credential theft Archives

Tech Optimizer

August 31, 2026

Fake Chrome update scam could infect your computer

A fake Chrome update scam has emerged, linked to a Chrome extension called Enable Right Click & Copy - Smart Unlock + OCR, which was initially legitimate but later compromised. The extension had around 70,000 users before being removed from the Chrome Web Store on August 14 due to its malicious nature. Users may encounter deceptive warnings while browsing benign sites, urging them to download files instead of using Chrome's built-in update mechanism. Google advises against engaging with suspicious pop-ups requesting software installations. The scam highlights that trusted extensions can become threats without warning, and users should regularly review their installed extensions and check for updates directly within Chrome. Similar fake update alerts have also been reported in other Chromium-based browsers. Users are encouraged to adopt safety measures, such as using strong antivirus software, reviewing browser extensions, and being cautious with downloaded files. If a suspicious file has been executed, users should treat their computer as potentially compromised and take appropriate security actions.

AppWizard

August 27, 2026

Google forces Android apps to use memory more wisely as RAMpocalypse rages

Starting in early 2027, Android apps on Google Play must meet new memory performance standards due to rising RAM prices and consumer demand for streamlined smartphones. Google is concerned about a potential "ecosystem-wide memory crisis" and aims to improve memory efficiency in app development. The new standards will be implemented in two phases: the first phase in February 2027 will set thresholds for undesirable behavior and code optimization, while the second phase in April 2027 will enhance device migration with a zero-tap credential restoration feature. Specific memory limits include: - For devices with 8 GB of RAM: foreground app usage capped at 2.25 GB, 1.5 GB for user-perceived services, and 1.5 GB for background processes. - Devices with more than 16 GB of RAM will be largely exempt from these restrictions. - Bitmap memory usage limited to 200 MB for user-perceived and background services, with a cached limit of 400 MB across all devices. - Gaming applications will have different memory requirements. The DEX code optimization mandate aims to improve memory utilization, app launch speed, and runtime performance. The zero-tap sign-in requirement in the second phase seeks to streamline device migration and enhance security, addressing risks associated with manual sign-ins.

Winsage

August 22, 2026

Hackers abuse FTP server banners to deliver new Windows malware

Threat actors are exploiting FTP banners to conceal commands for deploying two undocumented remote access trojans (RATs), E4del and PINHOLE. This method was first observed by MalwareHunterTeam in July 2026, using shortcut files (.LNK) and FTP server banners as dead-drop resolvers to retrieve malicious commands. SOCRadar confirmed that this technique has been weaponized since early July 2026 and remains active, with new infrastructure identified as recently as August 2026. The attacks typically start with a ZIP archive leading to an LNK-based infection chain, likely initiated through phishing tactics. E4del is a Node.js-based RAT disguised within a digitally signed Electron application mimicking Discord, capable of executing commands, capturing screenshots, streaming desktops, and downloading additional payloads. It also includes a module for privilege escalation. PINHOLE retrieves its command and control configuration from Pinterest and SurveyMonkey, designed to leave a minimal footprint and employing shellcode fluctuation. It supports 14 commands, including file management and credential theft, but had only recorded 11 execution events at the time of analysis. SOCRadar notes that while using FTP banners is a novel approach, it is less stealthy than traditional web-based dead-drop resolvers. They provide indicators of compromise to help identify malicious infrastructure and infected machines.

Tech Optimizer

August 16, 2026

Best Free Antivirus Software 2026

Over the past decade, free antivirus software has significantly improved, now competing with paid security suites in malware protection. Independent testing from 2026 shows that Avast and AVG have achieved top scores in protection, performance, and usability. Microsoft Defender is a reliable option for Windows users who prefer not to install additional software. The leading free antivirus options in 2026 include Avast Free Antivirus, AVG AntiVirus Free, Microsoft Defender Antivirus, Bitdefender Antivirus Free, Avira Free Security, and Malwarebytes Free. Avast Free Antivirus received perfect scores of 6/6 in protection, performance, and usability from AV-TEST in May and June 2026, totaling 18 out of 18. AVG AntiVirus Free matched these scores and also received an Advanced+ rating from AV-Comparatives. Microsoft Defender scored 6/6 in protection, 5.5/6 in performance, and 6/6 in usability, totaling 17.5 out of 18. Bitdefender Antivirus Free is recognized for its lightweight protection, while Avira Free Security offers additional utilities. Malwarebytes Free is noted for its effectiveness in malware removal. Antivirus software is essential in the current cybersecurity landscape, which includes threats like ransomware and phishing attacks. In 2025, the FTC reported approximately .8 billion in fraud losses, a 25% increase from the previous year. While antivirus software cannot eliminate all forms of online fraud, it plays a crucial role in preventing attacks from escalating to data theft or system compromise. Users should be cautious of counterfeit antivirus software and are advised to download programs from official vendor websites. Free antivirus solutions generally focus on malware detection, while paid options offer additional services. For Windows 11 users, Avast Free Antivirus, AVG AntiVirus Free, and Microsoft Defender are recommended options based on 2026 evaluations.

AppWizard

August 11, 2026

Xodus Cracks Xbox Authentication and Game Package Decryption to Bring PC Game Pass to Linux

Developers of the Heroic Games Launcher have announced Xodus, an open-source project aimed at enabling access to PC Game Pass on Linux and macOS. Launched on August 10, 2026, Xodus has successfully addressed Xbox identity authentication and the decryption of MSIXVC packages, allowing local play of Game Pass titles for Linux and macOS users. Currently, the only way to access Game Pass on non-Windows devices is through Xbox Cloud Gaming, which requires a Game Pass Ultimate subscription and introduces latency. Xodus employs a layered architecture, including an Xbox Authentication Library (xal-rs) for managing Microsoft account sign-ins and license verification, and a reimplementation of the xgameruntime.dll for license checks and Xbox service access. The project can retrieve MSIXVC game packages using a valid Game Pass subscription and decrypt executables for local storage. However, it does not yet support UWP-based titles and lacks a user-friendly interface for general users. The project is under pressure due to Microsoft's upcoming transition to the MSIXVC2 package format, which Xodus does not currently support. Xodus is in early development with only a command-line interface available, and the team is working on emulating the GDK Gaming Services layer necessary for game initialization. The project is legal as it reimplements Xbox runtime behavior without enabling piracy, but it faces risks if Microsoft alters its authentication infrastructure.

Winsage

August 6, 2026

What Happens To Your Computer If You Skip Windows Updates

Windows operating systems have hidden functionalities and privacy enhancements introduced through regular updates, which are crucial for maintaining system security. Neglecting updates leaves known vulnerabilities open to exploitation by malicious actors, as Microsoft typically addresses security flaws only after they are identified. Windows Update is the primary mechanism for addressing these vulnerabilities. Unpatched systems become targets for cyber threats, leading to severe consequences such as remote code execution, privilege escalation, ransomware attacks, and boot-level compromises. The PrintNightmare vulnerability (CVE-2021-34527) was acknowledged by Microsoft after active exploitation was detected, leading to the release of patches. The WannaCry cyberattack in May 2017 affected over 300,000 computers due to an unpatched SMB flaw, highlighting the risks of outdated systems. Timely updates can prevent vulnerabilities that may lead to ransomware, credential theft, and other compromises. Users are advised to install updates promptly and avoid connecting unsupported versions to the internet.

Winsage

August 4, 2026

Microsoft Expands Windows Hello ESS to External Fingerprint Readers

Microsoft is integrating Windows Hello Enhanced Sign-in Security (ESS) with compatible external fingerprint readers, allowing passwordless sign-ins on a wider range of Windows 11 devices. This update enhances biometric authentication security by utilizing hardware-backed protections such as the Trusted Platform Module (TPM) and Virtualization-Based Security (VBS), which isolate sensitive biometric data from malware and unauthorized access. Previously, only devices with integrated fingerprint sensors could fully utilize ESS, but the recent update (KB5101684) enables external fingerprint readers to function within the ESS framework. The update is being rolled out for Windows 11 versions 25H2 and 24H2, and users can set up fingerprint authentication by connecting a compatible reader. This advancement aids IT administrators in implementing passwordless authentication while maintaining security protocols.

Winsage

August 3, 2026

Microsoft warns Windows PC users of Russian hackers on hotel WiFi

Microsoft has issued a warning to Windows PC users about Russian hackers targeting individuals using hotel WiFi networks. The campaign, named CaptiveCrunch and attributed to the Storm-2945 group, focuses on corporate travelers and employs tactics like credential theft and malware distribution through compromised guest networks. Microsoft has been monitoring this activity since May, noting its impact on hospitality networks utilizing captive portals. Hackers have been redirecting users to counterfeit sign-in pages to steal credentials without phishing emails. The threat may also extend to Android devices, with hackers using deceptive techniques to manipulate users into downloading malicious APK files. The hackers employ fake verification checks and sign-in prompts, sometimes misleading users into Microsoft's legitimate authentication process to gain access to accounts. Microsoft has identified a specific remote-access trojan named CornFlake, which can record keystrokes, steal credentials, and capture screenshots. Recommendations for travelers include using mobile hotspots, avoiding updates through captive portals, strengthening authentication methods, and blocking unnecessary device-code authentication.

Winsage

August 1, 2026

Not sure whether to use Windows Hello or Enhanced Sign‑in Security? This breakdown makes the choice easy

Microsoft will introduce Enhanced Sign-in Security (ESS) in the August 2026 update for Windows 11, allowing support for compatible external fingerprint readers. ESS aims to enhance the security of the authentication process rather than improve the accuracy of biometric recognition. Unlike standard Windows Hello, which processes biometric authentication through the operating system, ESS utilizes Virtualization-Based Security (VBS) and Trusted Platform Module (TPM) 2.0 to isolate sensitive operations in a protected environment. ESS-compatible fingerprint readers have dedicated secure processors, store templates internally, and communicate with the operating system via encrypted channels. Users can enable ESS by navigating to Settings > Accounts > Sign-in options on their devices. If a device does not support ESS, standard Windows Hello remains a robust authentication option.

Winsage

August 1, 2026

Windows Hello vs. Enhanced Sign‑in Security: Which sign‑in method actually keeps your Windows 11 PC safer, and what’s the difference?

Microsoft will introduce Enhanced Sign-in Security (ESS) in the August 2026 update for Windows 11, which will support compatible external fingerprint readers. ESS aims to strengthen the authentication process against potential attacks by shifting processing to isolated, hardware-protected environments using Virtualization-Based Security (VBS) and TPM 2.0 technology. Unlike standard Windows Hello, which processes biometric authentication through the operating system, ESS-compatible devices perform more processing within the hardware itself, ensuring that only authentication results are sent to the OS. To enable ESS, users must navigate to Settings > Accounts > Sign-in options and follow prompts to set up their fingerprint recognition. Existing non-ESS biometric enrollments will be removed during the upgrade to ensure security.