Containers Archives

AppWizard

June 20, 2025

Godfather Android malware takes over banking apps

A new version of the Android malware Godfather creates isolated virtual environments on mobile devices to steal account details and transactions from banking apps. It targets over 500 banking, cryptocurrency, and e-commerce applications globally, utilizing a fully virtual file system, virtual process IDs, intent spoofing, and a component called StubActivity. Godfather manifests as an APK app with a virtualization framework, scanning for targeted applications and encapsulating them within its virtual environment. It intercepts permissions for accessibility services, redirecting them to a StubActivity that launches the virtual version of the banking app, allowing it to capture sensitive information. The malware can record account details, passwords, and PIN codes using Xposed for API hooking. It employs a fake lock screen overlay to trick users into entering their credentials and can manipulate user interfaces and execute transactions within the legitimate banking app. Godfather first emerged in March 2021 and has evolved significantly since then, with the latest iteration demonstrating advancements from previous versions.

Winsage

June 20, 2025

How Uniphore achieved 30% cost savings by modernizing Windows servers on AWS

Uniphore is an AI innovation company that faced challenges with its legacy Windows Server infrastructure, which was costly and raised security concerns due to its end-of-support status. To modernize, Uniphore utilized Amazon Web Services (AWS) for containerization and cloud-native solutions, achieving a 30% reduction in costs and improved operational capabilities. The migration involved transitioning from 50 bare-metal Windows Server 2008 R2 instances to a Linux environment on AWS, optimizing call-center analytics workloads and enabling better training of large language models. The modernization strategy included three key areas: application modernization through refactoring and containerization, a custom data migration solution using Type 2 hypervisor technology, and a cloud infrastructure setup with Amazon EC2, Amazon EKS, Amazon EFS, and Amazon S3. The migration was executed in three phases: deploying the hypervisor and DataSync agent, secure data migration and validation, and production cutover with application deployment. Best practices adopted during the process included Infrastructure as Code (IaC) with Terraform, CI/CD pipelines using GitLab, comprehensive monitoring with DATADOG and CloudWatch, and enforcement of AWS Backup policies. The modernization resulted in benefits such as improved scalability and performance, flexibility and portability of applications, enhanced security and compliance, efficient data management, reduced operational overhead, and significant cost savings.

AppWizard

June 19, 2025

Godfather Android malware now uses virtualization to hijack banking apps

A new iteration of the Android malware "Godfather" has emerged, utilizing advanced techniques to create isolated virtual environments on mobile devices for stealthy account data theft and transaction manipulation from legitimate banking applications. It targets over 500 banking, cryptocurrency, and e-commerce applications globally, employing a comprehensive virtual filesystem, virtual Process ID, intent spoofing, and a component called StubActivity. Godfather is delivered as an APK app with an embedded virtualization framework, scanning for installed target applications and launching them within its virtual environment. It intercepts user interactions with genuine banking apps, capturing sensitive data like credentials and PINs while presenting a legitimate interface. The malware can execute commands to unlock devices and initiate transactions while avoiding detection. Godfather first appeared in March 2021 and has evolved significantly since then, with the latest version representing a notable advancement over previous iterations. Users are advised to download apps only from trusted sources and remain cautious about app permissions to protect against this malware.

Winsage

June 19, 2025

[Fixed] How to Recover Unsaved Word Document on Windows 10/11

4DDiG Data Recovery is a tool designed to recover unsaved Word documents by scanning the AutoRecover folder and other locations. It can recover corrupted, deleted, unsaved, or formatted MS Office files with a high success rate and offers a free trial. Users can preview files before restoration, and the software is compatible with various storage devices and Windows operating systems (7, 8, 10, and 11) without requiring technical skills. To recover an unsaved Word document using 4DDiG, users should install the tool, select the drive where the documents were lost, scan for unsaved documents, preview, and then recover the desired files. Microsoft Word has built-in features for recovering unsaved documents, including the Document Recovery Pane and manual searches for AutoRecover files with ".asd" and backup files with ".wbk" extensions. Temporary files with a ".tmp" extension may also contain unsaved work and can be retrieved from a specific path. To prevent future losses, users are advised to enable AutoRecover and create backup copies in Word's settings. Common recovery questions include the ability to recover unsaved documents depending on AutoRecover settings and the locations of AutoSave files, which vary by operating system. For Windows, common paths include C:Users[Username]AppDataRoamingMicrosoftWord and C:Users[Username]AppDataLocalMicrosoftOfficeUnsavedFiles.

Winsage

June 18, 2025

Windows 11’s shiny new Start menu has a flaw that’s going to drive me insane

Windows 11's Start menu has been criticized by users for being less effective than that of Windows 10. Microsoft has made enhancements, including the removal of the "Recommended" section and the introduction of a scrollable list of applications. Users can choose from three presentation methods: Name List, Name Grid, and View Category. However, the category sorting system limits user control, as applications are automatically assigned to predefined sections, and users cannot create or modify these categories. If an app does not fit into a category, it will be placed in the "Other" section. Additionally, a category is only created if there are three or more apps, which can lead to further disorganization if one app is uninstalled. Some users are considering alternatives like Linux Mint for a more customizable experience.

Winsage

June 16, 2025

Microsoft: June Windows Server security updates cause DHCP issues

Microsoft has identified an issue with the June 2025 security updates that causes the Dynamic Host Configuration Protocol (DHCP) service to freeze on certain Windows Server systems. This affects the service's ability to apply renewals of unicast IP addresses, impacting network operations. Microsoft has acknowledged that the DHCP Server service may intermittently stop responding after the update and is working on a resolution. Additionally, other issues affecting Windows Server systems have been addressed, including application failures and authentication problems on domain controllers. Out-of-band updates were previously issued to fix bugs causing Hyper-V virtual machines to restart or freeze, and emergency updates were released for issues with Windows containers on certain Windows Server versions.

Tech Optimizer

June 9, 2025

Streamline Amazon Aurora database operations at scale: Introducing the AWS Database Acceleration Toolkit

The AWS Database Acceleration Toolkit (DAT) is an open-source solution that enhances database performance, particularly for Amazon Aurora, by utilizing Terraform for setup, provisioning, and maintenance. DAT helps organizations reduce time to market, improve customer satisfaction, and optimize costs. It is beneficial for DevOps teams, SaaS providers, and enterprises transitioning from commercial databases to Aurora. One example of its effectiveness includes a customer reducing database migration time from 12 months to 4 weeks for over 100 databases, achieving zero outages over six months, increasing database team productivity by 60-70%, and lowering infrastructure costs by 42%. DAT's architecture includes automated resource provisioning and security through Terraform, with source code available in a Git repository. It offers multiple provisioning options for Aurora clusters, including the Terraform CLI and Jenkins pipelines. Key modules include: - Aurora cluster module for creating new clusters with customization options. - Amazon RDS Proxy for enhancing application performance and security. - Aurora GlobalDB for creating clusters across AWS Regions for disaster recovery. - Aurora Monitoring for configuring CloudWatch dashboards to monitor database performance. Use case examples are provided in the Git repository for both Aurora PostgreSQL-Compatible and Aurora MySQL-Compatible engines. Deployment options include using Terraform directly, setting up a new Jenkins instance, or integrating with an existing Jenkins setup. To provision an Aurora PostgreSQL cluster, users must clone the DAT repository, navigate to the appropriate folder, configure the Terraform variable definition file, initialize the working directory, execute a plan, and apply the changes. Security features include customer-managed keys, integration with AWS Secrets Manager for password management, and enhanced monitoring through CloudWatch. To clean up, users can destroy the Aurora cluster with a Terraform command.

Winsage

May 27, 2025

Windows Server emergency update fixes Hyper-V VM freezes, restart issues

Microsoft has released an emergency update, KB5061906, to address unexpected freezes and restarts affecting Hyper-V virtual machines on Windows Server 2022, particularly Azure confidential VMs. This cumulative out-of-band update resolves a critical issue in the direct send path for guest physical addresses, which could cause these VMs to stop responding or restart. The update is not automatically installed and must be manually downloaded from the Microsoft Update Catalog. Standard Hyper-V deployments are largely unaffected, with rare exceptions. Organizations using Windows Server 2022 with Hyper-V should apply this update if they have not yet deployed the May 2025 Windows security update (KB5058385).

AppWizard

May 20, 2025

Android 16 QPR1’s new recents screen makes split-screen easier to find

In the Android 16 QPR1 Beta 1 release, Google redesigned the recents screen to improve user experience by making the app context menu more accessible. The new interface includes a pill-shaped button displaying the app's name and a downward arrow for additional options. The redesign addresses discoverability issues by allowing users to easily identify apps corresponding to task previews. The context menu offers seven primary actions: “App info,” “Split screen,” “Pin,” “Pause app,” “Screenshot,” “Select,” and “Close,” with the “Save app pair” option appearing only for split-screen tasks. Aesthetic enhancements include pill-shaped containers for the “Screenshot” and “Select” buttons and a blurred background of the user's wallpaper, aligning with Google’s Material 3 Expressive theme.

Tech Optimizer

May 20, 2025

How to Set Up PostgreSQL with NestJS and Docker for Fast Local Development: A Quick Guide

Launching a new project with PostgreSQL for NestJS development can be efficiently managed by running a local PostgreSQL instance in Docker. This setup includes a Dockerfile for the NestJS application, a docker-compose.yml file to connect Node and PostgreSQL, and an .env file for environment variables. The Dockerfile specifies a Node environment, while the docker-compose.yml file configures services for both the database and the API. The database service uses the PostgreSQL image, and the API service builds from the Dockerfile, ensuring that the database persists through reboots. An .env file is created to store configuration details such as database user, password, and database name. Additionally, package.json scripts are enhanced for quick access to the database and application containers. In the NestJS application, the main startup file initializes the app, and a TypeORM configuration file is provided for database connection settings. Common development commands include starting the services, viewing logs, tearing down containers, and accessing the database and application shells.