The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have reported that these groups conduct sophisticated phishing campaigns via commercial messaging applications (CMAs), using social engineering and masquerading as support accounts to gain unauthorized access. The attackers now request victims' Backup Recovery Keys, which can lead to future account takeovers even if new accounts are created. Both groups are linked to Russian intelligence services, with UNC5792 associated with the FSB Border Guards and UNC4221 with Russian military services. The US government seeks information on the identities, locations, affiliations, and funding sources of the actors behind these groups.

AppWizard

June 27, 2026

Palworld 1.0 update has ’27 pdf pages of changes and additions,’ says publishing lead

Palworld is set to launch its version 1.0 on July 10, completing its development cycle. The game will introduce numerous new features, including a flight-enabling wing pack and various items and pals, with the World Tree playing a significant narrative role. It currently has over 35,000 concurrent players and has received multiple Steam awards. Players will not need to restart their progress for the new content, although starting fresh may enhance the experience.

Winsage

June 27, 2026

New Millenium RAT version infects 62,000 Windows systems worldwide

A significant evolution of the Millenium remote access trojan (RAT) has impacted over 62,000 Windows devices across more than 160 countries. The latest version, 4.*, marks a departure from previous .NET-based versions and is attributed to a threat cluster known as Y2K Operators, with the creator identified as “ShinyEnigma.” There are 62,289 infected endpoints, with 39,730 infections occurring in the first quarter of 2026. The RAT is marketed as malware-as-a-service (MaaS) and promoted through underground forums and platforms like GitHub, with accessible pricing. Millenium RAT 4 is developed in native C++ and uses the Telegram Bot API for command-and-control communications. Its capabilities include stealing browser data, collecting system information, logging keystrokes, capturing screenshots and audio, accessing Telegram and Discord data, downloading additional payloads, and executing Windows or PowerShell commands. The malware ensures persistence by replicating itself in the %APPDATA% directory and creating an autorun registry entry. The malware is distributed through social engineering tactics such as cracked software, cryptocurrency utilities, hacking toolkits, OSINT tools, exploit builders, and Roblox-related cheats. Some campaigns have trojanized malware builders, infecting cybercriminals. One campaign used PDF-themed lures with a malicious Windows shortcut to download the RAT while displaying a legitimate document. Payloads often use filenames associated with Windows components or security software to blend into infected systems. Group-IB recommends avoiding untrusted executables, applying security updates, enabling multi-factor authentication, and monitoring for unusual autorun registry entries.

BetaBeacon

June 25, 2026

LDPlayer 14 officially launches, redefining the Android gaming experience on PC

LDPlayer 14 was released on June 25, 2026, promising enhanced compatibility, improved performance, and a more stable gaming experience for mobile gamers worldwide.

AppWizard

June 24, 2026

‘Don’t blame yourselves’ for Destiny 2’s end, community lead tells players: ‘No words can accurately depict how lucky we are to have shared these worlds with you’

Destiny 2 has released its final update, marking the end of support for the game. Bungie's management has faced criticism regarding the game's decline, with players expressing frustration over various decisions. Bungie's communications lead, Dylan Gafner, reassured the community that players should not blame themselves for the game's trajectory. The studio has dealt with backlash and threats from players, leading to a reduction in communications and legal action against an abusive player in 2023, resulting in a 0,000 judgment. Despite challenges, most of the community has expressed frustrations respectfully.

Tech Optimizer

June 24, 2026

Norton 360 Advanced gets 77% discount, drops price to £2.92/mo — top-rated antivirus, 200GB cloud backup, VPN, parental controls and more

Norton 360 Advanced is currently available at a 77% discount, reducing the monthly cost to £2.92 for protection of up to ten devices. It includes antivirus technology, 200GB Cloud Backup, a Password Manager, a VPN for secure browsing, a Parental Control App, Dark Web Monitoring, Identity Restoration Support, Social Media Monitoring, and Financial Monitoring services.

AppWizard

June 24, 2026

Government’s homegrown messaging app ‘NepaConnect’ appears on google play store

A government-developed messaging application named NepaConnect has been launched on the Google Play Store, aiming to provide a secure internal communications platform for state officials in Nepal. The initiative, disclosed by Finance Minister Dr. Swarnim Wagle, involves the creation of a sovereign digital infrastructure with a team of around 80 technical professionals. NepaConnect features include encrypted communication, document sharing, secure file storage, location sharing, voice messaging, document scanning, meeting scheduling, AI integration, status feeds, and ride-management services. The app is designed to centralize various workplace functions and reduce reliance on foreign communication platforms. However, details about its security standards, encryption protocols, and overall transparency remain limited. Currently, the application is in early development stages, with some features incomplete or non-functional. The future success of NepaConnect will depend on factors such as cybersecurity, user adoption, and the government's ability to encourage civil servants to switch from existing platforms.

Winsage

June 24, 2026

Windows RAT Uses Encrypted HTTP C2 and Registry Persistence After npm Infection

A malware campaign targets Windows systems through a malicious npm package named postcss-minify-selector-parser, which mimics the legitimate postcss-selector-parser. This counterfeit package installs a Remote Access Trojan (RAT) on developer machines, beginning with a multi-stage attack triggered by the installation of the package. The RAT can steal credentials, execute shell commands, and communicate with a remote attacker. Security researchers at JFrog identified this threat and reported it on June 22, 2026, noting that two additional related packages, postcss-minify-selector and aes-decode-runner-pro, are linked to the same publisher and remain live on the npm registry. The RAT employs encrypted HTTP communication with a command-and-control (C2) server and ensures persistence by creating a registry key under the Windows Run key. It has capabilities for remote shell execution, file uploads and downloads, and can steal saved login data from Google Chrome using Windows decryption APIs. The malware is designed for organized batch exfiltration of stolen data. Indicators of compromise include specific IP addresses, domains, file paths, and SHA-256 hashes associated with the malware components. JFrog advises users to remove the malicious packages, inspect their dependency trees, and treat any stored credentials as compromised.

Winsage

June 19, 2026

Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2

Microsoft has identified a Windows-based cryptocurrency clipper campaign that has been active since February 2026. This campaign uses clipboard-intercepting malware with self-spreading capabilities and operates through the Tor network. The clipper malware employs Windows Script Host and ActiveX to launch a Tor proxy and connect to a hidden command-and-control server. It focuses on stealing clipboard data, particularly cryptocurrency wallet addresses, and can exfiltrate screenshots. The malware is distributed via malicious Windows Shortcut (LNK) files on USB drives, which activate a worm that checks for existing infections and fetches the payload from a remote server. The clipper monitors the clipboard every 500 milliseconds for sensitive information and can replace copied wallet addresses with those controlled by attackers. Microsoft recommends behavioral detections, disabling AutoRun for removable media, blocking LNK execution from drives, and monitoring clipboard-related activities as mitigations against this threat.