counterfeit websites Archives

AppWizard

June 15, 2026

Your inbox might finally get quieter now that Google is taking down a major AI scam ring

Google has filed a lawsuit against the alleged China-based "Outsider Enterprise" network for using Gemini AI to conduct extensive phishing scams. The company is working with the FBI and major telecommunications carriers, including AT&T, T-Mobile, and Verizon, to intercept scam messages. Investigators have linked the operation to over 9,000 counterfeit websites and more than one million malicious URLs, primarily targeting Android users. The "Outsider" phishing platform offered over 290 website templates for mimicking banks and other entities, utilizing AI-generated code. Google is also supporting seven bipartisan bills aimed at combating AI-driven fraud and has implemented AI-driven defenses that block over 10 billion malicious messages each month.

Tech Optimizer

May 31, 2026

‘Your devices could be at risk’: how antivirus scams trade on fear

Many users receive emails claiming their McAfee antivirus protection is nearing expiration, offering an 89% renewal discount for same-day payment. These emails are not from McAfee but are attempts by cybercriminals to steal personal financial information. The emails often create a false sense of urgency and may contain inconsistent grammar and obscure sender addresses. Clicking links in these emails can lead to counterfeit websites designed to harvest personal data. Users are advised to verify their subscription directly on McAfee.com and report suspicious emails to McAfee and their email provider.

AppWizard

May 18, 2026

Why There’s Simply No Need For Android Antivirus Apps Anymore

Android users are advised to avoid clicking on random links and sideloading applications to maintain safety. Threats such as phishing scams, deceptive pop-ups, and malicious links still exist in the Android ecosystem. Android includes built-in security features like Google Play Protect, which scans applications for malware and alerts users to threats, and Google Safe Browsing, which warns against hazardous websites. Monthly security updates are released to patch vulnerabilities, but the speed of these updates can vary by manufacturer. Users should avoid downloading apps from unverified sources, regularly review app permissions, and install security updates promptly. While antivirus applications can be useful, cultivating smart usage habits is crucial for effective security.

AppWizard

April 21, 2026

Trojanized Android App Fuels New Wave of NFC Fraud

A new variant of the NGate malware family has emerged, using a trojanized Android application to capture payment card data and personal identification numbers (PINs). This modified version of HandyPay, a legitimate NFC relay app, has been distributed since November 2025, primarily targeting users in Brazil. The malware intercepts NFC payment card data and allows fraudulent transactions. Two distinct malware samples have been observed, delivered through phishing infrastructure that impersonates a Brazilian lottery site and a Google Play listing for a card protection tool. The trojanized app captures NFC data, requests the victim's card PIN, and transmits this information to attacker-controlled infrastructure. It requires minimal permissions, leveraging its role as the default payment application to evade detection. Evidence suggests that generative AI tools may have been used in its development, indicated by emoji markers in debug logs. ESET has reported its findings to Google, and Google Play Protect can detect known versions of the malware. The developer of HandyPay is investigating the misuse of its application.

AppWizard

April 17, 2026

New RecruitRat, SaferRat, Astrinox, Massiv Android Malware Found Targeting 800 Apps

Cybersecurity researchers from Zimperium zLabs have identified four families of Android malware—RecruitRat, SaferRat, Astrinox, and Massiv—targeting banking and cryptocurrency applications. These malware families can extract sensitive information from over 800 applications. They primarily use phishing and smishing to lure users into downloading malicious software. Phishing involves creating fake websites resembling legitimate login pages, while smishing uses urgent text messages with links to download harmful payloads. RecruitRat targets job seekers with fake employment websites, and SaferRat promises free access to premium video services. Astrinox mimics a business tool and has been linked to a fraudulent Apple App Store page, while Massiv's distribution methods remain unclear. Once installed, these malware applications initiate Overlay attacks, displaying counterfeit screens to capture user credentials. They also use a "blindfold" technique to obscure their activities by overlaying static images on the user's screen. The malware can intercept security codes, capture one-time passwords, and employ keylogging techniques. RecruitRat has a library of over 700 counterfeit login pages that activate with targeted apps. Researchers recommend avoiding links in urgent messages and downloading apps only from official sources.

Tech Optimizer

November 2, 2025

Hackers Exploit Fake Microsoft Teams Ads to Deploy Rhysida Ransomware

Cybercriminals are deploying deceptive ads for Microsoft Teams that lead users to malicious software downloads, including ransomware like Rhysida’s OysterLoader. These ads appear prominently in search results and redirect users to counterfeit websites. The malware, often disguised as the legitimate Teams application and signed with counterfeit certificates, can evade antivirus detection and compromise systems. Microsoft has revoked over 200 compromised certificates to disrupt these campaigns and issued warnings about downloading software from unverified sources. The rise of these attacks targets collaboration tools, particularly amid the remote work trend, with hackers exploiting platforms like Teams for espionage and credential theft. Experts recommend navigating directly to official websites and implementing strong endpoint protection to combat these threats.

Tech Optimizer

October 19, 2025

How Avast Helps Protect Millions From Online Scams, Malware, and Phishing in 2025 – Report by Expert Consumers

Avast has been recognized by Expert Consumers for its effectiveness in protecting users from online scams, phishing attacks, and malware through innovative AI-driven methodologies. The rise in cyber threats, including phishing and social engineering attacks, has made robust antivirus protection essential. Avast employs tools such as Scam Guardian Pro, Web Guard, and Email Guard to secure users during online interactions. Its AI-driven defense model continuously adapts to new attack methods, while its malware engine provides real-time scanning and behavior-based detection. Avast's protection spans multiple platforms, including Windows, Mac, Android, and iOS, with tailored safeguards for each operating system. Recommended products include Avast Premium Security and Avast Ultimate, which offer comprehensive security solutions. The demand for adaptive security solutions is increasing as AI transforms scam methods, and Avast aims to redefine antivirus protection through machine learning and global threat intelligence.

Tech Optimizer

September 12, 2025

Shamos malware tricks Mac users with fake fixes

A new malware campaign targeting Mac users has been identified, featuring a variant called Shamos, part of the Atomic macOS Stealer (AMOS) family, created by the cybercriminal group COOKIE SPIDER. The malware spreads through deceptive tactics that lure victims to counterfeit websites or GitHub repositories, where they are tricked into executing a command in Terminal that downloads Shamos, bypassing macOS Gatekeeper protections. Once installed, Shamos seeks sensitive information such as Apple Notes, Keychain items, browser passwords, and cryptocurrency wallets, sending the stolen data to attackers along with additional malware. The fraudulent distribution of these "fixes" is facilitated through malvertising campaigns and imitation tech support sites. Victims are encouraged to execute commands that download malicious scripts, which can capture passwords and disable file protections, allowing Shamos to maintain control even after system restarts. To protect against Shamos, users are advised to avoid running unfamiliar commands, steer clear of sponsored search results, be cautious with GitHub projects, use strong antivirus protection, consider personal data removal services, and keep macOS updated to close vulnerabilities.

Winsage

August 28, 2025

Windows Users: Global UpCrypter Phishing Attack is Expanding

Cybersecurity experts have reported a significant increase in phishing emails targeting Microsoft Windows devices, linked to UpCrypter, a loader that installs remote access tools (RATs) for long-term access to compromised systems. These phishing emails often appear as missed voicemails or purchase orders, leading victims to counterfeit websites that prompt them to download a ZIP file containing a JavaScript dropper. This script executes PowerShell commands to connect to attacker-controlled servers, initiating further malware deployment. UpCrypter scans the system for security monitoring and can reboot to disrupt investigations if detected. If not, it downloads additional payloads, including PureHVNC for remote desktop access, DCRat for spying and data theft, and Babylon RAT for complete control over infected devices. Attackers use techniques like steganography, string obfuscation, and in-memory execution to evade detection. This phishing campaign, active since early August 2025, has affected various sectors, including manufacturing, technology, healthcare, construction, and retail/hospitality, with significant activity reported in countries like Austria, Belarus, Canada, Egypt, India, and Pakistan. Detections of this malware have doubled in two weeks, indicating a rapid escalation of the operation. Organizations are urged to implement robust email filtering and train employees to recognize these threats.

Tech Optimizer

August 2, 2025

Best Antivirus for Windows 10 (2025): Avast Awarded Top PC Security Solution by Software Experts

Avast has been recognized by Software Experts as a leading antivirus solution for Windows 10 in 2025, specifically highlighting Avast Premium Security and Avast Ultimate for their robust security frameworks, advanced privacy features, and user-friendly interfaces. Avast Premium Security offers real-time protection against viruses, malware, and ransomware, a ransomware shield, webcam protection, scam detection, anti-phishing protection, an advanced firewall, and email scanning. Avast Ultimate includes additional tools such as Avast SecureLine VPN for internet traffic encryption, Avast Cleanup Premium for system optimization, and Avast AntiTrack for digital privacy. Avast is a global cybersecurity firm that provides comprehensive protection across various platforms and has been acknowledged by independent testing labs.