communications Archives

Tech Optimizer

September 21, 2026

Thousands of hacked sites trick you into installing malware

More than 5,400 websites across over 2,200 organizations have been compromised to propagate malware, primarily affecting small businesses like clinics and online retailers. The attack mechanism involves malicious code that triggers a deceptive CAPTCHA, instructing users to execute commands that can download malware. Attackers are using the BNB Smart Chain test network to store instructions, making it harder for investigators to shut down operations. A newer variant of the attack uses WebRTC technology to establish encrypted connections for delivering additional malicious code. To protect against these threats, users should avoid pasting commands from websites, be suspicious of unusual CAPTCHA instructions, use strong antivirus protection, keep systems updated, take action if commands are executed, and small business owners should regularly verify their website's integrity.

AppWizard

September 19, 2026

Why ESG reporting standards matter in the Android and mobile tech ecosystem

ESG reporting standards are becoming increasingly important in mobile technology, affecting various aspects such as data management, material sourcing, energy consumption, privacy, supply chain dynamics, and product accountability. The lifecycle of mobile devices involves raw material sourcing, component manufacturing, device assembly, shipping, marketing, sales, updates, repairs, trade-ins, and disposal. Companies must understand ESG standards to create coherent sustainability narratives and may need to disclose supplier practices, carbon emissions, and governance documentation when partnering with larger firms. Consumers are now asking more questions about the longevity of software updates, repairability, data collection, packaging design, and the accountability of product creators. The rise of connected devices complicates ESG reporting due to extended product lifecycles and the need for ongoing software support. Companies should track product lifespan estimates, warranty data, repair trends, and update schedules to improve product quality and ESG reporting credibility. Emerging tech companies can start their ESG journey by cataloging product claims, consolidating evidence, designating ownership of records, and reviewing product lifecycle information. Global sustainability frameworks exist but may not align with consumer needs for straightforward product information. Successful mobile tech companies will need to bridge formal reporting requirements with accessible product-level communication. Trust and transparency in practices will increasingly influence consumer choices in mobile technology.

AppWizard

September 18, 2026

Revealed: How Russia use mobile ‘super-app’ Max to spy on its citizens

A new messaging and payment app called Max has emerged in Russia, developed by VKontakte, and has become the country's most utilized messaging platform. Max integrates various services, including banking and government services, and has been adopted by tens of millions of Russians. It features extensive surveillance capabilities, allowing it to take screenshots, access information without consent, impersonate users, and potentially conduct cyberattacks. The app's adoption has been largely mandatory, particularly among state employees and students. Despite its rise, Max has not replaced Telegram as a primary news source, and users have raised concerns about privacy and surveillance. Experts warn that Russia's swift implementation of digital control strategies reflects a growing trend of digital authoritarianism.

Winsage

September 17, 2026

Microsoft Confirms Windows 11 Speed Fixes Are Coming to All Users

Windows 11 users have experienced delays in File Explorer and the Start menu since the operating system's launch in 2021. Recent reports from Windows Insiders indicate significant improvements in system responsiveness, confirmed by Marcus Ash from Microsoft, who stated that these enhancements will be rolled out to all users by fall 2026. Recent cumulative updates have addressed issues like File Explorer lag and Start menu stuttering, with specific updates (KB5120998, KB5095093, and KB5089573) improving responsiveness and reducing micro-stutters. Enhancements to the taskbar, Start menu, and context menus are also being developed, including taskbar repositioning and streamlined context menus. Users on the 25H2 version can expect these improvements through cumulative updates before the 26H2 update this fall. Keeping Windows Update active will ensure access to these enhancements.

Tech Optimizer

September 16, 2026

Hackers Disguise CHOSEN BRICK Malware as AI Apps, Antivirus Software and MRI Results

Iranian state-affiliated cyber actors are targeting dissidents, activists, and journalists using fake AI applications, counterfeit antivirus tools, and fabricated MRI scan results, primarily through a spyware family known as CHOSEN BRICK, which is designed for Windows systems. This campaign has been active since at least 2025 and affects individuals globally, including in the UK, US, and Netherlands. The malware establishes persistence via the Windows Registry Run key and communicates through Telegram, utilizing unique Bot IDs for each victim. CHOSEN BRICK is capable of extensive data collection, including capturing screenshots, recording audio, and stealing email content. Personal information from victims has been found on pro-Iranian leak sites, increasing harassment risks. Security measures should include monitoring for suspicious Registry entries and unusual communications, while users are advised to avoid unsolicited software installations and keep their systems updated. The FBI refers to this malware family as HEAVYGRAM.

Tech Optimizer

September 16, 2026

AI helps scammers build convincing antivirus renewal pages

Antivirus renewal scams often begin with messages claiming automatic subscription renewals, leading victims to counterfeit pages designed to collect personal information. These scams impersonate well-known brands and do not indicate that the sender has accessed the recipient's device. Responding to such messages can provide scammers with valuable data, including names and phone numbers, which can be sold or used for further scams. A specific scam site impersonating Avast targeted users in Belgium, falsely claiming a subscription renewal for €129.99. The site appeared polished and requested basic contact information without asking for sensitive data. It contained notes suggesting AI involvement in its creation, indicating it was a half-finished project. To identify antivirus renewal scams, individuals should verify any claimed charges directly with their bank, check subscriptions through official channels, be cautious of cancellation forms requesting phone numbers, treat follow-up calls as potential threats, and avoid installing remote access software. If engagement with a scam occurs, disconnect from the internet, remove any installed software, and change passwords. Tools like Malwarebytes Browser Guard can help block malicious sites, and Scam Guard can analyze suspicious communications.

Winsage

September 15, 2026

Iranian spies hit Windows machines with Chosen Brick data-stealing malware

Iranian state cyber actors are targeting individuals through popular messaging applications, using surveillance and data-stealing malware known as "Chosen Brick," which has been in use since at least 2025. This malware is designed for Windows systems and enables the theft of personal data, allowing Iranian spies to monitor perceived threats such as dissidents, activists, and journalists. The attacks typically begin with messages sent via WhatsApp or Telegram, impersonating trusted contacts. Attackers conduct extensive research on their targets to craft convincing messages that encourage victims to download malicious files disguised as legitimate applications. Once executed, Chosen Brick operates stealthily, evading detection and establishing a connection for command-and-control communications. It can enumerate processes, capture screen and audio content, extract sensitive information, and even wipe infected systems. Organizations suspecting compromise are advised to engage IT providers for investigations and to inform staff about potential risks. Recent alerts follow cyberattacks on water and energy sectors linked to Iran, with ongoing concerns about the implications for cybersecurity amid escalating military tensions. Additionally, five US agencies have reported that attackers are using AI-generated scripts to exploit vulnerabilities in critical infrastructure systems.

Tech Optimizer

September 15, 2026

How to protect yourself from AI scams: Save $110 with McAfee antivirus

In 2026, McAfee introduced its AI-powered Scam Detector as part of the McAfee+ suite, which includes antivirus protection, identity monitoring, privacy tools, VPN services, and financial safeguards. The McAfee+ Advanced tier is available for .99 for the first year, reduced from 9.99, and a family plan for up to six members is priced at 9.99, down from 9.99. Each plan includes a 30-day money-back guarantee. Research shows Americans receive an average of 14 scam messages daily, with one in three falling victim to online scams, losing an average of ,160. The Scam Detector identifies threats such as suspicious texts, emails, deepfake videos, and risky websites, and includes a QR code safety check. It is included in all McAfee core plans at no additional cost.

AppWizard

September 15, 2026

Bungie delays next Marathon update and ends ‘strict seasonal schedule’ as it goes all-in on Destiny-like features

Bungie has announced a shift in its development strategy for the game Marathon, moving away from a rigid seasonal schedule to a more flexible timeline for updates. As a result, content originally planned for this month has been postponed until December, although a smaller update focusing on progression and the in-game economy will be released in October. The Nightfall refresh is set to launch on October 6, providing all players with a "fresh starting point." Bungie aims to address previous issues with the seasonal model that left some players behind. The decision to abandon the strict seasonal model comes amid a decline in Marathon's concurrent player numbers on Steam. Players are hopeful for a more comprehensive version of Marathon, including a single-player mode and enhanced social interactivity. Bungie's communications lead, Dylan Gafner, has promised increased communication with the community in the coming weeks and months.

AppWizard

September 12, 2026

New Android Ransomware Records Screens, Steals OTPs and Secretly Takes Photos of Victims

A newly identified malware threat in the Android ecosystem, named Mantax Otax, combines ransomware with espionage capabilities. It targets users who install applications from untrustworthy sources, often through messaging apps or phishing attempts. The malware is linked to Indonesian cybercriminals and can steal sensitive information such as SMS one-time passwords, chat histories, and lock-screen PINs, facilitating account takeovers. Mantax Otax requests device-administrator rights and seeks access to SMS messages, contacts, and media files. It encrypts files on devices running Android 9 and earlier using AES encryption and demands a ransom for recovery. Although the impact is reduced on Android 10 and later due to Scoped Storage, the malware still poses significant surveillance risks. The malware collects extensive sensitive data, including contacts, call logs, and location data, and targets multi-factor authentication codes. It uses a deceptive system-lock overlay to capture PINs and has introduced features like WebSocket communications and disruptive pop-ups in its second iteration. Users are advised to be cautious when installing applications, avoid unsolicited APKs, and reject permissions that do not align with an app's purpose. In case of suspicious activity, users should disconnect from networks and seek help before entering sensitive information. Organizations should monitor for signs of this malware on managed devices.