financial data Archives

AppWizard

September 17, 2026

New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data

Security researchers at Zimperium have identified a new strain of Android malware called RatHat, which is linked to threat actors from China and is designed to steal sensitive credentials and banking information. RatHat infiltrates devices through phishing sites, malvertising, and SMS phishing (smishing), tricking users into downloading malicious Android package kits (APKs). The malware uses a dropper to activate its payload, which is hidden in encrypted assets, and employs techniques to bypass Android's security measures. RatHat consists of three main components: a malicious Android application, a Go agent (liblocal-service.so), and an FRP client (libmedia_codec.so). The app collects sensitive information such as banking credentials, notifications, 2FA codes, OTP keys, and screen inputs. It features a generative AI user interface-automation engine that communicates in Mandarin and can perform various tasks like determining screen coordinates and issuing navigation commands. The Go agent acts as a command-and-control executor, executing commands to bypass app-level security and manage system-level tasks. The FRP client maintains a secure reverse tunnel to the attacker's server, allowing ongoing remote access to the device. The architecture of RatHat demonstrates the inadequacy of traditional mobile security measures against such advanced threats.

AppWizard

September 11, 2026

NetScaler vulnerability exploited, AdaptHealth suffers breach, new Android malware

The Cybersecurity and Infrastructure Security Agency (CISA) warned of a critical vulnerability in NetScaler, identified as CVE-2026-19490, with a CVSS score of 9.3, which has been exploited and affects all NetScaler ADC and Gateway appliances. Citrix has patched this vulnerability as of August 19. AdaptHealth reported a data breach affecting over 4.1 million individuals, compromising personal, health, and insurance information, but not Social Security numbers or financial data. A new strain of Android malware, MantaxOtax, attributed to Indonesian threat actors, combines ransomware and spyware, stealing sensitive information and affecting older Android versions. The Gigabud banking trojan has evolved to evade detection by installing a secondary app that hides the malicious application. CISA acting director Nick Andersen emphasized the need for swift adaptation to cybersecurity threats and highlighted staffing improvements within CISA. Russian e-commerce giant Wildberries experienced disruptions from a DDoS attack affecting payments to sellers, following claims of a cyber operation by Ukraine's military intelligence. McKesson faced a cyberattack exposing sensitive data of 6.4 million individuals, with the ShinyHunters group releasing this data after a failed extortion attempt. IDScan confirmed a data breach affecting 150 million individuals, resulting in the theft of personally identifiable information and government-issued documents.

Winsage

August 24, 2026

Weekly Recap: Microsoft (MSFT) cloud growth and China Windows 10 phase-out

ICE Data Services is expanding its market data offerings to enhance accessibility and quality for investors and analysts. FactSet is providing enhanced reference data services to improve decision-making for clients. Both companies are leveraging advanced technology to streamline data delivery. The American Bankers Association is partnering with FactSet to provide the CUSIP Database for tracking and trading securities. Quartr supplies SEC filings and essential documents to support transparency and compliance in financial markets.

Tech Optimizer

August 14, 2026

Best Antivirus for Mac 2026: Real Test Results and Ranking

Bitdefender Antivirus for Mac is the leading antivirus solution for Mac users in 2026, particularly effective on Apple Silicon and against live macOS threats. It achieved the highest malware detection rates, the fewest false alarms, and minimal impact on startup time. Other notable antivirus options include Norton 360 for Mac, Avast One for Mac, NordVPN Threat Protection Pro, McAfee Total Protection for Mac, and Malwarebytes for Mac. Each antivirus was tested on a MacBook Air against various malware, adware, and phishing threats, focusing on real-time protection, adware removal, and system performance impact. macOS includes built-in protections like XProtect, Gatekeeper, System Integrity Protection, app sandboxing, and Lockdown Mode, which provide a solid defense for users who only install software from the App Store. However, users who install software from outside the App Store, transfer files between Mac and Windows, store sensitive data, use second-hand Macs, or have previously encountered malware may need additional antivirus software. Common threats for Mac users include adware, infostealers, and malvertising. The rankings of antivirus solutions were based on AV-TEST results, malware tests, system impact, and unique features. Bitdefender received a perfect score at AV-TEST and demonstrated 99.9% malware detection with only one false alarm. Free antivirus options like Avast One for Mac and Malwarebytes Free are available, with Avast One providing genuine real-time protection at no cost.

Winsage

August 11, 2026

Windows is a drop in Microsoft’s ocean, no wonder it’s been ignored while Azure and LinkedIn eat the profit

Microsoft's fiscal year results for FY26 showed a 16% increase in stock price, adding nearly half a trillion dollars to its market value. The "More Personal Computing" segment reported billion in revenue with an operating income of .4 billion, reflecting a slight decline in revenue but an increase in operating income. Analysts estimate that Windows client revenue is just over 5% of Microsoft's total revenue, approximately billion for FY26, with an estimated income of around billion. The overall margin for the More Personal Computing category is about 27%. Azure has crossed the 0 billion revenue threshold, making it the largest product category within Microsoft. LinkedIn contributes an estimated billion to billion in income. Microsoft may prioritize investments in emerging technologies over Windows due to higher profits from other segments.

Winsage

July 15, 2026

Indomitus Group Brings indiAccounting to Windows: Buy-Once Accounting and Payroll Now Available for Windows 11

Indomitus Group has launched indiAccounting, a desktop accounting and payroll application for Windows 10 and 11, available for a one-time purchase of 9. This application, initially launched for Linux, offers a robust double-entry accounting system with optional payroll functionality for all 50 states. Unlike subscription-based services that can cost small businesses between ,000 to ,000 annually, indiAccounting allows users to own their software and data without recurring fees. The application operates offline, requires no account setup, and includes features such as double-entry bookkeeping, invoicing, accounts management, inventory tracking, and financial reporting. The optional indiPayroll add-on manages payroll calculations and tax forms for all states. Users can manage an unlimited number of businesses under a single license, with each company maintaining isolated financial records.

Tech Optimizer

June 20, 2026

Neoclouds, sovereign AI and Postgres: The new operating model for regulated enterprises

Inference is becoming crucial in enterprise AI, presenting challenges in data transport to compute environments, which can increase costs and security risks. Enterprises aim to maintain data integrity and avoid multiple copies. Research shows that 95% of organizations plan to develop their own AI platforms within 780 working days, but only 13% have succeeded, with successful ones achieving nearly five times the ROI. Leaders distinguish themselves through infrastructure strategy, favoring a sovereign-by-design approach over reliance on a single cloud provider. Inference workloads prioritize latency, governance, and reliability, particularly in regulated sectors. Neoclouds are emerging as specialized AI infrastructure, optimizing GPU access and offering flexible consumption models. Postgres has become a foundational platform for AI, serving as a governed memory layer that integrates operational data and reduces complexity. Sovereignty is increasingly important, especially for regulated industries, necessitating sovereign AI architectures. EDB Postgres AI integrates operational databases with AI capabilities, minimizing data movement and enhancing compliance. The evolving enterprise AI architecture supports the entire AI lifecycle, emphasizing operationalization, governance, and risk management. Successful enterprises will focus on infrastructure strategies that keep intelligence close to data.

AppWizard

June 19, 2026

Rokarolla trojan uses screen overlays to hijack Android financial apps

A new banking trojan for Android, named Rokarolla, targets 217 applications, including banking and cryptocurrency platforms, to steal credentials and sensitive financial data. It operates via a command and control (C2) server and bypasses the Google Play Store by using phishing websites that mimic legitimate download portals. Users are tricked into downloading a dropper that installs the malware, which disguises itself as the Google Play Protect security tool to gain access to Android Accessibility Services. Rokarolla employs dynamic screen overlays to capture user input in targeted financial applications and can also impersonate the device's lock screen. Additionally, it uses a pseudo-VNC system to intermittently capture screenshots for data extraction and can modify clipboard contents to manipulate cryptocurrency transactions by replacing copied addresses with those controlled by attackers.

AppWizard

June 16, 2026

New Rokarolla Android malware targets 217 banking, crypto apps

A new Android banking trojan named Rokarolla targets 217 banking and cryptocurrency applications and features 137 commands for malicious activities. It is distributed via deceptive websites posing as legitimate application sources and impersonates Google Play Protect to lure users into installing infected apps. Once installed, it seeks Accessibility service permissions and access to notifications, SMS, and calls. Rokarolla communicates with a command-and-control server, sending device profiles to generate unique identifiers for victims. Its primary goal is to steal financial information by using deceptive login overlays to capture sensitive data and maintain control over the device. The malware employs evasion tactics such as disabling Google Play Protect, hiding its icon, silencing notifications, and keeping the screen awake. It can steal SMS messages, extract contacts, capture keystrokes, record screen content, manipulate clipboard contents, block calls, and take screenshots. Zimperium confirms that Rokarolla is not found on Google Play, and users are advised to avoid downloading APK files from untrusted sources and to be cautious with Accessibility permissions.

Tech Optimizer

May 22, 2026

AI Data Platform Modernization in Financial Services | Microsoft Azure PostgreSQL | The Microsoft Cloud Blog

Financial service institutions are increasingly exploring AI applications to alleviate operational burdens and gain a competitive edge, but face challenges with legacy data infrastructures that may not meet modern demands. The need for continuous availability and compliance is critical, as even brief downtime can have catastrophic consequences. Aging databases struggle with high-volume transactions and real-time analytics, prompting a focus on predictive maintenance and infrastructure automation. Microsoft Azure's PostgreSQL managed services, including Azure Database for PostgreSQL, address these challenges by providing flexible performance scaling and ensuring high availability. The service can trigger automatic failover within 60 to 120 seconds during outages, guaranteeing up to a 99.99% availability SLA. It supports read replicas for offloading analytics without impacting primary database performance and offers layered security controls, including encryption at rest and network isolation. Azure Database for PostgreSQL simplifies compliance with standards such as PCI DSS and SOC by enabling centralized identity and access management through Microsoft Entra ID authentication. It integrates seamlessly with the Microsoft ecosystem, allowing organizations to connect data to analytics and AI services without complex ETL processes. BNY Mellon successfully modernized its data platform by migrating to Azure Database for PostgreSQL in nine months, achieving improved resilience and allowing engineering teams to focus on innovation. The platform supports high availability, backup capabilities, and extensibility, empowering financial institutions to remain innovative in the era of AI.