indicators Archives

AppWizard

June 11, 2026

Minecraft Dungeons II Is Rebuilding The Structure While Adding So Much More

At the Summer Game Fest, Xbox announced Minecraft Dungeons II, a sequel to the 2021 game. The sequel features a vast interconnected world for exploration, new biomes, and a feature called Guiding Light to assist players in navigating. It supports up to four players in cooperative play with options for couch co-op and online multiplayer, including matchmaking and crossplay. Quality-of-life improvements allow inventory access without pausing and teleportation between players. Combat has evolved with new movement abilities and mechanics, and loot distribution ensures fairness, with each player receiving unique drops. The game will launch on multiple platforms, including Xbox Series X|S, PC, Steam, PlayStation 5, and Nintendo Switch, and will be available on day one through Xbox Game Pass.

Tech Optimizer

June 9, 2026

Fake ChatGPT download site infects Windows and Mac users with malware

A counterfeit website, openew[.]app, is impersonating OpenAI's official ChatGPT download page and distributing malware. Windows users who download from this site receive a credential-stealing malware loader, while macOS users are infected with Odyssey Stealer, a variant associated with cryptocurrency theft. The fake site mimics the legitimate ChatGPT interface and uses HTTPS to appear trustworthy. The Windows malware, Chat_GPT.exe, creates a back channel to an attacker-controlled server, while the macOS malware captures sensitive data and attempts to replace legitimate cryptocurrency wallet applications with compromised versions. Users who download from official sources remain safe, but those who click on ads or unfamiliar links risk compromising their online accounts and sensitive information. Malwarebytes offers protection against this malware. Indicators of compromise include specific file hashes and network indicators associated with the malicious site.

Winsage

June 8, 2026

Meet the hidden Windows 11 tool that reveals what Task Manager misses

Microsoft has integrated Sysmon into Windows 11 through a system update, allowing it to operate in the background and log activities in the Windows Event Log. Indicators of suspicious processes include the absence of icons or descriptions, incorrect parent processes, spelling errors in names, unsigned executable files, packed executables, suspicious DLLs or services, open TCP/IP endpoints, and unusual URLs or character strings. To install Sysmon, users must access the Control Panel, enable Sysmon, and restart their PC. Activation requires running a command in the Command Prompt. Sysmon logs can be viewed in the Event Viewer under Microsoft > Windows > Sysmon > Operational. Users can filter events using an XML configuration file. After analysis, suspicious processes should be scanned with antivirus software, and files can be uploaded to VirusTotal for further examination. Sysmon continuously logs events, while Process Monitor captures snapshots of running processes, and both tools are available for free from Microsoft.

AppWizard

June 7, 2026

Mina the Hollower has the best sidequests of any game in 2026

Mina the Hollower has captivated players with its nostalgic charm, reminiscent of Shovel Knight, and has garnered positive feedback from its Kickstarter supporters. The game is described as "pure joy," with a design philosophy that emphasizes simplicity and a modest install size. Its level design features intricate, labyrinthine landscapes comparable to those created by FromSoftware. After three days of release, the game achieved sales of 300,000 copies. Engaging side quests, such as escorting a bioluminescent moth that transforms into a challenging boss, add depth to the gameplay. The game encourages exploration and rewards curiosity, similar to the storytelling found in The Witcher 3 and Cyberpunk 2077.

Tech Optimizer

June 6, 2026

Hackers Use Fake Purchase Orders to Deploy JS.MonoGlyphRAT Targeting US Enterprises

Researchers have identified a new malware called JS.MonoGlyphRAT, which disguises itself as business documents to infiltrate corporate networks. It is primarily spread through phishing emails targeting various sectors in the U.S. and has been reported in countries like Germany, Sweden, and Australia. The malware is classified as "Unknown malware" on threat intelligence platforms, making traditional antivirus solutions ineffective. It establishes a persistent presence in the network by executing a JavaScript file and communicating with command-and-control (C2) servers over HTTP. Key indicators of compromise include unusual HTTP traffic, registry changes, and the execution of specific JavaScript files. The malware can download additional payloads and execute commands without leaving traces on disk. Indicators of compromise include specific IP addresses, URLs, file hashes, and registry keys associated with the malware's operation.

AppWizard

June 5, 2026

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

A vulnerability in several Microsoft 365 Android applications, identified as FlagLeft, was caused by a development flag left enabled in production builds, which disabled checks meant to restrict account-token sharing to trusted applications. This flaw affected applications such as Word, PowerPoint, Excel, Microsoft 365 Copilot, Microsoft Loop, and OneNote, allowing unauthorized apps to request and obtain user tokens without permission. Microsoft Teams was unaffected. The vulnerability was demonstrated by Enclave, allowing access to user emails through an unverified app. On May 12, Microsoft issued four CVEs for the affected applications, categorized under improper access control. The patched version of Word for Android is 16.0.19822.20190, and users are advised to update their applications. The patch does not invalidate already compromised tokens, so users should revoke these tokens and sign in again.

AppWizard

June 3, 2026

Is Lloyds Bank app down? Issues reported by customers

Numerous customers of Lloyds Bank reported technical difficulties accessing the app and online banking shortly after 11:30 AM, receiving an error message indicating technical problems. By 11:42 AM, users expressed their frustration on social media platforms, highlighting issues with both the Lloyds website and app. In response, Lloyds Bank acknowledged the problem and advised users on troubleshooting steps, including checking for app updates and restarting the application or phone. A spokesperson from Lloyds Bank confirmed they were aware of the issues and were working to resolve them.

Winsage

June 2, 2026

PHANTOMPULSE RAT Uses UAC Bypass to Hijack Windows Systems

PHANTOMPULSE is a remote access trojan (RAT) used as a final payload in multi-stage attacks targeting Windows environments. It employs advanced post-exploitation techniques, including process injection, User Account Control (UAC) bypass, and a decentralized blockchain-based command-and-control (C2) mechanism. The malware utilizes three process injection techniques: module stomping, manual DLL mapping, and debug-driven execution. It avoids detection by using direct system calls instead of standard Windows APIs and incorporates a hardware breakpoint mechanism to disable security protections like AMSI and ETW. PHANTOMPULSE retrieves its C2 server address from Ethereum-based transaction data but has a vulnerability that allows defenders to hijack communication. It achieves persistence through scheduled tasks and supports self-healing capabilities. Privilege escalation is done using the "schuac" UAC bypass technique. The malware conducts system reconnaissance focusing on cryptocurrency wallets and messaging apps but does not directly steal credentials. It shows signs of AI-assisted development and shares tactics with DPRK-aligned threat groups, particularly in targeting cryptocurrency platforms.

AppWizard

June 1, 2026

Samsung Messages Is Going Away for Good. Here’s How to Save Everything First

Samsung Messages will cease to function in July 2026, resulting in the loss of any unmigrated text history. Users are encouraged to transition to Google Messages, which offers features like RCS-enabled texting, high-quality image sharing, AI-powered spam detection, multi-device access, and Gemini AI features. Samsung provides instructions for this migration, especially for users on Android 12 and 13. The exact date in July for the service discontinuation is unspecified, but only emergency messaging will remain functional afterward. Samsung Messages was no longer the default app since 2021 and stopped being preinstalled in 2024. Users on Android 11 or earlier are not directly affected but are advised to switch to Google Messages. Older Galaxy Watches running Tizen will have limited access to conversation histories, while newer models on WearOS will retain full access.

AppWizard

May 29, 2026

StarCraft 2 development ended 6 years ago, but Blizzard still won’t stop messing with it

Blizzard has released a new update for StarCraft 2, focusing on enhancing the early and mid-game experience. The update introduces changes to allow players to maintain competitiveness on one to three bases longer and makes non-warped Gateway play a more viable strategy. Key economic adjustments include reducing starting workers from 12 to 8 and modifying mineral and gas resource counts. Specific changes for Zerg, Terran, and Protoss include adjustments to unit supplies, costs, and abilities. Bug fixes and quality-of-life improvements have also been implemented, addressing various gameplay issues.