NewApp Digest
search bot

investigation

eScan Antivirus Update Servers Compromised to Deliver Multi-Stage Malware
Tech Optimizer
February 11, 2026

eScan Antivirus Update Servers Compromised to Deliver Multi-Stage Malware

MicroWorld Technologies confirmed a breach of its eScan antivirus update infrastructure, allowing attackers to deliver a malicious downloader to enterprise and consumer systems. Unauthorized access was detected, leading to the isolation of affected update servers for over eight hours. A patch was released to revert the changes made by the malicious update, and impacted organizations were advised to contact MicroWorld for assistance. The attack occurred on January 20, 2026, when a compromised update was distributed within a two-hour window. The malicious payload, introduced through a rogue "Reload.exe" file, hindered eScan's functionality, blocked updates, and contacted an external server for additional payloads. This rogue executable was signed with a fake digital signature and employed techniques to evade detection. It also included an AMSI bypass capability and assessed whether to deliver further payloads based on the presence of security solutions. The malicious "CONSCTLX.exe" altered the last update time of eScan to create a false sense of normalcy. The attack primarily targeted machines in India, Bangladesh, Sri Lanka, and the Philippines, highlighting the rarity and seriousness of supply chain attacks through antivirus products.
Hackers Used Hugging Face to Distribute Android Banking Trojans
Tech Optimizer
February 11, 2026

Hackers Used Hugging Face to Distribute Android Banking Trojans

Cybersecurity researchers have identified a malware campaign that exploited Hugging Face's AI infrastructure to distribute Android banking trojans. The attackers used a deceptive app called TrustBastion, which tricked users into installing what appeared to be legitimate security software. Upon installation, the app redirected users to an encrypted endpoint that linked to Hugging Face repositories, allowing the malware to evade traditional security measures. The campaign generated new malware variants every 15 minutes, resulting in over 6,000 commits in about 29 days. It infected thousands of victims globally, particularly in regions with high smartphone banking usage but lower mobile security awareness. The operation is believed to be linked to an established cybercriminal group. Security experts warn that this incident highlights vulnerabilities in trusted platforms and calls for improved security measures, including behavioral analysis systems and verification of application authenticity. The incident has also sparked discussions about the need for enhanced security protocols for AI platforms.
Moscow chokes Telegram as it pushes state-backed rival app
AppWizard
February 10, 2026

Moscow chokes Telegram as it pushes state-backed rival app

Russia's internet regulatory body, Roskomnadzor, is throttling Telegram for alleged national law violations, part of a broader strategy to promote a controlled domestic online service. The Russian government threatens internet platforms with slowdowns or bans for non-compliance with laws that require Russian user data to be stored domestically and prevent use for "criminal and terrorist purposes." Critics view these regulations as a means for increased state control and surveillance. Roskomnadzor plans to introduce phased restrictions on Telegram, which is widely used in Russia. Moscow is promoting a state-backed competitor, Max, that offers additional services. Users experienced slow traffic on Telegram following the announcement. Pavel Durov, Telegram's founder, has faced tension with Russian authorities and legal troubles in France related to allegations against Telegram, although travel restrictions were lifted in July 2025.
When Digital Guardians Turn Rogue: Inside the eScaneS an Antivirus Supply Chain Attack That Exposed Millions
Tech Optimizer
February 1, 2026

When Digital Guardians Turn Rogue: Inside the eScaneS an Antivirus Supply Chain Attack That Exposed Millions

eScan, an antivirus solution, has become a conduit for a supply chain attack that may have affected millions of users through a compromised software update mechanism. The attack exploited eScan’s automatic update system, distributing malware via official channels that appeared legitimate, thus bypassing traditional security measures. Reports indicate that supply chain attacks have increased by over 300% in the past three years, with software update mechanisms being prime targets. The exact number of affected users is still under investigation, but the breach occurred over a limited period before detection. Enterprises using eScan now face vulnerabilities in their security infrastructure, prompting IT departments to conduct forensic analyses to determine if their networks were compromised. The breach raises concerns about digital security as users typically rely on antivirus solutions for protection. Researchers found that the malware used advanced techniques, including multi-stage deployment and polymorphic behavior to evade detection, indicating significant resources behind the attack. In response, eScan has initiated an incident response protocol, revoked compromised digital certificates, and added verification layers to its update system. However, restoring user trust will require transparency about the breach and preventive measures. The incident has led to widespread security audits across the antivirus sector and may accelerate the adoption of zero-trust security models. Regulatory inquiries are underway regarding eScan's data protection practices, and legal experts anticipate class-action lawsuits from affected users and enterprises. The breach highlights a trend where attackers target security infrastructure itself, making software distribution security a critical focus for cybersecurity professionals. Proposed solutions include blockchain-based verification systems and industry-wide standards for supply chain security. The eScan breach underscores that no organization is immune to sophisticated supply chain attacks, as compromising a security vendor can provide access to its entire customer base. Increased information sharing about supply chain threats is advocated to enhance collaboration within the security industry. Moving forward, eScan must balance technical remediation with transparent communication to rebuild trust, while users are advised to implement defense-in-depth strategies rather than relying solely on one security tool.
When Digital Guardians Turn Rogue: Inside the Avast Antivirus Supply Chain Attack That Exposed Millions
Tech Optimizer
January 30, 2026

When Digital Guardians Turn Rogue: Inside the Avast Antivirus Supply Chain Attack That Exposed Millions

Avast's automatic update system was compromised, allowing malicious code to be distributed through its official channels, affecting potentially millions of users. This breach is characterized as a sophisticated supply chain attack, which exploited the software update mechanism, making it difficult to detect as the malware appeared legitimate. Security analysts noted a 300% increase in supply chain attacks over the past three years, with this incident highlighting vulnerabilities in security solutions. Avast has initiated an incident response, revoked compromised digital certificates, and is collaborating with cybersecurity firms to address the breach. European regulators have begun inquiries into Avast's data protection measures, and legal experts anticipate class-action lawsuits from affected users. The incident underscores a trend of attackers targeting security infrastructure itself, prompting calls for improved software distribution security and industry-wide standards.
Top antivirus hacked to push out a malicious update - find out if you're affected
Tech Optimizer
January 29, 2026

Top antivirus hacked to push out a malicious update – find out if you’re affected

Recent reports indicate that the antivirus program eScan experienced a security breach, leading MicroWorld Technologies to conduct an internal investigation. A threat actor exploited compromised update servers to distribute malware to users who downloaded updates during a two-hour window on January 20, 2026. The exact number of affected users is unknown, but the company has isolated the compromised infrastructure and refreshed credentials while assisting impacted users. The eScan product itself was not altered, and the victims were limited to a specific regional cluster. The malware, identified as CONSCTLX, operates as a backdoor and downloader, allowing attackers to maintain access and execute commands on infected devices. The identity of the attackers is unknown, but North Korean cybercriminals previously exploited eScan's update mechanism in 2024. MicroWorld Technologies has provided support to millions of customers but has not disclosed the total number of eScan users.
Microsoft’s first Windows 11 update of 2026 has been a mess
Winsage
January 26, 2026

Microsoft’s first Windows 11 update of 2026 has been a mess

Microsoft has issued two emergency fixes for issues arising from its January 2026 update for Windows 11. The first patch aimed to resolve various problems but resulted in shutdown issues for certain machines, particularly those using the Enterprise and IoT editions of Windows 11 version 23H2. In response, Microsoft released an out-of-band update to fix these shutdown problems. A week later, another out-of-band update was required to address crashes in OneDrive and Dropbox for users on Windows 11 versions 24H2 and 25H2. Additionally, Microsoft is investigating reports of boot failures linked to the January update, with some machines experiencing bluescreen errors and requiring manual recovery. This situation mirrors a previous incident where a security update was initially blamed for SSD issues, which were later attributed to firmware and motherboard BIOS problems.
You voted on the best Android apps and games of 2025, and it wasn't even close
AppWizard
January 22, 2026

You voted on the best Android apps and games of 2025, and it wasn’t even close

In 2025, the best Android app, according to a poll, was Androidify, which received 40% of the votes. Other contenders included Google Journal and Banana Browser, which did not reach double digits. The best mobile game was Red Dead Redemption, garnering just under 30% of the votes, followed by Subnautica with around 14% and Persona 5: The Phantom X with approximately 11%.
Search