cookies Archives

Winsage

July 8, 2026

Trojanized LetsVPN installer gives attackers remote access to Windows PCs

A malware campaign has been discovered that exploits the VPN service LetsVPN. Researchers from ThreatLocker found a malicious Windows installer that pretends to be the legitimate LetsVPN application while deploying a remote access trojan (RAT) called GoodPersonRAT. The malware allows attackers to control infected systems using stealth techniques. The malicious installer first deploys the RAT and then installs the authentic LetsVPN application, creating an illusion of legitimacy. The package identified as Kuailian_win-setup.86.msi contains the legitimate LetsVPN installer, a loader, and an encrypted payload. GoodPersonRAT features include remote desktop control, file upload/download, command execution, proxying, keylogging, and clipboard monitoring. It specifically targets Telegram Desktop users by archiving critical account information and altering proxy settings. The malware ensures persistence through Windows services and scheduled tasks and can undermine security software. The LetsVPN installer is legitimate and signed, but the MSI package is unsigned and contains malicious components. Users are advised to download software only from official sources and verify digital signatures.

Winsage

July 8, 2026

Windows 11 cleanup is finally simple with this powerful open‑source tool that strips bloat, boosts speed, and gives you real control

Windows 11 includes built-in tools like Storage Sense, Temporary Files settings, and Storage Recommendations for managing storage. BleachBit is a free, open-source cleanup utility for Windows 11 that removes temporary files, caches, logs, and browsing data without ads. Users can download it via a standard installer or a portable version, with installation possible through the command line. BleachBit features a "Preview" option to estimate storage recovery before deletion and offers recommended cleanup options such as temporary files, logs, and the Recycle Bin. It includes a file shredder for securely deleting sensitive files and can wipe free disk space, although this is not recommended for regular maintenance. BleachBit does not have a Registry cleaner, which can prevent potential system issues. While it does not directly speed up Windows 11, it can free up storage space and resolve some cache-related issues. Users comfortable with Windows 11's built-in tools may not need BleachBit, but it offers greater control for those wanting to manage browser data and temporary files more effectively.

Winsage

July 3, 2026

Microsoft Edge finally lets you sign in with a Google account

Microsoft Edge has been updated to enhance compatibility with Google services, allowing users to sign in with their Google account for easier import of bookmarks and browsing history. This feature is part of a controlled rollout starting with version 150.0.4078.48 and is available for both Windows and macOS devices. Other updates include refined language for managing third-party cookie settings, Intune MAM protected downloads directing files to OneDrive, a DowngradeVersion policy for WebView2 applications, enhanced security for the "View in File Explorer" feature, and the ability for administrators to set severity thresholds for security update alerts. Additionally, the Sidebar app list has been retired.

Tech Optimizer

July 3, 2026

Why identity theft protection now matters just as much as antivirus

Cybercrime has shifted focus from targeting individual devices to stealing credentials and personal data for identity theft. In 2024, consumer losses due to fraud reached billion, a 25% increase from the previous year, with over a million identity theft reports filed. Stolen passwords and session cookies are central to most breaches, making credential theft the primary enabler of attacks. Password reuse is a significant vulnerability, with 65% of individuals reusing passwords, leading to increased risk of account takeovers through credential stuffing. Bitdefender offers features like Scam Protection Pro, which protects against fraud across email, chat, and SMS, and identity monitoring in Ultimate Security that alerts users to data leaks in real-time. In 2025, researchers identified approximately 2 billion unique leaked credentials, emphasizing the need for identity protection alongside traditional antivirus solutions.

AppWizard

June 23, 2026

Telegram’s ad business: How the messaging app makes money

Telegram has established an advertising model that focuses on monetizing public channels, selling ads based on channel topics rather than user identity. Revenue generated from ads is split evenly between Telegram and the channel owner, with no data-mining or behavioral targeting involved. The primary ad format is Sponsored Messages, which appear in public channels with at least 1,000 subscribers and consist of a text block and optional call-to-action button. Advertisers can purchase these ads through a self-serve portal without demographic targeting, ensuring no personal data is used for placements. Public channels are treated as independent units, with 50% of ad revenue going to channel owners, paid in Toncoin. Telegram's ad system has become more accessible by lowering minimum spend requirements. In addition to Sponsored Messages, Telegram is developing Mini Apps funded by its in-app currency, Stars. Regulatory scrutiny has increased, with various countries imposing bans or restrictions on Telegram for reasons related to content moderation and compliance, such as a temporary ban in India in June 2026 due to exam fraud investigations.

AppWizard

June 21, 2026

I changed one Android 17 setting and made my Pixel home screen so much cleaner

Google Pixel phones have received an update that enhances home screen customization, allowing users to remove the At a Glance widget and eliminate app names for a cleaner aesthetic. The Android 17 update introduces five app icon styles and shapes, including a Minimal option that aligns icons with a color palette, and a Create option for custom designs with six styles. The Google Pixel 10 is highlighted as the ideal device to experience these features and future updates.

Winsage

June 19, 2026

WBNS 10TV

Organizations use cookies and data to enhance user experience and maintain online platform integrity by delivering services, monitoring outages, protecting against spam and fraud, and measuring audience engagement. When users accept all cookies, additional functions include developing new services, displaying and measuring advertisements, and personalizing content. Rejecting all cookies results in non-personalized content and advertisements based on current content and user location. Cookies also help ensure age-appropriate functionality. Users can explore privacy settings through "More Options" or visit g.co/privacytools for guidance.

Winsage

June 12, 2026

Hackers Use Fake Windows Update Installers to Deliver OnyxC2 Credential Stealer

OnyxC2 is a sophisticated credential stealer available for a subscription fee of 0 per month, distributed through disguised lures such as fake Windows updates and legitimate software installers. It functions as a commercial product with features like an automated payload builder, tiered licensing, and a centralized web dashboard. The malware boasts a 99% detection-evasion rate, successfully evading major antivirus solutions during tests. It is developed in C++, utilizing direct system calls and mutating with each build to avoid detection. OnyxC2 collects data from around 210 applications, targeting 45 web browsers, password managers, cryptocurrency wallets, and FTP clients. The malware is delivered using DLL sideloading, where a password-protected archive contains a legitimate application and a malicious DLL. The attacker's DLL is disguised by inflating its size and is loaded by a trusted binary. The malicious code remains encrypted on disk and decrypts in memory to evade analysis. OnyxC2 communicates with a Cloudflare-fronted command-and-control server to manage infected hosts and execute commands like hardware registration and cookie uploads. The threat extends to business environments, targeting FTP and email clients, with stolen session cookies allowing ongoing access to corporate infrastructure. Implementing anti-data exfiltration controls is recommended as a mitigation strategy.

Tech Optimizer

June 9, 2026

Fake ChatGPT download site infects Windows and Mac users with malware

A counterfeit website, openew[.]app, is impersonating OpenAI's official ChatGPT download page and distributing malware. Windows users who download from this site receive a credential-stealing malware loader, while macOS users are infected with Odyssey Stealer, a variant associated with cryptocurrency theft. The fake site mimics the legitimate ChatGPT interface and uses HTTPS to appear trustworthy. The Windows malware, Chat_GPT.exe, creates a back channel to an attacker-controlled server, while the macOS malware captures sensitive data and attempts to replace legitimate cryptocurrency wallet applications with compromised versions. Users who download from official sources remain safe, but those who click on ads or unfamiliar links risk compromising their online accounts and sensitive information. Malwarebytes offers protection against this malware. Indicators of compromise include specific file hashes and network indicators associated with the malicious site.

AppWizard

June 9, 2026

This New Computer Virus Is Disguising Itself As A Popular Video Game

Old-school gaming consoles are seeing a resurgence, but hackers are exploiting this trend with a malware campaign called "WeedHack," which emerged in January. This malware operates on a "Malware-as-a-Service" model, allowing users to purchase it to infect victims. WeedHack functions as a remote access infostealer, compromising computers to manipulate screens, access webcams, and steal sensitive data. It propagates by enticing users with unofficial "Minecraft" mods and clients, often using videos and download links as bait. Additionally, it employs "SEO poisoning" to promote fake websites as legitimate sources for these mods on platforms like Discord and Reddit. WeedHack disguises itself as a JAR file, similar to the official "Minecraft" client, and once executed, it installs its payload from Ethereum server domains. It can insert itself into antivirus exclusion lists, evading detection, and McAfee's tests show that Windows Defender is ineffective against it. The malware collects extensive information, including Wi-Fi networks and browser cookies, and grants hackers complete control over infected computers. The WeedHack virus serves as both malware and a training ground for aspiring hackers, structured into two tiers: a free version with core capabilities and a paid subscription for advanced features. A community has formed around WeedHack, offering tutorials, a Discord server, and a website for feature requests and custom payload creation. This community aspect lowers the barrier for newcomers, particularly targeting a younger audience that may not understand online safety.