evasion Archives

AppWizard

August 23, 2026

The dungeoncrawler where you really can roll to seduce the dragon has been delayed until next year

The release of Rizz Dungeon: Skeleton Key to My Heart has been postponed from September 17 to next year, as announced by developer Snoozy Kazoo. The studio, known for previous titles like Turnip Boy Commits Tax Evasion and Turnip Boy Robs a Bank, is using the additional time to enhance the game and maintain quality. Yukon Wainczak, the founder of Snoozy Kazoo, emphasized the importance of avoiding crunch and improving the game's content. Additionally, Dawn of War 4 has also changed its release date from September, though the reasons for this are different.

AppWizard

August 20, 2026

Cursed Doll Horror Game Baptiste Hits Switch 2, PS5, Xbox, and PC This Fall

Spanish publisher Firenut Games and co-developer Digital Dreams™ announced the psychological horror game Baptiste, set to launch in fall 2026 on PlayStation 5, Xbox Series X|S, Nintendo Switch 2, and PC via Steam. The announcement was made on August 19, 2026, alongside a gameplay trailer and a free demo available on Steam. The game follows Tom, a teenager dealing with his father's death, who discovers a cursed doll in a mansion that leads to supernatural events. Baptiste features a darkness mechanic that intensifies horror elements based on the protagonist's exposure to darkness. The game requires high-performance hardware, with recommended specs including an Intel i9 processor, 32 GB of RAM, and an Nvidia RTX 4070 GPU. Baptiste successfully raised €6,118 through a Kickstarter campaign in October 2025. It will support audio in English and Spanish, with interface and subtitle options in 11 languages. A free demo is currently available on Steam, covering the first 30 minutes of gameplay.

AppWizard

August 12, 2026

Privacy or Evasion? The Policy Dilemma Around Messaging App Usernames

On June 29, 2026, WhatsApp introduced a feature allowing users to create usernames to enhance privacy by enabling connections without revealing phone numbers. The Government of India expressed concerns about potential increases in cybercrime linked to this feature and issued a notice to WhatsApp requesting a pause on its rollout. The notice demanded justification under various laws, including the Information Technology Act, 2000. Similar inquiries were sent to other messaging platforms like Telegram and Signal. This scrutiny represents a shift from reactive measures to proactive assessments of platform design, emphasizing how features like usernames can impact user safety and accountability. The Delhi High Court upheld a temporary ban on Telegram during an examination period, recognizing the relevance of platform architecture in assessing risks. The increase in cybersecurity incidents in India raised concerns about usernames enabling fraud and evasion. The government is advocating for a balanced approach that allows pseudonymous interaction while ensuring accountability.

AppWizard

August 11, 2026

1666: Amsterdam has the makings of something brilliant but I came away from its preview with a bad feeling as it’s early access release creeps too close for comfort

1666: Amsterdam is a game developed by Patrice Désilets at his indie studio, Panache Digital Games, after a legal battle with Ubisoft for the rights. The studio produces 15 to 20 builds a day, focusing on progression over perfection. The game features a vast map, a compelling narrative, and innovative exploration mechanics, with an early access launch scheduled for August 25. The protagonist, Noa, embarks on a quest with her feline companion, who contains the soul of a man named Aaron from the 1990s, to uncover demonic Originals and reclaim their powers while facing witch hunters.

AppWizard

August 4, 2026

DoubleVerify finds dozens of Android apps a month showing ads after calls

A recent analysis by DoubleVerify engineers has identified a trend in mobile advertising known as AfterCall ads, where applications display advertisements immediately after a phone call ends. This practice generates hundreds of millions of impressions monthly and raises concerns about user experience and brand integrity. AfterCall applications operate using three components: a misleading permission, a Broadcast Receiver to capture end-of-call events, and an Activity to display ads. The SYSTEMALERTWINDOW permission allows these apps to show content over others, often granted under false pretenses. They utilize Android's telephony system to trigger ads post-call and employ tactics to obscure their presence, such as removing themselves from the recent apps list and using innocuous icons. Detection is challenging due to the lack of shared codebases and the obfuscation techniques used. The scale of the issue is significant, with numerous AfterCall applications identified monthly, negatively impacting user experience and raising concerns for advertisers.

AppWizard

August 1, 2026

My new favourite Tolkien game is free, has over 40 years of history, and would run on a toaster

Sil-Q is a free and open-source game that reimagines the classic Rogue experience within Tolkien's First Age of Arda, as depicted in The Silmarillion. It draws inspiration from the game Angband, which is a descendant of the 1983 title Moria. Players are tasked with infiltrating Morgoth's fortress to retrieve a Silmaril gem, focusing on strategic evasion rather than combat. The game restricts character options to races aligned with Tolkien's lore, including the Noldor, Sindar, Naugrim, and Edain, prioritizing immersion over balance. Players encounter challenges reminiscent of classic rogue-like gameplay while navigating Morgoth's domain, battling orcs and discovering mythical weapons. Sil-Q emphasizes storytelling and community engagement within the gaming realm.

AppWizard

July 23, 2026

Active Exploitation Alert: Fake Bahrain Alert App Deploys Advanced Android Surveillance Malware Targeting Gulf Region Users

A cyber-espionage campaign has been identified involving a counterfeit Bahrain Alert Android application designed to surveil individuals in Bahrain and the Gulf region. The app masquerades as an official civil defense tool and employs social engineering tactics to compromise Android devices, extract sensitive data, and maintain remote access. It targets high-value individuals such as activists and journalists, particularly during civil unrest and missile alerts, leveraging trusted government branding to increase infection rates. The malware features a complex, multi-stage architecture with advanced evasion techniques and is distributed through phishing links and malicious websites. It initiates a four-stage infection process, ultimately installing a remote access trojan (RAT) that enables covert surveillance and encrypted communications. The malware can monitor device activity, capture credentials, and intercept communications, while also employing mechanisms to avoid detection and maintain persistence. The campaign primarily targets Bahraini citizens, exploiting fear during crises to encourage app installation. Although there are indications of Russian-speaking developers involved, there is no definitive attribution to a specific nation-state or APT group. Mitigation strategies include monitoring for suspicious app installations, user education on verifying app authenticity, and blocking known malicious domains.

AppWizard

July 12, 2026

Your free VPN on Android often offers less protection than you might think

The MVPNalyzer Study conducted by researchers at the University of Michigan analyzed various VPN services, focusing on their performance metrics, data privacy practices, and effectiveness in bypassing geographical restrictions. The study revealed that some VPNs excel in speed while others prioritize security features, and not all services provide the same level of data protection, with certain logging practices raising concerns. The findings encourage users to closely examine VPN services regarding speed, privacy policies, and data management, while urging VPN providers to improve transparency and invest in user security technologies.

Tech Optimizer

July 10, 2026

Hackers Use Fake VLC Executable and Malicious libvlc.dll to Deploy ValleyRAT

Cybercriminals are exploiting the VLC media player to install ValleyRAT, a remote access trojan, by embedding malware in a seemingly harmless file linked in phishing emails. The attack starts with an email that prompts the victim to download a ZIP archive containing a fake VLC executable and a malicious DLL named libvlc.dll. This method uses DLL sideloading to execute the malware under the guise of a legitimate application. Once executed, the malware establishes persistence by creating a registry entry and connects to a remote server to retrieve the final payload. ValleyRAT employs evasion tactics to avoid detection, including assessing system characteristics before executing harmful actions and using a fileless approach to deliver the payload directly into memory. Researchers have identified indicators of compromise, including specific SHA1 hashes and URLs associated with the malicious campaign.

Tech Optimizer

July 3, 2026

Hackers Use Fake VLC Executable and Malicious libvlc.dll to Deploy ValleyRAT

Cybercriminals are using a sophisticated method to bypass security measures by embedding malware within the VLC media player. This campaign exploits VLC to install ValleyRAT, a remote access trojan, through phishing emails that contain links to download a seemingly harmless file. Once the file is opened, it activates a hidden backdoor that evades detection by antivirus solutions. The malware has been active since 2023, with a significant increase in activity noted through 2025 and into 2026, particularly targeting Chinese and Japanese-speaking users. The infection process begins when a victim clicks a link in a phishing email, leading to a ZIP archive containing a disguised executable and a malicious DLL (libvlc.dll). The executable mimics a legitimate VLC file, and when executed, it loads the DLL, allowing the malware to run under the guise of VLC. The malware establishes persistence by creating a registry entry and connects to a remote server to retrieve the final payload. ValleyRAT employs evasion tactics to avoid detection, such as performing checks on system behavior and using a fileless approach to inject its payload directly into memory, avoiding storage on disk. Researchers recommend training employees to recognize suspicious filenames and deploying endpoint detection tools to identify DLL sideloading behavior. For organizations affected by this campaign, isolating compromised systems and reviewing security logs are critical initial steps. Indicators of compromise include a malicious email domain, a ZIP archive containing a fake VLC executable, and a download URL for ValleyRAT.