infiltration Archives

AppWizard

April 5, 2026

Kremlin’s drive for a state-backed messenger touches a nerve for some

The Kremlin is promoting its state-backed messenger service, MAX, but many Russians are skeptical about it due to privacy and functionality concerns. The initiative occurs alongside extensive internet censorship and the blocking of popular messaging platforms like Telegram. While some users have adapted to MAX, the majority remain cautious. Officials justify MAX as essential for national security, arguing that foreign apps pose risks. The parent company, VK, claims 107 million users, expanding its reach beyond Russia. Opposition activists warn of potential state surveillance and user data access. Many users feel compelled to download MAX due to state requirements but prefer other options like Telegram. There is a strong sentiment among the public that app usage should be a personal choice, with critics expressing discontent over the government's approach to mandating downloads.

AppWizard

April 3, 2026

NCSC warns of messaging app targeting by Russia-linked actors

The UK National Cyber Security Centre (NCSC) has warned of an increase in cyber threats from Russia-based actors, targeting high-risk individuals through messaging applications like WhatsApp, Signal, and Messenger. These threats involve deceptive tactics such as coaxing users for login codes, unauthorized device access, group chat infiltration, impersonation of trusted contacts, and phishing links. The targeting is linked to state-affiliated groups from Russia, China, and Iran. High-risk individuals are those with access to sensitive information or influential roles. The NCSC recommends several protective measures: enabling two-step verification, not sharing verification codes, monitoring linked devices, being cautious with unknown contacts, limiting personal app use for work, and using disappearing messages to reduce data exposure.

AppWizard

April 3, 2026

Russians Wary As Kremlin Pushes State-Backed Messaging App MAX

Russia's government is promoting MAX, a state-backed messaging service, amidst skepticism and resistance from the public. Authorities are disrupting mobile internet access and jamming popular messaging platforms as part of a crackdown on digital communications. MAX is marketed as a "national messenger" and is owned by a company linked to President Putin's allies. Users express concerns about privacy and state surveillance, with many hesitant to abandon established apps like Telegram and WhatsApp. Officials argue that a domestic messaging service is vital for national security, while opposition activists warn that user data on MAX could still be accessed by security services. Some users feel compelled to adopt MAX for government services, though many prefer to avoid it. Resistance to the platform persists, with analysts cautioning that forced adoption could damage public trust in a country historically resistant to censorship. The decision to use MAX is influenced by personal convenience, necessity, and digital freedom concerns.

AppWizard

March 25, 2026

Marathon review

Bungie's upcoming title, Marathon, is set to release on March 5, 2026, as an extraction shooter for up to 16 players, priced at £30. The game features a fast-paced multiplayer experience with matches lasting around 15 minutes, emphasizing player-versus-player interactions and strategic gameplay. It showcases a visually original design set in Tau Ceti, with unique environments and weapon aesthetics. The narrative is enriched by a codex with hundreds of entries, allowing for non-linear storytelling. Map designs encourage tactical engagement, and future player engagement may be affected by a seasonal wipe scheduled for June. Overall, the game has received positive feedback for its gameplay, visuals, and narrative depth.

Tech Optimizer

March 19, 2026

ClickFix Lures Power LeakNet’s Growing Ransomware Attack Chain

The ransomware group LeakNet has evolved its tactics, increasing its average targets from three per month and shifting from purchasing stolen network access to launching its own campaigns. They now use deceptive error screens and a new tool that executes malicious code in a computer's memory. Their strategy includes ClickFix lures, which compromise legitimate websites to display fake security checks, tricking users into executing malicious commands. This method broadens their victim reach and reduces costs. The Deno loader, part of this strategy, collects machine information and retrieves additional malicious code without leaving standard files, making detection difficult. After infiltrating a network, LeakNet checks for active user credentials and uses PsExec for lateral movement, employing Amazon S3 buckets for payload staging and data exfiltration. Defenders are advised to monitor for suspicious behavior rather than just known malicious files, focusing on unusual web commands and unexpected cloud storage connections.

AppWizard

March 19, 2026

RUSSIA Mammut virus hits Russia’s patriotic messaging app

A virus known as Mamont is targeting users of the messaging platform Max, which has 100 million registered profiles. Mamont infiltrates online banking applications and spreads primarily through family and parental chat groups, allowing cybercriminals to steal payment information. The virus often begins with a deceptive message prompting users to click, leading to the silent download of a Trojan that siphons off data. Despite claims from the Max press service that the virus's spread is exaggerated, concerns remain about the security of user data, particularly given that all communications on Max are monitored by the state. Many users resort to using a second device, referred to as Maxofon, to comply with the platform's requirements while keeping their primary device for other applications.

AppWizard

March 18, 2026

New app provides secure messaging service for public sector employees

Beam is a secure messaging application developed by the state-backed Belgian Secure Communications (BSC) for approximately 750,000 public sector employees and military personnel in Belgium. The application is currently being used by defense and intelligence staff, with a broader rollout planned for next week. Beam is part of Belgium's investment in “sovereign communication systems” to protect sensitive data within national borders. It limits access to verified users, stores data on servers in Belgium, and has passed rigorous security testing by ethical hackers and cybersecurity firms. The rollout will occur in phases, developed internally within existing IT budgets.

AppWizard

February 17, 2026

New Keenadu backdoor found in Android firmware, Google Play apps

A sophisticated Android malware named Keenadu has been discovered embedded in the firmware of various device brands, compromising all installed applications and granting unrestricted control over infected devices. It employs multiple distribution methods, including compromised firmware images delivered over-the-air, access via backdoors, embedding in system applications, modified applications from unofficial channels, and infiltration through apps on Google Play. As of February 2026, Keenadu has been confirmed on approximately 13,000 devices, primarily in Russia, Japan, Germany, Brazil, and the Netherlands. The firmware-integrated variant remains dormant if the device's language or timezone is associated with China and ceases to function without the Google Play Store and Play Services. While currently focused on ad fraud, Keenadu has extensive capabilities for data theft and risky actions on compromised devices. A variant embedded in system applications has limited functionality but elevated privileges to install apps without user notification. The malware has been detected in the firmware of Android tablets from various manufacturers, including the Alldocube iPlay 50 mini Pro. Kaspersky has detailed how Keenadu compromises the libandroid_runtime.so component, making it difficult to remove with standard Android OS tools. Users are advised to seek clean firmware versions or consider replacing compromised devices with products from trusted vendors.

AppWizard

February 17, 2026

High on Life 2 review – skateboard-powered sequel is much easier to like than its painful predecessor

High on Life 2, the sequel to Squanch Games' first-person shooter, features advancements despite ongoing technical issues. Players return as an intergalactic bounty hunter following the defeat of the G3 cartel, now tasked with dismantling Rhea Pharmaceutical. The game introduces a variety of missions involving eccentric billionaires and mad scientists, with a notable mission set on a convention planet. The gameplay includes skateboarding, enhancing movement and combat. The sequel's tone is improved, with better character development and less abrasive humor, although the shooting mechanics remain lacking. Technical challenges persist, including significant bugs, but accessibility options have been added to enhance inclusivity.

AppWizard

January 28, 2026

The Defiant, a Story-Driven, Single-Player WWII FPS, Announced for PC and Consoles

Developer Hoothanes, in collaboration with publisher 4Divinity, is creating a single-player first-person shooter titled The Defiant, set during China's War of Resistance against Japan in World War II. The game utilizes Unreal Engine 5 and features diverse gameplay mechanics, including stealth infiltration, close-quarters firefights, sniping, urban espionage, code-breaking operations, vehicular combat, and large-scale assaults. The developers prioritize historical accuracy, treating weapons as historical artifacts and exploring settings such as occupied villages, frozen forests, fortified supply routes, and enemy-controlled urban zones. The game is available for wishlisting on Steam.