DDoS attacks Archives

TrendTechie

March 12, 2026

Хакер уничтожил крупнейший французский торрент-трекер и обвинил владельцев в хранении данных кредитных карт миллионов пользователей

YggTorrent, a prominent French private torrent tracker launched in 2017, was reportedly destroyed by a hacker known as Gr0lum in early March, leaving 6.6 million users affected. Gr0lum accused the YggTorrent administration of engaging in DDoS attacks against competitors, purging dissenting uploaders, and sabotaging their own API. In 2025, YggTorrent introduced a Turbo subscription model that hampered downloads, leading to user criticism. Following its downfall, YggTorrent has made a tentative return as a countdown website, with the administration denying all allegations and asserting that databases and backups were not destroyed. The French piracy community remains skeptical of these claims.

Tech Optimizer

February 16, 2026

Phishing Lures Spread XWorm Remote Access Trojan

A cyber-espionage campaign is utilizing the XWorm Remote Access Trojan (RAT) to infiltrate systems via phishing emails and a Microsoft Office vulnerability (CVE-2018-0802). XWorm, first detected in 2022, allows attackers remote control over infected computers for surveillance and data theft. The campaign uses business-oriented phishing emails with malicious Excel attachments that exploit the vulnerability to execute a fileless attack. The malware connects to a command-and-control server, encrypting communications and transmitting system details. XWorm features a plugin architecture with over 50 modules for various malicious activities, including credential theft and DDoS attacks. Security experts highlight the ongoing risk of legacy software vulnerabilities and recommend patching outdated components.

Tech Optimizer

February 13, 2026

MyDoom virus: What it is and why it mattered

In January 2004, the MyDoom computer worm quickly spread to email inboxes in 168 countries, becoming one of the fastest-spreading pieces of malware in internet history. It exploited human behavior by enticing users to open email attachments that appeared to be delivery errors or system notifications. MyDoom replicated itself through email without corrupting files or destroying data, harvesting email addresses from infected computers to send copies to new victims. The two main variants, MyDoom.A and MyDoom.B, targeted the SCO Group and Microsoft, respectively, and demonstrated the potential for email worms to be weaponized for coordinated attacks. MyDoom primarily targeted Windows-based operating systems and used deceptive emails to propagate. Once infected, it installed a backdoor for unauthorized remote access, forming a botnet for further attacks. MyDoom's effectiveness was due to its alignment with user behavior and the limited security measures of the time, leading to significant disruptions in email communication and an estimated economic impact of approximately billion. Although no longer a current threat, MyDoom's legacy influenced modern email security protocols, leading to improved filtering, behavior-based detection, and multi-layered defense strategies.

Tech Optimizer

December 3, 2025

Wacatac Trojan: What Is It And How To Remove It

The Wacatac Trojan is a type of malware first documented in January 2020, known for disguising itself as benign software to trick users into installation. It operates under various aliases, including Trojan:Script/Wacatac and Trojan:Win32/Wacatac, and can connect to Command-and-Control (C2) servers for remote manipulation. Its capabilities include stealing credentials, evading antivirus detection, creating or joining botnets, causing system damage, enabling spyware functions, acting as Remote Access Tools (RATs), and downloading additional malware. Symptoms of infection include sluggish performance, program failures, unexplained storage reductions, and unfamiliar processes. Wacatac spreads through unofficial software, malicious web pages, and phishing emails. Removal is best achieved using reputable antivirus software, while prevention involves avoiding questionable downloads, practicing good digital hygiene, keeping software updated, backing up data, and using quality antivirus solutions. False positives can occur, where legitimate programs are mistakenly flagged as Wacatac.

AppWizard

December 1, 2025

SmartTube YouTube app for Android TV breached to push malicious update

An attacker gained access to the developer's signing keys for SmartTube, an open-source YouTube client for Android TV, leading to a malicious update being distributed. The developer, Yuriy Yuliskov, confirmed the compromise and plans to release a new version with a different app ID. Users reported that Play Protect flagged SmartTube as a potential threat. A reverse-engineered version, identified as 30.51, contained a hidden library named libalphasdk.so, which was not part of the public source code and collected device fingerprints without user knowledge. There is currently no evidence linking the malware to account theft or DDoS attacks, but concerns remain. Yuliskov has announced safe beta and stable test builds on Telegram, but they are not yet on GitHub. Users are advised to stay on older verified builds, avoid logging in with premium accounts, and disable auto-updates. Version 30.19 does not trigger Play Protect warnings, suggesting it may be safer.

AppWizard

October 12, 2025

EA Sports FC 26 players get a red card for cheating the system with VPNs

Players of EA Sports FC 26 discovered a pricing anomaly that allowed them to purchase FC points at a significantly reduced rate by using a VPN. The error occurred on Indonesian servers, where 2,000 rupiah was mistakenly listed instead of 2 million rupiah. This led to players exploiting the glitch, prompting EA to suspend or ban those who took advantage of it. The incident was criticized by the community, with some attributing the issue to Apple Pay's payment process.

Tech Optimizer

October 10, 2025

From infostealer to full RAT: dissecting the PureRAT attack chain

An investigation revealed that a Python-based infostealer campaign led to the deployment of PureRAT, a sophisticated remote access trojan (RAT). The campaign began with a phishing email containing a ZIP archive that included a legitimate PDF reader executable and a malicious DLL. The DLL executed a series of payloads, including a Python info-stealer that harvested sensitive data and exfiltrated it via the Telegram API. The attack progressed to a .NET executable, which employed techniques like process hollowing and evasion tactics to load additional payloads. The final payload, Mhgljosy.dll, was identified as PureRAT, which established an encrypted command-and-control (C2) channel and allowed for extensive control over the compromised host. The C2 server was traced to Vietnam, suggesting a connection to the PXA group. The malware's functionality included host fingerprinting, command execution, and potential access to sensitive information and resources. Indicators of compromise included specific file hashes, registry keys, and IP addresses associated with the C2 server.

Tech Optimizer

September 27, 2025

Antivirus Statistics 2025: Revealing Growth & Usage

The global antivirus software market is projected to reach approximately billion by 2025 and grow at a compound annual growth rate (CAGR) of around 6.9% through 2029. By 2025, 84% of users are expected to have antivirus software installed on their computers, and approximately 68% will have antivirus protection on their smartphones. In recent testing, antivirus products were evaluated against 212 test cases, with 560,000 new malware variants detected globally each day. Microsoft Defender and Norton achieved perfect protection scores of 100% in evaluations conducted in June 2025. Microsoft is redesigning Windows to relocate antivirus and Endpoint Detection and Response (EDR) applications out of the kernel. In 2024, the U.S. government prohibited the sale of Kaspersky antivirus software due to national security concerns. Gen Digital anticipates revenue between .70 billion and .80 billion for 2026. The integration of AI into malware frameworks is pushing antivirus vendors to adopt machine learning-driven threat detection models. Antivirus plans are predominantly priced between and , with 32.1% of plans falling within this range. Only 3.6% of antivirus options are free, and 93% of products offer a 30+ day money-back guarantee. 79% include defenses against ransomware and phishing attacks, and 61% come with a built-in firewall. The average maximum coverage per antivirus subscription extends to 24 devices. In 2024, around 121 million Americans used third-party antivirus software, with 17 million adults intending to adopt antivirus software within six months. Among users of commercial antivirus software, 74% reported encountering malware in the past year. Detection effectiveness in malware tests often surpasses 99% for leading antivirus products, while false positive rates vary significantly. Symantec leads the Windows antivirus market with a share of 13.81%, followed by AVAST Software (11.93%) and ESET (11.03%). Approximately 560,000 new malware variants are identified daily, and there are over 1 billion documented malware samples worldwide. Ransomware attacks targeting Windows constitute around 93% of all enterprise ransomware incidents. In 2024, 17% of U.S. adults reported using antivirus software on mobile phones, with 73% opting for paid versions. Free antivirus solutions typically offer basic features but lack advanced modules. The enterprise antivirus market is projected to reach approximately .0 billion by 2024, with significant growth expected in the coming years. North America holds approximately 48.3% of the global antivirus market share, while Europe experiences growth due to regulations. IoT devices are increasingly targeted, with unpatched firmware responsible for about 60% of IoT breaches. The average cost of an IoT security failure incident is approximately 0,000. Typical antivirus subscriptions range from to 0 per year, with many vendors offering multi-device bundles.

Tech Optimizer

August 21, 2025

The Best Antivirus for Gaming PCs in 2025: 6 Top Picks Compared

McAfee has enhanced its offerings for gaming PCs, providing robust real-time protection and firewall capabilities that block threats without affecting performance. The Gamer Security version is now integrated within McAfee+ tiers and prioritizes CPU resources during gaming sessions. However, it uses more system resources compared to alternatives like Malwarebytes and Panda Dome, and some features, such as VPN and identity monitoring, are only available in higher-tier plans. The McAfee plans include: - McAfee Free Tools: Limited tools like web protection and password manager trials (Free) - McAfee+ Premium Individual: Real-time protection, VPN, password manager (.99 first year) - McAfee+ Advanced Individual: Adds identity monitoring and personal data cleanup (.99 first year) - McAfee+ Unlimited Individual: Adds identity theft coverage and security freeze tools (.99 first year) Key considerations for antivirus software for gaming PCs include performance impact, robust threat detection, dedicated gaming mode, resource usage, false positives, user interface, cross-device security, and customer support. Gaming PCs are susceptible to malware, ransomware, and phishing attacks, making reliable antivirus solutions essential. Panda Dome is highlighted as a suitable option for gamers, offering real-time protection, a dedicated gaming mode, and minimal resource usage. Free antivirus options can be used while gaming but may lack advanced features. It is not advisable to disable antivirus software during gaming, and running antivirus can slightly reduce FPS. Gaming mode enhances the gaming experience by pausing background scans and notifications. The best antivirus for gaming should have real-time protection, low resource usage, a gaming mode, robust threat detection, ransomware protection, a VPN, and password managers. Some antivirus software may block online game servers, but most have an allowlist function. Streamers should also use antivirus software while live to protect against additional risks. Antivirus programs can detect cheat software or malicious mods, especially if they contain malware.

Winsage

August 12, 2025

Windows DoS Flaws Enable DDoS Attacks on Domain Controllers

Researchers from SafeBreach Labs have identified four denial-of-service (DoS) vulnerabilities in Microsoft’s Windows operating system that could allow attackers to use publicly accessible Windows domain controllers in distributed denial-of-service (DDoS) attacks. These vulnerabilities exploit protocols such as Remote Procedure Call (RPC) and Lightweight Directory Access Protocol (LDAP), enabling the creation of stealthy botnets without authentication. The flaws arise from improper handling of RPC and LDAP requests in Windows Server environments, including versions up to 2025. One flaw allows unauthenticated users to trigger infinite loops, consuming system resources and facilitating reflection attacks. Microsoft released patches for these vulnerabilities in August 2025, but unpatched systems remain at risk. The vulnerabilities were disclosed at DEF CON 33, where proof-of-concept attacks were demonstrated. SafeBreach has labeled these flaws as “Win-DoS” due to their widespread applicability. Organizations are advised to audit network exposures and isolate domain controllers to mitigate risks. The increase in hyper-volumetric DDoS attacks highlights the urgency for proactive defenses, including automated mitigation tools and regular vulnerability scans. Experts recommend implementing stringent firewall rules to restrict RPC and LDAP exposure and using behavioral analytics to detect anomalous traffic.