investigation Archives

AppWizard

March 23, 2026

FBI Warns of Russian Hackers Targeting Messaging Apps – The Advocate-Messenger

The FBI has issued a warning about phishing campaigns conducted by cyber actors linked to the Russian Intelligence Services (RIS), which target commercial messaging applications (CMAs). These actors have compromised numerous individual accounts, focusing on individuals with significant intelligence value, such as U.S. government officials and journalists, without breaching the encryption of the applications. The campaigns have allowed unauthorized access to private messages, contact lists, and the ability to send deceptive messages. Users of CMAs, especially Signal, are particularly targeted. The phishing tactics involve disguising messages as communications from automated CMA support, leading victims to click malicious links or provide sensitive information. To mitigate risks, users are advised to enhance their cybersecurity measures, remain vigilant, and follow best practices such as scrutinizing links, verifying group chats, and reporting suspicious activity to the Internet Crime Complaint Center or local authorities.

AppWizard

March 22, 2026

Russia is killing Telegram, its most popular messaging app, despite fears of pushback

The Kremlin is increasing its control over Telegram, Russia's most popular messaging app, leading to resistance from citizens and regime supporters. Telegram serves as an essential communication tool for many Russians, including pro-Kremlin activists like Grigory Korolyov, who uses it for military fundraising, and Olga Krygina, who organizes humanitarian aid. The government frames Telegram as a platform for terrorism, justifying restrictions by claiming it does not comply with Russian laws. Pavel Durov, Telegram's founder, is under investigation for allegedly assisting terrorism, which he denies, suggesting the crackdown is a government attempt to suppress dissent. The promotion of a state-backed alternative, MAX, has faced skepticism and connectivity issues. Military bloggers express concern that a potential ban on Telegram could harm battlefield communication, with reports indicating soldiers are being told to remove the app. Despite assurances from the Kremlin about alternative communication systems, experts argue that Telegram is vital for military operations, raising doubts about the effectiveness of MAX in this context.

AppWizard

March 21, 2026

Cyber actors linked to Russia target messaging app users, FBI warns

The United States has issued a warning about cyber actors linked to Russian intelligence targeting users of commercial messaging applications, particularly Signal, compromising thousands of accounts worldwide. The FBI and CISA released a public service announcement detailing the operation's focus on individuals of “high intelligence value,” including U.S. government officials, military personnel, political figures, and journalists. Attackers have not breached the encryption of these platforms but manipulate users into disclosing credentials or linking devices. Russian intelligence-linked actors often pose as official support accounts, creating urgency to obtain security codes. Dutch intelligence agencies also reported a similar campaign targeting Signal and WhatsApp accounts of dignitaries and military personnel. Users are urged to be cautious of suspicious messages and to avoid sharing personal information. Signal reaffirmed that its encryption remains intact, emphasizing that vulnerabilities arise from user behavior rather than technical flaws in the application itself.

Winsage

March 20, 2026

Locked out of C drive on your Windows PC? Microsoft outlines fix for Samsung app bug

Microsoft has removed the Samsung Galaxy Connect app from its Microsoft Store due to reports of users being locked out of their Windows C drive on Samsung laptops and desktops running Windows 11. The app was identified as the cause of the lockout, displaying error messages that prevented access to the system drive. Microsoft and Samsung confirmed the app's role in the issue and have provided a recovery guide for affected users, which includes steps to regain access to the C drive. Users are encouraged to contact Samsung Support for assistance with the recovery process.

Tech Optimizer

March 18, 2026

Stop! These 5 Antivirus Misconceptions Could Leave You Unprotected

Engaging with a computer exposes it to potential threats like trojans, ransomware, and malware. Antivirus software is essential for protection, but misconceptions exist about its use. 1. Antivirus subscriptions typically expire after a trial period of three to six months, requiring renewal, which can be checked in the software's 'About' section or 'Account' tab. Users should renew or install antivirus software if they haven't done so. 2. Setting antivirus subscriptions to auto-renew is advisable to prevent lapses in protection, with notifications sent before renewal dates. Some providers offer additional benefits with auto-renewal. 3. Disabling antivirus while gaming is risky; instead, users should look for a "game mode" feature that minimizes interruptions. 4. Antivirus alerts should not be dismissed as nuisances; they may contain important information regarding defenses or necessary actions. 5. Antivirus software alone does not ensure complete safety; additional tools like password managers and VPNs are recommended for enhanced security and privacy.

Winsage

March 17, 2026

Microsoft and Samsung scramble to fix a major C: drive lockout bug on Galaxy devices — faulty Galaxy Connect app leaves users with ‘limited’ recovery options following recent Windows 11 update

An unusual bug affecting Windows 11 users on Samsung devices prevents access to the main C: drive, following a February 2026 security update (KB5077181). Users receive an "Access denied" message when trying to launch applications or access files. The issue is linked to a Samsung-specific application, particularly the Galaxy Connect and Galaxy Share Folder applications, which may have broken Access Control Lists in Samsung’s factory image for Windows. Affected devices include various models of the Galaxy Book 4 laptops and certain Samsung Desktop models. Users are advised to remove the affected applications or revert to a recommended version while awaiting an official resolution from Microsoft and Samsung.

Winsage

March 17, 2026

Samsung Windows 11 Bug Blocks Access to C: Drive on Some Laptops

Microsoft has identified the Samsung Galaxy Connect app as the source of a significant bug affecting Samsung laptops running Windows 11, which causes "C: is not accessible - Access denied" messages. This issue prevents users from accessing files, launching applications like Outlook and Office, and performing administrative tasks without specific user action. Initially suspected to be related to Samsung Share, the investigation confirmed the Galaxy Connect app as the culprit. The bug has been reported in Brazil, Portugal, South Korea, and India, particularly affecting the Samsung Galaxy Book 4 and other Samsung devices, though a comprehensive list of affected models has not been provided. In response, Microsoft has removed the Galaxy Connect app from the Microsoft Store and is working with Samsung to investigate the issue. Samsung has reintroduced a stable older version of the app to help users. Users are advised not to install or update the Galaxy Connect app and to wait for an official patch, as recovery options for affected devices are currently limited.

AppWizard

March 17, 2026

The FBI is investigating malware hidden inside games hosted on Steam

The FBI is investigating a hacker responsible for releasing several video games with embedded malware on the Steam platform. The suspected games include BlockBlasters, Chemia, Dashverse/DashFPS, Lampy, Lunara, PirateFi, and Tokenova. These games were developed over the past two years and posed risks to gamers who downloaded them. This incident follows a similar event from the previous year when malware-laden games were also uploaded to Steam. Neither Valve nor the FBI has commented on the investigation.

Tech Optimizer

March 16, 2026

What Is a Crypto Miner Virus?

A crypto miner virus, or cryptojacking malware, secretly uses a device’s CPU or GPU to mine cryptocurrency for an attacker, leading to increased electricity costs and potential hardware damage for the victim. It typically infects devices through phishing emails, pirated software, compromised websites, and malicious browser extensions. Monero is the preferred cryptocurrency for mining due to its efficiency on standard CPUs and privacy features. Signs of infection include overheating, high CPU usage, and increased electricity bills. Detection involves monitoring system performance and running antivirus scans. Prevention includes using antivirus software, keeping systems updated, and avoiding pirated software. Notable incidents include attacks on a European water utility and the Los Angeles Times website.

Winsage

March 16, 2026

Windows 11 KB5079473 is not causing BSODs or an inaccessible C: drive and app failures, says Microsoft

The March 2026 Patch Tuesday update, KB5079473, is not causing significant issues like BSODs or reboot loops, according to Microsoft. Reports of an inaccessible C: drive and application malfunctions on Samsung PCs are linked to a recent update of the Galaxy Connect app, not the Windows update. Microsoft confirmed no known connections between the March update and major system failures. The update includes over a dozen security fixes and introduces new features, such as improvements to the File Explorer search bar and a Bing-based Internet speed test tool. Specific Samsung models are experiencing C drive accessibility issues due to the Galaxy Connect app, which has disrupted permissions.