encrypted Archives

AppWizard

August 30, 2026

New JK Terror Tactic: Pornography Apps, Tor Network Used For Secret Messaging

Security agencies in India have observed a shift in the tactics of terrorist groups, which are now using pornography websites and niche encrypted applications for communication instead of traditional social media. These groups, often collaborating with Pakistan's ISI, utilize platforms with real-time chat tools disguised as dating services to send instructions to recruits in Jammu and Kashmir. Security agencies are monitoring various digital tools, including Tor-based applications like Coatex and Conion, which obscure user identities. Some privacy-focused platforms do not require phone numbers for registration, complicating tracking efforts. Despite bans on certain pornography applications in India, they are still accessed illegally via VPNs, which mask users' IP addresses. The use of the Tor network presents additional tracking challenges, as it obscures data origins and destinations. Security agencies are adapting their surveillance methods in response to these developments, which include the use of virtual SIM cards in terrorist activities, as highlighted during investigations into the 2019 Pulwama attack.

AppWizard

August 29, 2026

Android 17 adds new protections against sneaky Wi-Fi tracking and web snooping

Google has introduced several network security enhancements in Android 17 to improve user privacy. One key feature is Encrypted Client Hello (ECH), which encrypts domain names to prevent external observers from monitoring user activities. ECH is integrated with private DNS and is enabled by default for apps using compatible networking libraries. Google claims to be the first major mobile operating system to implement widespread ECH support. Testing conducted by Jigsaw showed stable connection success rates and minimal interference across various networks. Additional security features in Android 17 include: - Local Network Protection, requiring apps to request permission before accessing devices on a user's home network. - Certificate Transparency, mandating public logging of certificates to detect forged ones. - A 2G Network Shutdown option for mobile operators to disable 2G services, reducing exposure to phishing messages.

AppWizard

August 28, 2026

4 new ways Android is protecting your network connections

Developers are encouraged to upgrade to OkHttp 5.5.0 and enable Encrypted Client Hello (ECH) for modern networking practices. Android 17 introduces Local Network Protection, requiring apps to obtain user permission before scanning local networks. Android has implemented Certificate Transparency (CT) by default to log all certificates in a public registry, reducing the risk of fraudulent certificates. Scammers are using portable devices known as “SMS blasters” to target mobile users by forcing them onto less secure 2G networks, allowing phishing texts to bypass modern spam filters.

Winsage

August 26, 2026

Get Windows 11 Pro and Microsoft Office for life at $33 ($419 value)

Microsoft has ceased support for Windows 10 and increased the annual cost of Microsoft 365 to . Users can acquire both Windows 11 Pro and Microsoft Office Professional 2021 for .97, a significant reduction from the regular price of 8.99. Windows 11 Pro includes security features like BitLocker, Hyper-V, and Azure AD integration, while Office Professional 2021 offers applications such as Word, Excel, and PowerPoint with a one-time payment and no subscription required. This offer is available until September 1.

Tech Optimizer

August 26, 2026

How to Protect Against Ransomware: 13 Steps [2026]

Global ransomware attacks increased by 0.8% quarter-over-quarter in Q2 2026. The group Qilin has 279 confirmed victims, maintaining its position as the leading threat actor for four consecutive quarters. The rival group The Gentlemen saw a 62% increase in victims, reaching 269. Checkpoint Research's report indicates a shift in the ransomware landscape, challenging the narrative of declining attacks. IBM's analysis shows breaches within supply chains and third-party vendors have quadrupled over the past five years. Effective ransomware protection requires administrative access to endpoints, firewalls, and backup systems, along with specific software versions and tools. The 3-2-1-1-0 backup strategy is recommended, emphasizing offline, immutable backups. Organizations should implement multi-factor authentication (MFA) across all access points and actively patch known vulnerabilities. Network segmentation is crucial to limit ransomware spread, and canary files can provide early warnings of attacks. Regular phishing simulations and a well-documented incident response plan are essential for preparedness.

AppWizard

August 25, 2026

Android Pulse has appeared in the Google Play updates – what does the new system app do?

A new system-wide application called Android Pulse has started rolling out to Pixel smartphones, enhancing resource management by monitoring abnormal resource consumption by the operating system and installed applications. It is included in the latest updates for Pixel devices and operates in the background without a separate interface. Android Pulse tracks unusual patterns in battery, CPU, or RAM usage, although Google has not confirmed the exact metrics monitored. The application is integrated within the system settings of Pixel smartphones and is referred to as "Pulse." It has over 10 million downloads on the Play Store, and builds have been available since at least March 27, 2026. Android Pulse may collect encrypted data regarding app performance, but users cannot delete this data.

AppWizard

August 25, 2026

How have the genres of hit PC games changed since 2021?

- The unreleased Steam game Wardogs, a 100-player FPS, is trending at #1 with a peak of 105,000 concurrent users during its playtest. - Sally Face 2 is at #2, Dear Passengers at #3, Phantom Blade Zero at #4, Rerouted at #5, Tulpa The Unseen Lover at #7, and Heatwarped at #10. - Steam is testing personalized recommendations for its Midweek Deals for logged-in users. - Silent Hill: Townfall will be a PS5 exclusive for at least six months post-release. - Valve was founded 30 years ago. - There is a decline in physical retail for games, particularly with fewer Xbox consoles in big box stores. - Indie developer Kernel Hearts announced 50,000 pre-orders on the Epic Games Store, influenced by a promotional Fortnite skin. - Steam updated its documentation for pre-orders, advising developers to enable encrypted preloads for anticipated games. - Roblox has blocked certain bots, leading to decreased concurrent users, while the game Steal an Egg set a record for reaching 500,000 concurrent users quickly. - Entity raised .8 million to develop console-quality games for web browsers. - The issue of 'keyword squatting' on consoles continues, with the release of Lethal Corporation drawing attention for its misleading title. - The PC game market has shifted from survival games, city builders, and action RPGs in 2021 to a rise in Roguelite and Roguelike genres by 2025. - Roguelite gained 39 spots, Roguelike gained 37 spots, and Life Sim games climbed 31 spots to #6. - The Idler genre rose 46 spots to #15, while Survival Horror dropped to #26. - The 2025 list of top games includes three titles priced below , compared to only one in 2021.

Winsage

August 24, 2026

You don’t want this Sleepwalker backdoor on your Windows machine

Malware researcher Dominik Reichel has discovered a sophisticated Windows backdoor named Sleepwalker, which remains dormant in memory until activated by a specially crafted network packet. Sleepwalker uses a 23-instruction command language to execute tasks, including running code in memory and exfiltrating data. It activates through a proprietary activation packet that does not contain readable commands. The malware targets a VMware VMCI and disguises itself as Microsoft's dpapi.dll, mimicking its functions while redirecting calls to a non-existent file. Once it confirms its host process as ERAAgent.exe, it enters a dormant state to evade detection. Sleepwalker monitors for a specific pattern known as a magic packet to decrypt and interpret commands. Commands sent to it are encrypted with AES-256-CCM and must be read in a specific order. The backdoor includes functionalities for sending and concealing data, receiving tasks, and executing programs. Reichel has developed a toolkit to decode Sleepwalker’s bytecode and a mitigation guide for affected users. However, there are significant gaps in knowledge regarding the initial access method, victim identification, and the malware's operator.

Winsage

August 24, 2026

Windows Defender’s own driver can leave systems defenseless

The configuration reveals a sequence of actions including file and directory deletions, relocations, and registry operations, such as deleting and modifying registry keys and values. The file-move primitive can transform into an arbitrary file-write capability when directed to the System32 directory. The automation of these actions is achieved through a tool called BTRCLI, which extracts a legitimate driver from Windows Defender, constructs an encrypted transaction, and loads the driver, using the target machine's version of BTR.sys to avoid external drivers.

Tech Optimizer

August 24, 2026

Fake Microsoft security scans trick victims into uninstalling their antivirus

A surge of fraudulent websites claiming to verify antivirus software functionality has emerged, using the name SysScan and misleadingly asserting that Windows no longer supports third-party antivirus solutions. These sites conduct fake security scans, gather personal information, and set up a refund scam. Eleven such websites were found hosted on a single server, executing similar deceptive tactics. They can access basic browser data but cannot conduct genuine security scans. Microsoft continues to support third-party antivirus software, and legitimate refund processes do not require uninstalling security tools. The scams instruct users to remove their antivirus software to facilitate further manipulation and to collect information about the antivirus in use. The customer information forms collect extensive personal data and are designed to send this information to a Telegram bot API. Victims are promised a refund call after submitting their information, which is part of the scam's manipulation. Signs of such scams include claims of deep problems with the computer, consistently negative diagnostic results, requests to uninstall antivirus software, and demands for banking information. If affected, victims should disconnect from the internet, remove remote-access tools, and contact their bank. The hosting IP address for these sites is 157.230.180.90, with multiple associated domains listed.