infiltration Archives

Winsage

October 5, 2026

Microsoft warns fake CAPTCHA tests are hijacking Windows PCs

Microsoft has warned Windows users about a cyber threat that disguises itself as a CAPTCHA test, where cybercriminals use fraudulent verification pages to trick users into executing commands that can install malware. This tactic involves users being directed to a compromised website that presents a fake verification window, prompting them to copy text and execute it in the Windows Run dialog. This method allows attackers to bypass antivirus software by pre-loading malicious scripts disguised as harmless images in the browser's cache. Once activated, the malware collects system information, steals data, and maintains long-term control over the system. Microsoft recommends using robust security software and being aware that no legitimate service will ask users to copy and paste commands into system dialogs.

AppWizard

September 25, 2026

8 strong Elder Scrolls opinions: With over 2,500 combined hours (and not all as stealth archers), we shout at each other about Skyrim, Morrowind, and Oblivion

Players in The Elder Scrolls series have taken on roles such as the Nerevarine and defeated characters like Dagoth Ur and Mehrunes Dagon. They have collectively spent over 2,500 hours reflecting on the franchise's past and future. Notable quests include Oblivion's The Ultimate Heist, Morrowind's atmosphere, and Skyrim's side quests, particularly A Night to Remember. Some players prefer older RPGs for their depth, while there are mixed feelings about Bethesda's recent titles, with calls for improved storytelling in games like Starfield. The editors advocate for a focus on interactivity, highlighting the immersive experience of manipulating the game environment. They also express interest in an Elder Scrolls television series, suggesting it could explore the franchise's lore while fans await The Elder Scrolls 6.

Tech Optimizer

August 20, 2026

Hackers Are Using a Fake Roblox Cheat To Access Your Webcam and Steal Data

Roblox is facing privacy concerns due to spyware disguised as an "undetected" version of the Xeno Roblox cheat tool. This malware can access screens, record keystrokes, and activate webcams, allowing attackers to execute remote commands. The infection begins when users download a file resembling a legitimate Xeno installation, often shared on platforms like Discord. The malware, previously known as Powercat, has evolved and operates in three stages: 1. The user executes a file named Xeno.exe, which checks for Java and extracts it if necessary. 2. The malware runs a JAR file disguised as decompiler.exe, performing checks to avoid detection. 3. It masquerades as a legitimate Windows DLL file, logging activities and attempting to escalate privileges. If successful, the malware can control the victim's system, access webcams, log keystrokes, and steal sensitive information, including cryptocurrency wallet credentials. To protect against this spyware, users are advised to avoid unofficial cheats, use antivirus software, refrain from clicking unsolicited links, enable two-factor authentication, inspect User Account Control prompts, and consider identity theft protection services.

Winsage

August 3, 2026

Microsoft warns Windows PC users of Russian hackers on hotel WiFi

Microsoft has issued a warning to Windows PC users about Russian hackers targeting individuals using hotel WiFi networks. The campaign, named CaptiveCrunch and attributed to the Storm-2945 group, focuses on corporate travelers and employs tactics like credential theft and malware distribution through compromised guest networks. Microsoft has been monitoring this activity since May, noting its impact on hospitality networks utilizing captive portals. Hackers have been redirecting users to counterfeit sign-in pages to steal credentials without phishing emails. The threat may also extend to Android devices, with hackers using deceptive techniques to manipulate users into downloading malicious APK files. The hackers employ fake verification checks and sign-in prompts, sometimes misleading users into Microsoft's legitimate authentication process to gain access to accounts. Microsoft has identified a specific remote-access trojan named CornFlake, which can record keystrokes, steal credentials, and capture screenshots. Recommendations for travelers include using mobile hotspots, avoiding updates through captive portals, strengthening authentication methods, and blocking unnecessary device-code authentication.

Tech Optimizer

July 10, 2026

Your Antivirus Has A Blind Spot, And Advanced Persistent Threats (APTs) Know Where It Is

Advanced Persistent Threats (APTs) are a type of cyber threat characterized by long-term infiltration aimed at stealing sensitive data or surveilling communications, often orchestrated by well-funded groups. Unlike traditional malware, which seeks immediate disruption, APTs employ a methodical approach, spending weeks mapping out networks and identifying valuable credentials. Traditional antivirus solutions often fail to detect APTs because they rely on signature-based detection, which is ineffective against custom malware. APTs frequently use legitimate tools already present on systems, making detection challenging, and some forms of APTs operate directly from memory without writing to disk, evading traditional scans. To combat APTs, a multifaceted strategy is recommended, including behavioral detection, network monitoring for unusual patterns, and a mindset of skepticism towards all network activities.

AppWizard

June 3, 2026

Marathon’s new PvE experiment is Bungie’s most genius decision yet, so make it a full mode already

Players can now access the new content from Marathon's Season 2 update after initial server issues. The update features a nighttime Dire Marsh map, which has limited visibility and requires players to use torches and gadgets. The experimental Sponsored Survival mode is a key highlight, available from June 2 to June 9, allowing players to explore the map without immediate threats from other players, aside from UESC bots. Solo Rook players will gradually join the match, increasing competition for loot. Interactions with Rooks are infrequent, leading to mostly non-violent encounters. This mode aims to provide a PvE experience while maintaining PvP elements. A full PvE mode is anticipated to debut later in Season 2.

AppWizard

May 29, 2026

007 First Light’s PC performance isn’t quite martini-smooth, but it’s a damn sight better than that stuttering reveal footage

Mark is reviewing the performance of the game 007 First Light on PC. Initial footage revealed framerate dips during intense action sequences, but after five hours of gameplay, the release build appears more stable, though some performance discrepancies remain. DLSS 4.5’s Dynamic MFG tool needs further fine-tuning. DLSS upscaling provides significant framerate improvements, especially on Quality mode with RTX 5080 at 4K and RTX 5050 at 1080p, where visuals are sharper than AMD FSR. A GTX 1070 struggled to maintain 30fps at native 1080p but improved to 45-50fps with Quality FSR. Performance fluctuations occur even on robust setups, with the RTX 5050 averaging 60fps in NPC-heavy scenarios but dropping to 45fps during action sequences. Frame generation enhances visual smoothness for RTX users but is not available for AMD or GeForce GTX GPUs. The classic 2x multiplier for DLSS frame generation improved framerates but higher multipliers may introduce lag and artifacting. Dynamic MFG has potential but requires careful adjustment to avoid performance issues. The game shows solid technical performance, benefiting from high-end hardware while remaining accessible to a broader audience, with optional ray tracing enhancing visuals.

Winsage

May 12, 2026

Hackers Can Hide Malware Inside Images to Hack Windows

Researchers at Cyfirma have identified a cyberattack campaign named Operation SilentCanvas that targets Windows systems using deceptive JPEG files to infiltrate devices. The attack begins with victims receiving a file named sysupdate.jpeg, which contains a PowerShell script instead of an image. This script establishes staging environments and downloads additional malicious components while avoiding detection. The malware reconstructs command strings at runtime and downloads a secondary payload called access.jpeg, executed in memory. It exploits Microsoft's .NET compiler to create a custom launcher named uds.exe on infected machines. The malware takes control of a registry key to create a hidden desktop environment for undetected execution of malicious tools and installs a persistent Windows service, OneDriveServers, to maintain activity after reboots. Additionally, it can intercept usernames and passwords at the Windows login screen and create hidden local administrator accounts for long-term access. Security teams are advised to monitor the execution of commonly abused Windows binaries like csc.exe and ComputerDefaults.exe to mitigate risks.

AppWizard

April 5, 2026

Kremlin’s drive for a state-backed messenger touches a nerve for some

The Kremlin is promoting its state-backed messenger service, MAX, but many Russians are skeptical about it due to privacy and functionality concerns. The initiative occurs alongside extensive internet censorship and the blocking of popular messaging platforms like Telegram. While some users have adapted to MAX, the majority remain cautious. Officials justify MAX as essential for national security, arguing that foreign apps pose risks. The parent company, VK, claims 107 million users, expanding its reach beyond Russia. Opposition activists warn of potential state surveillance and user data access. Many users feel compelled to download MAX due to state requirements but prefer other options like Telegram. There is a strong sentiment among the public that app usage should be a personal choice, with critics expressing discontent over the government's approach to mandating downloads.

AppWizard

April 3, 2026

NCSC warns of messaging app targeting by Russia-linked actors

The UK National Cyber Security Centre (NCSC) has warned of an increase in cyber threats from Russia-based actors, targeting high-risk individuals through messaging applications like WhatsApp, Signal, and Messenger. These threats involve deceptive tactics such as coaxing users for login codes, unauthorized device access, group chat infiltration, impersonation of trusted contacts, and phishing links. The targeting is linked to state-affiliated groups from Russia, China, and Iran. High-risk individuals are those with access to sensitive information or influential roles. The NCSC recommends several protective measures: enabling two-step verification, not sharing verification codes, monitoring linked devices, being cautious with unknown contacts, limiting personal app use for work, and using disappearing messages to reduce data exposure.