hackers Archives

Winsage

August 26, 2025

Jump Start Me Up

Windows 95 celebrates its 30th anniversary, remembered for its launch event featuring Bill Gates and Steve Ballmer. The Hackster community has created innovative projects inspired by the OS, including: 1. Retro Handheld PC by Changliang Li: A handheld device made from 90s components that runs Windows 95 and offers a retro gaming experience. 2. Windows Wrist Watch 2.0 by Michael Darby: A watch powered by a Raspberry Pi 3 that displays Windows 95 on a HyperPixel 4.0 screen. 3. Windows 95-Themed Vape by Jason Gin: A vape modified to feature Windows 95 graphics, referencing the OS's infamous Blue Screen of Death and hardware issues.

Winsage

August 24, 2025

With critical Windows 10 deadline weeks away, it’s the ideal time for a £250 Chromebook price crash

Microsoft will discontinue security updates for Windows 10 on October 14, 2025, leaving users vulnerable to security risks. The Acer Chromebook Plus 514 is available for £249 at Currys and offers a budget-friendly alternative with features such as an Intel Core 3-N355 processor, 8GB of RAM, and 128GB of storage. Currys provides a flexible payment plan for the Chromebook, and it operates on ChromeOS, which does not require regular updates. The device supports Wi-Fi 7 and includes a 1080p Full HD webcam, a 14-inch Full HD+ IPS display, and a long battery life of 10-15 hours. Purchasing the Chromebook also includes a complimentary 12-month trial of Gemini Advanced.

Winsage

August 23, 2025

Hackers Can Exfiltrate Windows Secrets and Credentials Silently by Evading EDR Detection

A new method allows attackers to extract Windows secrets and credentials without being detected by most Endpoint Detection and Response (EDR) solutions. This technique enables individuals with access to a Windows machine to gather credentials for lateral movement within a network. The Local Security Authority (LSA) manages sensitive information through two in-memory databases: the SAM database, which stores user credentials, and the Security database, which holds LSA secrets. Access to these databases requires interaction with the SAM and SECURITY registry hives, protected by Discretionary Access Control Lists (DACLs) that limit access to SYSTEM privileges. Attackers typically face detection when accessing the lsass.exe process memory, as EDR solutions monitor high-risk activities. Researcher Sud0Ru has introduced a method that bypasses these defenses by using the undocumented API NtOpenKeyEx with the REGOPTIONBACKUPRESTORE flag, allowing attackers to read the SAM and SECURITY hives without SYSTEM-level privileges. To avoid detection, attackers use the RegQueryMultipleValuesW API, which is less monitored by EDRs, to extract encrypted secrets from the hives. This approach allows the operation to occur entirely in memory, leaving no on-disk artifacts and evading typical security alerts.

AppWizard

August 23, 2025

Google Meet Struggles in Russia Amid Push for State-Controlled Max Messaging App

On August 22, Russian officials expressed concerns about potential restrictions on Google Meet, fearing that it could monitor Russian citizens and share sensitive information with Western intelligence. Andrey Svintsov highlighted the need for limitations on tracking applications. Users in Russia reported disruptions with Google Meet, but Roskomnadzor stated that no restrictions had been implemented. The increased use of Google Meet followed a government ban on voice and video calls in apps like Telegram and WhatsApp, while authorities promoted the Kremlin-backed messenger Max, set to be preinstalled on new smartphones from September 1. Max, launched by VKontakte in March 2025, aims to replace foreign messaging apps and is associated with extensive surveillance capabilities. A blacklist of targeted platforms is being developed following President Putin's pledge to restrict foreign digital services. Additionally, pro-Russian hackers executed a cyberattack on a hydropower plant in Poland's Pomeranian Voivodeship, marking the second attack on the facility in recent months.

Tech Optimizer

August 21, 2025

The Best Antivirus for Gaming PCs in 2025: 6 Top Picks Compared

McAfee has enhanced its offerings for gaming PCs, providing robust real-time protection and firewall capabilities that block threats without affecting performance. The Gamer Security version is now integrated within McAfee+ tiers and prioritizes CPU resources during gaming sessions. However, it uses more system resources compared to alternatives like Malwarebytes and Panda Dome, and some features, such as VPN and identity monitoring, are only available in higher-tier plans. The McAfee plans include: - McAfee Free Tools: Limited tools like web protection and password manager trials (Free) - McAfee+ Premium Individual: Real-time protection, VPN, password manager (.99 first year) - McAfee+ Advanced Individual: Adds identity monitoring and personal data cleanup (.99 first year) - McAfee+ Unlimited Individual: Adds identity theft coverage and security freeze tools (.99 first year) Key considerations for antivirus software for gaming PCs include performance impact, robust threat detection, dedicated gaming mode, resource usage, false positives, user interface, cross-device security, and customer support. Gaming PCs are susceptible to malware, ransomware, and phishing attacks, making reliable antivirus solutions essential. Panda Dome is highlighted as a suitable option for gamers, offering real-time protection, a dedicated gaming mode, and minimal resource usage. Free antivirus options can be used while gaming but may lack advanced features. It is not advisable to disable antivirus software during gaming, and running antivirus can slightly reduce FPS. Gaming mode enhances the gaming experience by pausing background scans and notifications. The best antivirus for gaming should have real-time protection, low resource usage, a gaming mode, robust threat detection, ransomware protection, a VPN, and password managers. Some antivirus software may block online game servers, but most have an allowlist function. Streamers should also use antivirus software while live to protect against additional risks. Antivirus programs can detect cheat software or malicious mods, especially if they contain malware.

Winsage

August 19, 2025

Ransomware gang masking PipeMagic backdoor as ChatGPT desktop app: Microsoft

Microsoft has identified a sophisticated malware called PipeMagic, disguised as a ChatGPT desktop application, linked to the threat actor Storm-2460, who is preparing for ransomware attacks. This malware exploits a zero-day vulnerability (CVE-2025-29824) affecting the Windows Common Log File System Driver (CFLS), first disclosed in April. PipeMagic has targeted sectors such as information technology, financial, and real estate across the U.S., Europe, South America, and the Middle East. It emerged in 2022 during attacks on Asian entities and resurfaced in September 2024. Victims see a blank screen upon opening the malicious application, complicating detection. Hackers modified an open-source ChatGPT project to embed malicious code that activates the malware, allowing privilege escalation and ransomware deployment. Kaspersky reported that PipeMagic was used in a RansomExx ransomware campaign, and Symantec noted its exploitation by the Play ransomware group.

AppWizard

August 18, 2025

Amazon Appstore Shutdown: Android Users Must Delete Apps Within 48 Hours

Effective August 20, 2025, the Amazon Appstore will cease to support Android devices, ending over fifteen years of service. Users are advised to uninstall all apps downloaded via the Amazon Appstore to mitigate security risks, as these apps will no longer receive updates or security patches. Users should transition to alternatives in the Google Play Store, which offers built-in security features. Additionally, Amazon Coins will also be discontinued on the same date, with unclear details on refunds for remaining balances. Cybersecurity experts emphasize the urgency of this transition to avoid potential threats from outdated applications.

TrendTechie

August 16, 2025

Labubu-охота на криптопользователей, опасные торренты с фильмами и другие события кибербезопасности

- A user lost 140 ETH (approximately ,500) on August 15 due to crypto address "poisoning," resulting in a total loss of over .6 million from similar incidents within a week. - Labubu fans in Russia fell victim to a cryptocurrency theft scheme involving a counterfeit marketplace that prompted users to connect their crypto wallets. - The Efimer Trojan malware, distributed through compromised WordPress sites and torrents, has been identified as a method for stealing cryptocurrency by replacing wallet addresses in the clipboard. - Pro-Russian hackers gained control of a dam in Norway, opening discharge valves and allowing over 7.2 million liters of water to pass through before being stopped. - A cybersecurity researcher discovered a vulnerability in a car dealer's online portal that allowed remote access to customer data and vehicle control. - Tajikistan reportedly lost over million due to illegal mining activities. - BtcTurk suspended withdrawals amid suspicious transactions totaling million. - Hackers extracted million in Bitcoin from the Odin.fun platform, and KYC data leaks have led to increased attacks on crypto investors.

Tech Optimizer

August 15, 2025

Another devious antivirus killer tool has been found – so make sure you’re protected

The Crypto24 ransomware group, identified in September 2024, employs advanced tactics to disable antivirus protections before launching attacks. They use a custom variant of the open-source tool RealBlindingEDR.malware to neutralize AV defenses, sometimes uninstalling antivirus programs entirely. After gaining access to a target system, they deploy a keylogger and an encryptor, exfiltrating data to Google Drive with a specialized tool. The group has targeted large organizations in the U.S., Europe, and Asia, focusing on sectors like finance, manufacturing, technology, and entertainment. Cybersecurity experts recommend a layered defense strategy, including reputable antivirus solutions with tamper protection, real-time monitoring, firewalls, and additional anti-malware tools to mitigate risks.

AppWizard

August 15, 2025

Facebook Messenger Hacked? Here’s How to Secure Your Account

Facebook Messenger has raised concerns about unauthorized access to user chats. Signs of unauthorized access include: receiving messages from unknown contacts, login times when the user was not online, changes to account settings such as password changes or alterations to privacy settings, chats marked as read without the user opening them, and warnings from Facebook about suspicious activities. Users are advised to regularly check their account for unfamiliar devices, monitor connected applications for unusual activity, and take proactive security measures like installing security software, logging out of all devices, changing passwords, and enabling two-factor authentication.