contacts Archives

Tech Optimizer

September 15, 2026

Iranian Hackers Use Fake Norton Antivirus to Spread Windows Spyware

Iranian state-sponsored hackers are targeting dissidents, activists, and journalists using deceptive tactics, including malicious applications that impersonate reputable cybersecurity products like Norton Antivirus and KeePass. The FBI and UK authorities issued a warning about these hackers, who establish rapport with targets via social messaging platforms, posing as IT support or known contacts. They convince victims to download files that appear authentic, including AI video creation applications and other software. The spyware, named “Chosen Brick,” infects Windows PCs and has capabilities such as capturing screen content, recording audio, collecting message data, and downloading additional malware. The hackers have exploited this spyware to publish personal details of victims, increasing their harassment. The FBI advises potential victims on detecting the spyware and recommends enabling antivirus software, running regular scans, and avoiding unofficial downloads.

AppWizard

September 15, 2026

Latest Pixel Feature Drop Expands Access to Scam-Text Detection

Google has released a feature update for Pixel phones that enhances existing functionalities and introduces new elements. The update expands scam-text detection capabilities to chat applications using Gboard, compatible with devices as old as the Pixel 6, and is available in multiple countries including the US, UK, Australia, Canada, France, Germany, India, Mexico, Japan, and Singapore. It also improves VIP notifications by allowing users to add home-screen widgets for designated contacts and includes a new navigation menu for easier contact switching, available for Pixel 6 and newer models. Additionally, a Harry Potter-themed pack with wallpapers, icons, and audio effects is offered, along with a two-month free subscription to Audible. For Pixel Watch users, the update introduces a one-handed pinch gesture for easier access to notifications and improved functionality for the raise-to-talk gesture on newer models.

Winsage

September 15, 2026

Iranian spies hit Windows machines with Chosen Brick data-stealing malware

Iranian state cyber actors are targeting individuals through popular messaging applications, using surveillance and data-stealing malware known as "Chosen Brick," which has been in use since at least 2025. This malware is designed for Windows systems and enables the theft of personal data, allowing Iranian spies to monitor perceived threats such as dissidents, activists, and journalists. The attacks typically begin with messages sent via WhatsApp or Telegram, impersonating trusted contacts. Attackers conduct extensive research on their targets to craft convincing messages that encourage victims to download malicious files disguised as legitimate applications. Once executed, Chosen Brick operates stealthily, evading detection and establishing a connection for command-and-control communications. It can enumerate processes, capture screen and audio content, extract sensitive information, and even wipe infected systems. Organizations suspecting compromise are advised to engage IT providers for investigations and to inform staff about potential risks. Recent alerts follow cyberattacks on water and energy sectors linked to Iran, with ongoing concerns about the implications for cybersecurity amid escalating military tensions. Additionally, five US agencies have reported that attackers are using AI-generated scripts to exploit vulnerabilities in critical infrastructure systems.

AppWizard

September 15, 2026

Where to Install Modified Android Games and Apps Safely?

Modified applications, or modded apps, for Android are distributed as .APK files and are installed manually rather than through app stores. These apps are altered versions of original applications, which may include changes in design, functionality, or the removal of restrictions. Users should be cautious when downloading modded APKs from third-party websites, as these can pose security risks. It is important to verify the website's reliability by checking for contact information, a privacy policy, and installation instructions. Users should scan APKs for security threats before installation and examine the permissions requested by the app. Maintaining an updated operating system and security applications is essential for protecting personal data. Modded applications may not receive regular updates, increasing the need for users to check for newer versions. Respecting developers' rights and avoiding unauthorized access to premium features is crucial to mitigate risks.

Winsage

September 15, 2026

China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

A spear-phishing campaign linked to the Chinese threat actor UTA0560 targeted various NGOs on September 1, 2026, exploiting recently patched vulnerabilities in Google Chrome and Microsoft Windows. The campaign utilized a malicious JavaScript backdoor called GRIMWEDGE, which was deployed through a multi-stage exploit chain that involved three vulnerabilities: CVE-2026-85046, CVE-2026-87491, and CVE-2026-85880. The attack began with spear-phishing emails that led recipients to a vulnerable U.S.-based university website, allowing attackers to redirect users to their infrastructure. The exploit chain enabled arbitrary code execution and facilitated the deployment of GRIMWEDGE, which is capable of host reconnaissance, file and process management, command execution, and payload delivery. The initial payload was an executable named "msgbox.exe," which extracted a legitimate Windows binary and a malicious DLL called "wsc.dll." This DLL initiated a sideloading chain and contacted a command-and-control server for further instructions. GRIMWEDGE allows for several commands, including system reconnaissance, directory listing, file deletion, and command execution in a hidden window. It lacks built-in persistence or lateral movement mechanisms but provides a foothold for further exploitation. Concurrently, another Chinese threat actor, JungleBamboo (APT31), used the same exploit chain to deploy a loader named SUPERSTOMP, which installs a credential-stealing Chrome extension called LONGTALE. The simultaneous use of the exploit chain by multiple actors suggests potential sharing or sale of the exploit, raising concerns about patch-gap vulnerabilities that pose risks for exploitation campaigns.

AppWizard

September 14, 2026

Android App Permissions: Which Ones Should You Allow or Deny?

Permissions in Android apps should be granted based on their relevance to the app's primary function. Users should be cautious with permissions such as location, contacts, SMS, microphone, camera, and accessibility access, as they can expose sensitive information or control device capabilities. To review app permissions, users can navigate to Settings, select Apps, choose the application, and tap on Permissions. The Permission Manager under Security & Privacy allows users to see which apps have access to specific permissions. Android can automatically pause activity for seldom-used apps, removing previously granted permissions. If an app repeatedly requests denied permissions, users should evaluate the necessity of the request and consider maintaining their denial if it seems unwarranted.

AppWizard

September 12, 2026

New Android Ransomware Records Screens, Steals OTPs and Secretly Takes Photos of Victims

A newly identified malware threat in the Android ecosystem, named Mantax Otax, combines ransomware with espionage capabilities. It targets users who install applications from untrustworthy sources, often through messaging apps or phishing attempts. The malware is linked to Indonesian cybercriminals and can steal sensitive information such as SMS one-time passwords, chat histories, and lock-screen PINs, facilitating account takeovers. Mantax Otax requests device-administrator rights and seeks access to SMS messages, contacts, and media files. It encrypts files on devices running Android 9 and earlier using AES encryption and demands a ransom for recovery. Although the impact is reduced on Android 10 and later due to Scoped Storage, the malware still poses significant surveillance risks. The malware collects extensive sensitive data, including contacts, call logs, and location data, and targets multi-factor authentication codes. It uses a deceptive system-lock overlay to capture PINs and has introduced features like WebSocket communications and disruptive pop-ups in its second iteration. Users are advised to be cautious when installing applications, avoid unsolicited APKs, and reject permissions that do not align with an app's purpose. In case of suspicious activity, users should disconnect from networks and seek help before entering sensitive information. Organizations should monitor for signs of this malware on managed devices.

AppWizard

September 10, 2026

Comma Compliance Open-Sources the Android App That Archives Employee Text Messages

Comma Compliance released the source code for its Android capture component on September 10, 2026, allowing corporate IT and security teams to inspect the software that captures employee text messages for compliance archiving. The source code is available on GitHub under the MIT license. The capture mechanism reads messages stored in the phone's default messaging app, encrypts them, and sends them to the customer's Comma backend without intercepting messages in transit. A persistent notification appears on the phone when archiving is active, indicating the organization responsible for the archiving. Comma previously open-sourced its WhatsApp and Signal capture connectors in 2025.

AppWizard

September 8, 2026

7 Ways To Use Private Space On Your Android Device That Are Actually Helpful

Google's Private Space is a feature on Android devices that creates a secure environment for managing sensitive information. It allows users to lock banking apps, providing a secure vault that is hidden from the main interface and protected from malware and unauthorized access. Users can enhance security with a unique PIN or biometric authentication, and the space locks automatically when the smartphone is secured. Private Space also serves as a secure repository for personal documents, enabling users to move files like PDFs and IDs into it, ensuring they remain inaccessible until the space is locked. Additionally, Private Space allows users to separate personal and professional digital lives by logging into a different Google account, maintaining distinct emails, contacts, and calendar events. Users can install separate instances of messaging and social media apps within Private Space to manage multiple accounts securely. It also helps keep dating apps hidden, protecting users' privacy and personal data. When sharing devices, Private Space ensures personal data remains secure behind authentication. Lastly, it allows users to store data locally without syncing to the cloud, prioritizing privacy over convenience.

AppWizard

September 8, 2026

Are Free VPNs for Android Actually Worth Using

A free VPN for Android can improve internet privacy, especially on untrusted networks, but it has limitations, such as not guaranteeing complete anonymity or security. The VPN creates an encrypted tunnel between the device and the server, protecting traffic from local monitoring but not ensuring overall security if poorly implemented. Changing your IP address does not guarantee anonymity, as account logins and tracking technologies can still identify users. Free VPNs may be suitable for low-risk tasks, like occasional browsing on public Wi-Fi, but they do not protect against malware or phishing. Providers often rely on alternative revenue sources, such as advertising or data sharing, which necessitates careful examination of their privacy policies. Free VPNs may have limitations like data caps, slower speeds, and fewer server options compared to paid services. Users should evaluate the provider’s background, privacy policy, permissions, and performance before installation. A paid VPN generally offers better reliability, support, and transparency, making it a safer choice for sensitive activities.