downloading Archives

Winsage

April 14, 2026

This fake Windows 11 24H2 update looks perfect, until it avoids antivirus and steals your passwords

Cybercriminals are using sophisticated tactics to deceive users, particularly with a counterfeit website posing as a legitimate Windows 11 update. This site operates under the domain microsoft-update[.]support and is designed to trick individuals into downloading malware that compromises sensitive information. The site is written in French and mimics a genuine cumulative update for Windows 11, version 24H2, featuring a convincing KB article number and a blue download button. The malware is packaged as a Windows update using the WiX Toolset 4.0.0.5512 and is labeled "WindowsUpdate 1.0.0.msi," with properties that suggest it is from Microsoft. At the time of analysis, VirusTotal showed no detections for the malware, which conceals its harmful code within an Electron shell, making it difficult to identify. Users are advised to download updates directly through the Windows Settings app or from Microsoft's official support hub.

AppWizard

April 13, 2026

Microsoft is shutting down its lightweight Outlook Lite app for Android in 6 weeks

Microsoft will retire Outlook Lite, its lightweight email client for Android, on May 25, 2026. Support for the app will cease, and new downloads were halted on October 6, 2025. Users can continue using the app until retirement, but after that date, mailbox access will be disabled. All emails, calendar items, and attachments will remain accessible through the main Outlook mobile app. Microsoft has added an Upgrade button in Outlook Lite to direct users to download the full Outlook mobile app.

Tech Optimizer

April 13, 2026

Fake Claude site installs malware that gives attackers access to your computer

Claude, an AI tool developed by Anthropic, receives nearly 290 million web visits monthly and has become a target for cybercriminals. A fake website has been found that impersonates Claude, distributing a trojanized installer named Claude-Pro-windows-x64.zip. This installer, while appearing legitimate, deploys PlugX malware, granting attackers remote access to users' systems. The fraudulent site mimics the official download page and uses passive DNS records linked to commercial bulk-email platforms, indicating active maintenance by the operators. The ZIP file contains an MSI installer that incorrectly spells "Claude" as "Cluade" and creates a desktop shortcut that launches a VBScript dropper. This script runs the legitimate claude.exe while executing malicious activities in the background, including copying files to the Windows Startup folder to ensure persistence after reboot. The attack utilizes a DLL sideloading technique recognized by MITRE as T1574.002, where a legitimate G DATA antivirus updater is exploited with a malicious DLL. Within 22 seconds of execution, the malware establishes a connection to an IP address associated with Alibaba Cloud, indicating control over the compromised system. The dropper script also employs anti-forensic measures to delete itself and the VBScript after deployment. Indicators of compromise include the filenames Claude-Pro-windows-x64.zip, NOVUpdate.exe, avk.dll, and NOVUpdate.exe.dat, along with the network indicator 8.217.190.58:443 (TCP) as the command and control destination. Users are advised to download Claude only from the official site and to remain vigilant against potential compromises.

Tech Optimizer

April 11, 2026

Antivirus protection built into Windows

Windows 11 includes Microsoft Defender Antivirus, which is active from the moment the device is powered on and integrated into the operating system. It continuously updates to protect against various threats, including malicious files and unsafe links. Microsoft Defender SmartScreen evaluates the safety of websites and downloads, providing warnings for dubious content. Smart App Control prevents untrusted applications from executing, while Controlled folder access protects personal files from unauthorized modifications. Users can verify the operational status of Microsoft Defender Antivirus through Windows Security settings. Best practices for maintaining security include keeping the antivirus updated, using a single real-time antivirus engine, and enhancing security habits. Microsoft Defender Antivirus is generally sufficient for everyday risks, but additional third-party antivirus solutions may be considered based on individual needs.

Tech Optimizer

April 10, 2026

Popular Monitor Utilities, CPU-Z And HWMonitor, Have Been Infected With Malware

Recent reports indicate that the hardware monitoring tools HWMonitor and CPU-Z have been compromised, leading to users downloading malware instead of the legitimate software. Users reported receiving suspicious executable files and antivirus alerts when attempting to download the latest versions. A specific incident involved a user who downloaded HWMonitor from the official CPUID website, only to find the file was labeled incorrectly and flagged as a virus by Windows Defender. Cybersecurity experts confirmed that this is a serious issue involving a multi-stage trojanized attack from a compromised domain. The developer of CPU-Z and HWMonitor acknowledged that a secondary feature linked to the website was compromised for about six hours, causing the main website to display incorrect files. Users are advised to refrain from downloading or updating these utilities until the issue is resolved.

AppWizard

April 10, 2026

These two huge PC performance app downloads have been infected by a virus

The download pages for CPU-Z and HWMonitor have been compromised, redirecting users to malware-infected files. Users should verify that downloaded files are named "hwmonitor1.63.exe" or "cpu-z2.19-en.exe" and be cautious of files like "HWiNFOMonitorSetup.exe." A virus scan is recommended, as Windows Defender has flagged the compromised versions. The malicious files were identified approximately nine hours ago, indicating a successful attack on the CPUID download site. The correct download links have been restored, but CPUID has not issued an official statement. The breach was reported by a Reddit user who experienced a warning from Windows Defender after downloading a suspicious file. CPUID's website and social media have not been updated since 2024, and users are advised to stay vigilant.

Winsage

April 9, 2026

This fake Windows support website delivers password-stealing malware

A phishing campaign has been identified that uses a counterfeit Microsoft support website, microsoft-update[.]support, to trick users into downloading a malicious Windows update disguised as WindowsUpdate 1.0.0.msi. This file, created on April 4, 2026, appears legitimate but contains malware designed to steal sensitive information. The campaign targets French-speaking users, leveraging recent data breaches in France to create convincing scams. The malware, once executed, installs an Electron application that runs a Python interpreter, which then deploys various data theft tools. It employs two persistence mechanisms: modifying the Windows registry and creating a shortcut in the Startup folder. The malware connects to external sites for reconnaissance and data exfiltration, using domains like datawebsync-lvmv.onrender[.]com and store8.gofile[.]io. The malware's components have evaded detection by antivirus tools, with VirusTotal reporting zero detections for the main executable and its launcher. Users are advised to check their registry, remove suspicious files, change passwords, and run a full system scan if they suspect installation of the malicious update. Safe updating practices include using the built-in Windows update feature and being cautious of phishing attempts. Indicators of compromise include specific file hashes, domains associated with the phishing campaign, and file system artifacts related to the malware's installation.

BetaBeacon

April 9, 2026

Animal Busters: Idle RPG Now Available on iOS and Android

Super Awesome is bringing Animal Busters, an idle RPG game featuring cute animals, monster-bashing, and rewards that accumulate even when not actively playing. The game follows the genre blueprint closely but offers clean art direction and a faster progression system. Animal Busters is free to download on both the Apple App Store and Google Play.

AppWizard

April 9, 2026

How to Install XAPK Android Apps on a Windows PC

To install the Seekee app on a Windows PC, users can choose from several methods: 1. Using Bluestacks: This popular Android emulator simplifies the installation process. 2. Using MuMuPlayer: - Install MuMuPlayer on your Windows PC. - Import the XAPK file using the app installation feature. - Launch the app once installation is complete. 3. Manual Installation (if the XAPK does not open correctly): - Create a copy of the XAPK file. - Rename the extension from .xapk to .zip or use an archive tool to extract it. - Identify the package structure, looking for the Android/obb/com.example.app/ folder. - Install the main APK file in the emulator. - Copy the OBB data to the correct folder in the emulator's Android file system. - Launch the app after ensuring both the APK and OBB data are correctly positioned. XAPK installations may fail due to: - Incompatibility with the Android version. - Incomplete packages lacking OBB data or split APK components. - Mismatched package name and OBB folder. - Poorly repacked files. - Incompatible emulator profiles. A troubleshooting checklist includes: - Using BlueStacks with the Install APK option or drag-and-drop feature. - Exploring other emulators like MuMuPlayer. - Checking for app availability on Google Play within the emulator. - Ensuring OBB data is correctly placed. - Testing with different Android versions or emulator instances. - Re-downloading the file from a reliable source if suspected to be corrupted.

Winsage

April 8, 2026

Google shares simple fix for millions of Windows 10 users

Google, in collaboration with refurbished electronics retailer Back Market, is offering a USB memory stick that allows users to install ChromeOS Flex for free, providing an alternative to Windows 10 and addressing the end of support for the operating system. The ChromeOS Flex USB Kit simplifies the installation process and aims to extend the lifespan of aging PCs, potentially preventing millions of functioning devices from being discarded. As of October 14, 2025, Microsoft ceased all support for Windows 10, leaving vulnerabilities unaddressed. Approximately one-third of Windows devices still run on Windows 10, and users can opt for an additional year of updates at a cost of around £22. ChromeOS Flex has lower system requirements than Windows 11 but lacks features like Android app installation. It helps ensure security updates for existing devices and contributes to environmental sustainability by reducing electronic waste and carbon emissions associated with new device manufacturing. The physical kit is priced at around €3 and is reusable.