login credentials Archives

Tech Optimizer

November 8, 2024

New malware SteelFox targets Windows users through fake software activators

A new malware named "SteelFox" is targeting Windows users by using counterfeit software activators to infiltrate systems, leading to cryptocurrency mining and data theft. Since February 2023, it has spread rapidly, primarily through torrent sites and online forums, masquerading as legitimate software cracks for programs like AutoCAD and Foxit PDF Editor. Upon installation, it deploys a risky driver called WinRingO.sys, exploiting vulnerabilities CVE-2021-41285 and CVE-2020-14979, which allows attackers to gain full access to the infected computer. The malware uses XMRig for crypto mining, causing performance issues and increased utility bills, while also stealing sensitive data from over 13 web browsers. Countries with high infection rates include Mexico, Brazil, Russia, China, and India. Kaspersky has blocked over 11,000 attempted attacks, but the actual number of infections may be much higher. To protect against SteelFox, users are advised to download software only from verified sources, maintain updated antivirus software, avoid pirated software, and keep systems current with security patches.

Winsage

November 5, 2024

Microsoft Windows User Warning—50 Million Of You Are Now At Risk

Microsoft has extended the end-of-life deadline for Windows 10 from October 2025 to October 2026, but this extension comes with a fee that is not universally applicable. Approximately 50 million Windows users are at risk and need to take action to protect their systems. Recent data shows that around 50 million users have migrated from Windows 10 to Windows 11, causing Windows 10's market share to drop just above 60% and Windows 11's to rise to nearly 36%. There are still around 850 million Windows 10 PCs that have not transitioned, with about 400 million unable to upgrade. Microsoft warns that unsupported versions of Windows do not receive software updates, including security updates. The company is preparing for a potential increase in new PC purchases in 2025, driven by an anticipated upgrade boom to Windows 11. Microsoft is also enhancing Windows 11 with security features to protect against cyber threats.

Tech Optimizer

November 3, 2024

The best antivirus software for Mac

All products featured are independently selected, and Mashable may earn an affiliate commission from purchases made through links on their site. Macs are not immune to viruses; they are more secure than Windows but still vulnerable to attacks. Investing in antivirus software is recommended for Mac users. The rate of malware targeting Macs has surpassed that of PCs. Malware includes various harmful software types, while a virus is a specific type of malware that replicates itself. Infections can occur from emails, social media links, and downloads. Ransomware locks users out of systems until a ransom is paid. Password managers help generate and store unique passwords, enhancing security. The best antivirus software for Macs varies based on usage patterns, and research has been conducted to evaluate leading antivirus solutions for effectiveness and additional security features.

Winsage

October 30, 2024

Windows 11 exposes user credentials

Security researchers at ACROS Security have identified a persistent zero-day vulnerability in Windows that allows unauthorized access to user credentials, affecting Windows 11 version 24H2 and earlier versions, including Windows 7. This vulnerability is associated with the Windows NTLM security protocol, which is used for user authentication. Despite previous patches from Microsoft, hackers have been able to bypass these fixes, and no official comprehensive solution has been provided by Microsoft. ACROS Security has released an unofficial patch to address the security gaps related to Windows theme files.

Tech Optimizer

October 22, 2024

Avira Free Antivirus for Mac

Microsoft is actively improving security in Windows, while macOS has security as a foundational principle but is still vulnerable to malware, necessitating antivirus protection. Avira Free Antivirus for Mac supports macOS versions starting from 10.15 (Catalina), with alternatives available for older systems. Premium antivirus options include McAfee Total Protection and Norton 360 Deluxe, with various pricing models. Avira was acquired by Gen Digital, which also owns Norton and Avast. Installation of Avira Free Antivirus is straightforward, and it includes features like scheduled scans and real-time protection. Independent testing labs rate Avira highly, with a score of 17.5 points from AV-Test. Avira's Browser Safety extension provides phishing protection, achieving a 100% detection rate for phishing URLs. The free version includes limited VPN access and basic privacy features, while advanced options require an upgrade to Avira Prime. The Smart Scan feature identifies security and performance issues, but users must upgrade for full remediation.

AppWizard

October 22, 2024

Best Password Managers for 2024 and How to Use Them

- Security is the foremost priority when choosing a password manager; look for zero-knowledge principles and AES 256-bit encryption. - The cost of password managers varies, with options for individuals, families, and businesses, and many offer free tiers with restrictions. - Cross-platform compatibility is essential, ensuring the service works across all devices, operating systems, and browsers. - Essential features to look for include multifactor authentication, password generator, secure sharing options, and automatic synchronization. - Secure sharing capabilities allow safe exchanges of vault items, with some services allowing sharing with non-users. - Some password managers offer secure file storage for important documents, with varying storage capacities. - Family plans typically cover multiple accounts under a single subscription fee, making them a cost-effective solution for sharing.

Winsage

October 14, 2024

Middle Eastern nations targeted by dangerous “OilRig” malware

Iranian threat actors, specifically a group known as OilRig (also referred to as APT43 or Cobalt Gipsy), are actively seeking login credentials to infiltrate organizations and personal systems in the UAE and the Gulf region. They target vulnerable servers to deploy web shells, allowing them to execute PowerShell commands and introduce malware. One vulnerability exploited is CVE-2024-30088, a Windows Kernel Elevation of Privilege flaw with a high base score of 7.0, which was patched by Microsoft in June 2024. This vulnerability enables attackers to escalate privileges and extract sensitive information. The malware used in these operations is STEALHOOK, an infostealer that exfiltrates data to a command and control server and can blend stolen information with legitimate data. OilRig is state-sponsored and primarily targets the energy sector, with connections to another Iranian APT group, FOX Kitten, involved in ransomware. Despite evidence of exploitation related to CVE-2024-30088, the US Cybersecurity and Infrastructure Agency (CISA) has not included it in its Known Exploited Vulnerabilities catalog.

AppWizard

September 25, 2024

Necro trojan found in popular Google Play apps and modded APKs, posing threat to Android users

Security researchers at Kaspersky have identified a new variant of the Necro trojan targeting Android users through legitimate Google Play applications and altered APKs from unofficial websites. The trojan can steal sensitive information, install additional malware, and execute commands remotely. Two infected apps on Google Play, Wuta Camera (over 10 million downloads) and Max Browser (over 1 million downloads), were removed by Google after the alert. The trojan is also found in modded versions of popular apps like Spotify and WhatsApp, which use various methods to activate the malware. Once installed, the Necro trojan can download additional malicious files, run harmful JavaScript, subscribe users to paid services without consent, and steal sensitive data. Kaspersky advises users to avoid untrusted sources, only install apps from official stores, be cautious of apps offering free premium features, and consider using a mobile antivirus solution.

Winsage

September 23, 2024

Hackers are leveraging pirated games to spread malware

Pirated or cracked versions of video games are increasingly being used by cybercriminals to distribute malware, with CAPTCHA challenges being employed to mislead users into believing that malicious websites or downloads are legitimate. A report from McAfee Labs indicates that this tactic is particularly common among individuals searching for cracked games, where dubious websites use CAPTCHAs to create an illusion of credibility. The malware, known as Lumma Stealer, targets sensitive data such as login credentials and cryptocurrency wallet information. It spreads through phishing campaigns, malicious downloads, and compromised websites, often hidden within pirated software. The use of CAPTCHA allows these malicious sites to evade automated security scanners, as users are tricked into thinking they are engaging with secure content. To mitigate risks, it is recommended to avoid pirated content and use legitimate platforms for downloading software.

AppWizard

September 23, 2024

Mostbet Mobile App for Android – Best Solution for Sports Betting

Modern technology has transformed sports betting, with the Mostbet mobile app for Android offering convenience and accessibility. The app allows users to access their profiles and features without repeated logins, ensuring constant access to events and results. It prioritizes security for personal information and financial transactions and provides a user-friendly interface. Users can enjoy live streaming of sports and esports events through the app. The app offers advantages over browser-based betting, including faster interaction, minimal storage requirements, push notifications for updates, 24/7 availability, and uninterrupted access without restrictions. To download and install the Mostbet mobile app on Android, users should visit the official Mostbet website, download the APK file, enable installations from unknown sources in settings, and follow on-screen instructions for installation. Placing bets using the Mostbet mobile app is straightforward: users open the main menu, select their sport and event, tap on the odds, enter the bet amount, and confirm the wager, making it efficient for live betting scenarios.