law enforcement Archives

Winsage

July 12, 2026

Microsoft Confirms Windows GDID Device Identifier That Cannot Be Disabled, Documented in FBI Case Filing

Microsoft has confirmed the existence of the Global Device Identifier (GDID), a unique identifier assigned to Windows installations, in a federal complaint against an alleged member of the Scattered Spider hacking group. The GDID is generated when a Windows system is set up with a Microsoft Account and remains active through various Windows updates. Disabling the GDID could disrupt Windows activation and access to Microsoft Store applications. The GDID is described as "a persistent, device-level identifier designed to uniquely identify an installation of a Windows operating system on a device." It is created during the provisioning of Windows with a Microsoft Account and is stored in the Windows registry under HKCUSOFTWAREMicrosoftIdentityCRLExtendedProperties. The GDID remains persistent through Windows updates but is not retained after a clean reinstall. A single user can possess multiple GDIDs linked through their account, OneDrive, and activation history. The FBI used the GDID to track Peter Stokes, an alleged member of the Scattered Spider group, across various VPN connections and proxy servers. The GDID was recorded visiting specific websites and was linked to Stokes's accounts on platforms like Snapchat and Facebook. Concerns have been raised regarding user privacy, as the GDID is assigned without user consent and cannot be disabled without compromising essential Windows features. Microsoft has not committed to providing user-facing controls or comprehensive documentation for everyday users regarding the GDID. Legal requests can compel Microsoft to disclose GDID activity data to law enforcement. The GDID is linked to the Microsoft Account rather than the device itself, meaning reinstalling the operating system does not sever this connection.

Winsage

July 10, 2026

You can’t fully disable Microsoft’s GDID Windows 11 tracker, but these settings limit what it captures

A 19-year-old named Peter Stokes was detained at Helsinki airport in April 2026 while traveling to Japan, carrying two 2TB hard drives. He was subject to an Interpol Red Notice and faced a federal complaint from U.S. prosecutors by July for his alleged involvement in the Scattered Spider hacking group, which breached a U.S. luxury jewelry retailer in May 2025, leading to a ransom demand. The Global Device Identifier (GDID), developed by Microsoft, is a persistent identifier that uniquely identifies a Windows installation on a device. It links online activities back to a single identity, which law enforcement can use to trace a device's owner. The GDID is generated when a user signs into Windows with a Microsoft Account and remains through updates but does not survive a clean reinstall. Stokes' use of the same Windows device allowed investigators to trace his activities through the GDID, which linked him to the hacking incident. Privacy advocates have raised concerns about the lack of consent for GDID assignment and the potential for surveillance.

AppWizard

July 8, 2026

This month’s Humble Choice is worth a look if you like RPGs, Zelda-likes, fast-paced shooters, or violating people’s civil rights

This month's Humble Choice features a selection of games appealing to fans of classic RPGs, nostalgic adventures, and action-packed shooters. One standout title has received a score of 85%, noted for its platforming time trials and featuring the English voice actor of Spike Spiegel. Another title, Tunic, has an 86% score and is praised for its challenging combat and exploration, reminiscent of classic Zelda games. Sea of Stars is highlighted for its beautiful RPG aesthetics. The offerings are available for approximately £11.50, and users are reminded to cancel their subscriptions after claiming their keys if they choose to do so.

AppWizard

July 7, 2026

Chat Control 1.0: EU Council forces messenger scans via fast-track

Member states of the European Union are seeking to reinstate a previously expired regulation concerning the monitoring of encrypted communications, known as Chat Control 2.0, which mandates suspicionless scanning of encrypted messages. The Council of Ministers has proposed to reactivate a transitional regulation that allowed voluntary monitoring by technology companies, which lapsed on April 3. This move aims to close a legal gap and pressure Members of the European Parliament (MEPs) to act quickly. The expiration of the previous regulation is viewed as untenable, as it is deemed crucial for identifying at-risk children and combating illegal content online. Critics argue that the approach undermines democratic oversight and lacks transparency. The draft regulation is set to be discussed as an urgent matter just before the summer recess, with potential voting occurring when many MEPs may be absent. The regulation requires that any processed content and traffic data be deleted within twelve months unless a specific suspicion is confirmed.

AppWizard

June 27, 2026

I tried to create the perfect zombie apocalypse in this intensely detailed outbreak simulator, and sorry slow zombie fans, fast zombies are just better

DeadOS is an indie game developed by Benn Powell, focusing on a realistic simulation of a zombie apocalypse. Inspired by cutscenes from Resident Evil 3, Powell aimed to explore the moments typically overlooked in zombie narratives. The game allows players to manipulate various parameters, such as city size and population density, to observe the consequences of different outbreak scenarios in a procedurally generated 3D cityscape. The simulation initially featured a simple infection model but became more complex with the addition of weapons and law enforcement, affecting human behavior during the outbreak. Players can guide characters through the chaos, engaging in actions like fighting zombies and scavenging for supplies. After nearly seven years of development, Powell plans to enhance the game further, including features for player-designed cities and community-created content. He aims to create a detailed zombie outbreak simulation, likening it to the Dwarf Fortress of undead scenarios.

AppWizard

June 27, 2026

Kentucky state police open cadet class 108 applications – The Advocate-Messenger

The Kentucky State Police (KSP) has opened applications for Cadet Class 108, as announced by Governor Andy Beshear. The starting salary for sworn officers has been increased to ,000 annually, with opportunities for 100 hours of overtime. Cadets will receive mileage reimbursement while attending the academy, which features a revamped 22-week training curriculum. This training includes over 1,000 hours of classroom instruction and field study covering various topics such as constitutional law, crisis response, and weapons use. Cadet Class 108 will begin in May 2027, and applications must be submitted by October 15, 2026, through JoinKSP.com.

Tech Optimizer

June 20, 2026

Chinese police bust cybercrime ring behind ‘Silver Fox’ Trojan virus

Chinese law enforcement has dismantled cybercrime operations linked to a new variant of the Silver Fox Trojan virus, which targets employees in enterprises and public institutions, particularly in financial roles. The malware allows cybercriminals remote access to steal account credentials, intercept SMS verification codes, and harvest personal information. A criminal syndicate in Jilin province, led by an individual named Chen, developed this Trojan and conducted mass phishing campaigns, resulting in losses exceeding 7 million yuan. Police have taken action against Chen and 26 accomplices, with ongoing investigations. Recommendations for enhancing personal cybersecurity include downloading software from official websites, scrutinizing website domains, verifying links before clicking, and disconnecting compromised computers from the internet. Under China's Criminal Law, unauthorized access to computer systems and data theft can lead to imprisonment and financial penalties.

TrendTechie

June 20, 2026

Житель Светлогорска зарабатывал на скрытом майнинге через торренты

Law enforcement officials in the Grodno region have arrested a 35-year-old resident of Svetlogorsk for allegedly distributing malicious software. The suspect modified a hidden virus miner, embedding it in free torrent downloads, which activated on users' computers to mine cryptocurrency without their consent. This activity reportedly earned the hacker about 1,000 Belarusian rubles monthly and affected over 500 computers in Belarus and neighboring countries. An official criminal case has been initiated to address this cybercrime.

AppWizard

June 17, 2026

Google removes messaging app Telegram from Play Store, Apple likely to follow suit

The Indian government has removed numerous channels, groups, and bots from Telegram that were allegedly promoting fraudulent activities and misleading information, following insights from the National Testing Agency (NTA) and state law enforcement. This action has drawn criticism from digital advocacy organizations, such as IGAP and the Internet Freedom Foundation, which argue that the approach may disproportionately affect legitimate users of the platform and that fraud can occur across various platforms. The restrictions, enacted under Section 69A of the Information Technology Act, 2000, will limit access to Telegram throughout India until June 22, 2026, and require the platform to disable message-editing capabilities for all Indian users until June 30, 2026.

Winsage

June 12, 2026

Vietnam launches first criminal case over pirated Windows, Office software

Authorities in Phu Tho province have initiated a criminal case regarding the illegal installation and use of copyrighted software, specifically targeting pirated Microsoft Windows and Office products. Formal charges for "infringement of copyright and related rights" have been made following urgent searches at five locations in Hanoi and Phu Tho. The investigation revealed that individuals and businesses were using various platforms to promote, distribute, and sell unlicensed software, including cracked software and counterfeit license keys. The inquiry began with Song Lam Trading and Service Co, whose director faces allegations of supplying 81 computers pre-installed with unauthorized software. An additional 350 computers linked to a local educational institution were also found to have illegal software activation. The implicated companies include Athena Vietnam Information Systems Co and Tek-Solution Technology Co, whose directors are under police scrutiny. Authorities estimate that the financial losses for copyright holders could reach tens of billions of đồng, and they have raised concerns about cybersecurity threats associated with illegally activated software.