ongoing investigations Archives

Tech Optimizer

May 20, 2025

Shuswap resident scammed out of $9,000 by fake antivirus software representative

A resident of Blind Bay lost ,000 in a computer fraud scheme after being persuaded by a caller claiming to represent Norton antivirus. The victim, whose identity is confidential, was convinced to withdraw money from her bank account and deposit it into a Bitcoin account. Local police are investigating the case and have highlighted the importance of public awareness regarding such scams. Resources for recognizing and avoiding fraud include the BC RCMP Frauds and Scams, Canadian Anti-Fraud Centre, Canadian Telecoms Association, and Competition Bureau of Canada.

Winsage

May 20, 2025

Announcing Windows 11 Insider Preview Build 26120.4151 (Beta Channel)

Windows 11 Insider Preview Build 26120.4151 (KB5058486) has been released to the Beta Channel for users on Windows 11, version 24H2. This marks the transition from Build 22635.5305, the last update for version 23H2. All Beta Channel Insiders will be automatically upgraded to the latest version. New features include AI actions in File Explorer, allowing users to perform tasks like editing images or summarizing documents directly from the context menu. Currently supported image actions are Bing Visual Search, Blur Background, Erase Objects, and Remove Background, with support for .jpg, .jpeg, and .png file types. New AI actions for Microsoft 365 files, such as Summarize and Create an FAQ, will be introduced soon, requiring a Microsoft 365 subscription and enrollment in the Microsoft 365 Insider Program. Advanced settings have been redesigned and are now accessible via Settings > System > Advanced, including options for enabling long paths, managing virtual workspaces, and displaying Git information in File Explorer. Changes and improvements include added text descriptions for assistive technologies in the Accessibility flyout, notifications for incomplete search results in the Windows search box, and a new visual experience for the widgets board. User Interaction-Aware CPU Power Management has been introduced to reduce power consumption during inactivity. Fixes include resolving issues with core Windows surfaces in safe mode, maximizing File Explorer, and loading Bluetooth information in Settings. Known issues involve incorrect build version display post-PC reset, bugcheck issues with Xbox Controllers, and ongoing investigations into various features. Updates for Windows Insiders in the Beta Channel will be based on Windows 11, version 24H2, and features may not be widely released as they are subject to testing and feedback.

Winsage

March 7, 2025

Windows 11 Canary build 27808 is out with better CPU monitoring in Task Manager and more

Windows Insiders in the Canary Channel can download build 27808, which includes enhancements to CPU monitoring in Task Manager and various fixes for gaming, printing, search, graphics, BitLocker, and more. Notable updates include a change in how Task Manager calculates CPU utilization, aligning it with industry standards, and the introduction of an optional CPU Utility column on the Details tab. Fixes include: - Resolved a bug causing games like Roblox to crash upon launch. - Corrected a printing issue that triggered crashes in certain applications. - Fixed a glitch resulting in a blank search window in the taskbar. - Addressed a crash issue in Settings when adding a color profile. - Rectified inaccurate color displays in the battery icon. - Improved performance for loading BitLocker UI elements and fixed a looping issue with BitLocker. - Resolved an error with the Get-BitLockerVolume command. Known bugs include issues with Windows Hello PIN and biometrics for users transitioning from other channels, and ongoing investigations into a d3d9.dll crash affecting application launches.

AppWizard

March 6, 2025

Malicious Android App on Google Play Compromises 220,000+ Devices

Security researchers at ThreatLabz have identified a malware campaign operating through the Google Play Store that disseminated the Anatsa banking trojan, also known as TeaBot. The malicious app, disguised as a file manager and document reader, was downloaded over 220,000 times before its removal. The app initiated a multi-stage payload retrieval process after users granted accessibility permissions, allowing it to download the Anatsa payload and turn infected devices into tools for financial fraud. Anatsa uses overlay attacks and credential harvesting techniques, displaying fake login screens for banking applications to capture user credentials. It targets financial institutions across North America, Europe, and Asia, particularly mobile banking platforms. The malware employs evasion techniques, including delayed activation and encrypted communication, and maintains persistence by checking for accessibility service permissions. Initial data indicates concentrated infections in regions with high mobile banking usage, and the app's multilingual interface suggests a global targeting strategy. Google removed the app within 48 hours of the disclosure but it had been present for approximately eight weeks before detection. Google has initiated a mass uninstallation campaign for affected devices, while users are advised to perform factory resets, monitor financial accounts, enable Google Play Protect, and avoid granting permissions to unfamiliar apps. Investigations are ongoing to identify the threat actors, with links to Eastern European cybercrime syndicates suggested.

AppWizard

February 27, 2025

Slack Down: Workplace Messaging App Hit by Outage

Slack is experiencing connectivity issues today, with outages reported by users starting around 7 a.m. PT. Downdetector has noted a significant increase in complaints, indicating that approximately 60% of users are facing problems with the app, while 17% are encountering issues on the website. Slack's status page confirmed the issues at 7:27 a.m. PT, affecting functionalities such as messaging, logins, workflows, and integrations. Updates from Slack at 11:05 a.m. and 11:35 a.m. PT indicated ongoing investigations into the cause of the outage, but no cause has been disclosed yet.

Winsage

February 25, 2025

Windows 10 KB5052077 update fixes broken SSH connections

Microsoft has released the optional KB5052077 preview cumulative update for Windows 10 22H2, which includes nine bug fixes and enhancements, notably addressing an SSH connection issue acknowledged in November. This issue affects a limited number of devices on Windows enterprise, IoT, and education editions, with ongoing investigations into potential impacts on Windows Home or Pro editions. The update elevates Windows 10 22H2 systems to Build 19045.5555 and includes fixes for the Desktop Window Manager, Chinese IME responsiveness, and color contrast issues. Two known issues are associated with KB5052077: one involving Citrix components that may obstruct the installation of the January 2025 Windows security update, and another related to a System Guard Runtime Monitor Broker services issue generating 'Event 7023' errors. Over 60% of Windows systems globally still run on Windows 10, despite its approaching end of support, while certain Long-Term Servicing Channel and Long-Term Servicing Branch releases will continue to receive updates beyond October 2025.

Winsage

December 19, 2024

Satya Nadella claims Google “makes more money on Windows than all of Microsoft”

Microsoft CEO Satya Nadella stated that Google reportedly profits more from the Windows operating system than Microsoft itself. He highlighted the advantages of Windows' open architecture and its compatibility with various AI tools, including Google’s Gemini, OpenAI’s ChatGPT, and Anthropic’s Claude. Google’s Chrome browser accounts for 66% of desktop browser sessions, while Safari holds 9%. Google’s search engine captures approximately 85% of all search queries, compared to Microsoft’s Bing, which has a 3% market share. Cloudflare's report suggests Google's search share may be as high as 88%. Microsoft is under investigation for potential anticompetitive behavior, while Google has been attempting to undermine Microsoft's partnership with OpenAI. In 2021, Google paid Apple a billion dollars to remain the default search engine for Safari.

AppWizard

December 7, 2024

FBI warns users to encrypt text messages for cybersecurity. Here’s how to do it

The FBI has advised smartphone users to encrypt text messages, especially when communicating between Apple and Android devices, due to a cyber espionage campaign linked to hackers from the People's Republic of China. These hackers have targeted telecommunications infrastructure and stolen sensitive customer call records. Standard text messages between Apple and Android devices lack encryption, while messages between two devices of the same platform are secure. Users are encouraged to use secure messaging apps like WhatsApp and Signal, which provide end-to-end encryption. To use WhatsApp, users must download the app, accept terms, verify their phone number, and set up their profile. For Signal, users follow a similar process of downloading the app, verifying their phone number, creating a PIN, and setting up their profile. Both apps require Wi-Fi or cellular data for operation.

Winsage

November 21, 2024

Microsoft confirms game audio issues on Windows 11 24H2 PCs

Microsoft has acknowledged a challenge affecting Windows 24H2 users, particularly gamers using USB DAC sound systems, where audio volume unexpectedly surges to full intensity when using devices like the Creative Sound BlasterX G6. This issue occurs when users connect and disconnect their external sound systems or wake their systems from sleep mode, and adjusting the volume before detaching the device may also trigger the surge. Microsoft stated that users will not receive error messages; the only symptom is the sudden spike in audio output. The problem is linked to a timing issue within the AudioEndpointBuilder system service, and Microsoft is investigating it and plans to develop a fix. Additionally, Microsoft has identified another bug preventing users from changing time zones without administrative privileges, with a temporary workaround available. The company is committed to providing a resolution in an upcoming Windows update.

Winsage

November 13, 2024

Microsoft fixes bugs causing Windows Server 2025 blue screens, install issues

Microsoft has addressed bugs in Windows Server 2025 affecting installation, upgrade, and functionality, particularly on devices with high core counts. Users experienced installation failures, long upgrade processes, excessive boot times, and the Blue Screen of Death (BSOD). Not all devices are consistently affected; users can check for over 256 logical processors using the Task Manager. The issues were resolved by updates released on November 12, 2024 (KB5046617). A temporary workaround involves limiting logical processors to fewer than 256 by adjusting settings in the UEFI Setup. Microsoft is also investigating boot problems in iSCSI environments that cause "boot device inaccessible" errors. Windows Server 2025 is the latest Long-Term Servicing Channel release, offering enhanced stability and performance.