March 2025 Archives

Winsage

June 16, 2026

China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth

Cybersecurity researchers have identified two new Windows variants of the SprySOCKS backdoor, named WINDRV and WINPLUS, which were previously thought to be exclusive to Linux systems. Both variants feature hard-coded command-and-control configurations and can communicate via TCP, UDP, and WebSocket protocols. They support over 30 commands for operations such as system information collection and file management. WINDRV employs kernel drivers for stealth, obscuring network connections and allowing TCP traffic diversion. SprySOCKS was first documented by Trend Micro in September 2023, linked to the Chinese state-sponsored threat actor Earth Lusca, also known as FishMonger. The Windows variants belong to version 1.8 of SprySOCKS and utilize a kernel driver named RawWNPF for enhanced stealth. The attack chain begins with an initial access method that drops a batch script, leading to the installation of the backdoor. Evidence suggests these variants may have been used in attacks against government organizations in Honduras, Taiwan, Thailand, and Pakistan between 2023 and 2024. The WINPLUS variant was first detected in July 2024 in Pakistan. There are indications of a potential UEFI bootkit involvement exploiting CVE-2023-24932, a vulnerability in the Windows Boot Manager.

Winsage

June 11, 2026

ReactOS Runs Half-Life Natively: Open-Source Windows NT Clone Clears 3D Graphics Bar

ReactOS has successfully executed Valve's original Half-Life on consumer hardware, marking a significant milestone in open-source software development. This achievement was announced on June 10, 2026, after three decades of effort to reimplement Microsoft Windows. The game was run on a Dell OptiPlex desktop with an Intel Core i5 2400 processor and an NVIDIA GeForce 8400GS graphics card, demonstrating ReactOS's capability to handle real-time 3D applications without compatibility shims. ReactOS operates independently from Microsoft, sharing no code, and can execute a real-time 3D graphics workload natively. It has achieved approximately 90 percent GPU driver compatibility for Windows XP and Server 2003-era hardware through the implementation of the Kernel-Mode Driver Framework and Windows Display Driver Model subsystems. ReactOS is still in alpha stage, with limitations in application support and driver gaps for modern hardware. The project is working towards a new release, version 0.4.16, to enhance user experience.

AppWizard

May 25, 2026

Over 200 Fake Android Apps Are Quietly Stealing Money From Phone Bills

Zimperium identified a sophisticated malware campaign that exploited nearly 250 Android applications, posing as popular games and social media platforms. The malware ensnared users into premium subscription services without consent, using techniques like JavaScript injection and interception of one-time passwords. The campaign primarily targeted users in Malaysia, Romania, Thailand, and Croatia, with the malware capable of reading SIM cards and activating for specific mobile carriers. Zimperium first detected the scam in March 2025 and monitored it until at least January 2026. Google stated that none of the compromised applications were available on its app store and emphasized that Android users are protected by Google Play Protect. The hackers deployed three malware variants, with the first using an automated subscription engine, the second targeting users in Thailand with premium SMS messages, and the third combining SMS fraud with real-time notifications to attackers via Telegram. The campaign primarily affected Malaysian SIM card users, with significant activity also in Thailand and Romania. Despite the campaign's last known activity in January, parts of its infrastructure remain operational. The attacks highlight vulnerabilities in application security and the challenges of policing app downloads from third-party marketplaces.

AppWizard

May 14, 2026

93 Percent Of Capcom’s Game Sales Are Digital And The Company Expects That Number To Grow

Capcom reported that 93 percent of its total game sales were digital for the fiscal year from March 2025 to March 2026, a rise from 90 percent in the previous two years and 75 percent in 2022. The company has achieved nine consecutive years of record profits, driven by new titles and established franchises. Digital sales growth is largely attributed to an increase in PC gaming, with PC sales rising from 33 percent in 2022 to 54.5 percent in fiscal 2026. Capcom forecasts digital sales will reach 95.5 percent of total sales by next year. Despite the shift to digital, physical sales still accounted for seven percent of total sales, translating to over 4 million copies sold globally.

AppWizard

April 11, 2026

Security researchers find 213 vulnerabilities in Russia’s state-backed messaging app Max

Security researchers discovered 213 vulnerabilities in Max, Russia's state-backed messaging app, during a bug bounty initiative. This information was shared by Alexei Batyuk, CTO of Positive Technologies, at the Svyaz-2026 exhibition. The bug bounty program has been active since July 1, 2025, resulting in 288 accepted vulnerability reports and total payouts of nearly 22 million rubles. Common vulnerabilities could allow unauthorized access to user data through the manipulation of object identifiers. Max's press service claimed that user data is "reliably protected" and emphasized the importance of independent white-hat hackers in identifying vulnerabilities. Max was launched by VK in March 2025 and is being promoted by Russian authorities amid efforts to block other messaging platforms like Telegram and WhatsApp. The app has faced criticisms regarding user surveillance and security vulnerabilities.

AppWizard

April 3, 2026

Google Vids is ushered into a new era of AI creation and editing with Lyria 3, Veo 3.1

Google Vids has integrated two new AI models, Veo 3.1 and Lyria 3, enhancing the platform for all users, including AI Pro and Ultra subscribers. Veo 3.1 improves video quality and allows customization with AI avatars, while Lyria 3 enables users to generate songs based on prompts. All users can now generate video clips for free, and a new Screen Recorder extension for Chrome has been introduced. The update also includes YouTube support for uploading AI-generated content, which defaults to "Private." This follows previous enhancements like AI voiceovers and image-to-video capabilities.

AppWizard

March 25, 2026

Call of Duty veteran’s new studio, which was just announced in 2025, is reportedly being closed by Sony

Sony has decided to close Dark Outlaw Games, a studio founded by Jason Blundell, just over a month after announcing the closure of Bluepoint Games. Dark Outlaw was still in the early stages of development on an unannounced project. Reports indicate that Sony laid off an undisclosed number of employees, with estimates suggesting around 50 individuals were affected. Blundell had previously expressed enthusiasm for the studio's partnership with Sony, highlighting the privilege of being a new first-party studio. Before Dark Outlaw, Blundell was involved with Deviation Games, which closed in 2024 without releasing a game. The gaming industry has faced significant layoffs and studio closures in 2023, with Epic Games announcing layoffs of over 1,000 employees due to insufficient revenue.

AppWizard

March 24, 2026

Russia pushes unencrypted Max messenger as WhatsApp, Telegram face restrictions

The Max messenger app, launched by VK in March 2025, has gained popularity in Russia, particularly as the government restricts messaging apps like WhatsApp and Telegram. The app combines messaging, social media, government services, digital identification, and banking. President Vladimir Putin supports it as a means to achieve "technological sovereignty," and a law designates Max as a "national multifunctional messenger." Digital Development Minister Maksut Shadayev has promoted Max, which is also featured prominently on state television. Although not mandatory, there is significant pressure on citizens to use it, with schools and corporations transitioning communications to Max. As of March, the app surpassed 100 million users and is on Russia's "white list" of digital services that remain operational during internet blackouts. Since September, it has been pre-installed on all phones and tablets sold in Russia, with the RuStore app store being mandatory for Apple devices. Max does not offer end-to-end encryption, and user data is stored on Russian servers, with policies allowing data sharing with authorities. Critics, including the Budushcheye political movement, express concerns about surveillance and the app's functionality as a "digital trap." Despite government assurances, disruptions on Telegram and WhatsApp have been reported, with limitations on calls initiated by the government citing non-cooperation from these foreign-owned services.

Winsage

March 18, 2026

Microsoft appears to be dumping native Copilot for Windows 11 in favour of web wrapper yet again

The latest update for Copilot has transformed it into a WebView-based application, marking it as a hybrid app rather than fully native. The new Copilot (version 146.0.3856.63) operates as a web application, evidenced by multiple sub-processes in the Task Manager that are characteristic of Microsoft Edge. The version number of Copilot aligns closely with that of Microsoft Edge. The revamped Copilot functions as a web app within a desktop shell but loads content from copilot.microsoft.com. Despite its web-based nature, it performs comparably to its native predecessor and launches more quickly. Microsoft had previously announced a "native" version of Copilot, which was misleading as it still relied on web components. In 2025, Microsoft began distributing a truly native Copilot app, free of web components, which started in March 2025. However, the Copilot has now reverted to a web-based format for users in the Windows Insider Program, with plans to extend this change to non-Insiders soon.

AppWizard

March 4, 2026

Google Revamps Android App Store Rules, Cuts Fees Amid Global Antitrust Pressure

Alphabet's Google has announced a transformation in app distribution on Android devices, allowing external companies to register and launch their own app stores by paying a one-time fee. This change aims to enhance accessibility for competitors and lower costs for developers. Google will reduce its standard commission for developers from 30% to as low as 15% or 10% in some cases, with implementation expected by June in the US, UK, and EU, and similar changes in Australia, South Korea, and Japan by the end of 2026. Developers using Google’s billing services will incur a flat fee of 5%, while they can also opt for third-party payment processors. Epic Games has expressed approval of these changes, which they believe will help resolve ongoing litigation. Google generated approximately .66 billion in sales from its app marketplace in 2020, and regulatory changes could reduce its gross profit by around billion. The European Commission has accused Google of violating the Digital Markets Act, which could lead to fines of up to 10% of its global annual revenue. Google has previously faced €9.5 billion in fines for competition law violations. A US jury ruled in 2023 that certain Android policies violated antitrust law, leading to an injunction requiring Google to allow competing app stores access to its app catalog. Despite regulatory pressures, Google stated that the changes to the developer fee structure were voluntary and not mandated by legal rulings.