Phishing Archives

Tech Optimizer

May 30, 2025

I put Bitdefender and Norton up against each other to see which was best, and the results were almost too close to call

Bitdefender has a detection rate of over 98% for malware, while Norton has a 97% offline detection rate and exceeds 99% online. Bitdefender's firewall is configurable but limited to its Total Security package, whereas Norton offers a powerful and customizable firewall. Bitdefender provides a separate Digital Identity Protection service for .33 per month, while Norton includes identity theft protection through its LifeLock service in higher tiers, offering features like credit monitoring and potential compensation up to million. Bitdefender includes a VPN with a 200MB daily data cap, while Norton offers an unlimited VPN in most subscription tiers. Both have password managers, but Bitdefender lacks two-factor authentication. Bitdefender offers straightforward parental controls, while Norton includes mobile GPS tracking. Bitdefender is recognized for its lightweight design, while Norton is noted for its speed. Bitdefender has a user-friendly interface, while Norton’s may be more complex for beginners. In independent tests, Bitdefender slightly outperforms Norton in offline detection. Norton's basic plan starts at .99 per year, while Bitdefender's Antivirus Plus starts at .99 per year.

Tech Optimizer

May 29, 2025

Xanthorox, the AI that promotes itself as an easy resource for committing cybercrimes

Xanthorox is an AI developed in 2023 by an anonymous creator, claiming to surpass WormGPT and EvilGPT. It promotes itself as a tool for illicit online activities, offering features like ransomware creation, deepfake generation, phishing email production, and malware development. The AI operates on open-source models without typical security measures, allowing for unregulated content generation. Its pricing includes a free tier for limited features and negotiable rates for full access. Security experts note that while Xanthorox is effective, its actual impact on large-scale cybercrime is uncertain. The legality of Xanthorox stems from its open-source nature, which allows for its use as long as it does not violate laws, although using it for illegal activities remains unlawful.

Tech Optimizer

May 29, 2025

A Trojan-Downloading Website Is Imitating a Popular Antivirus Website

Hackers are increasingly using sophisticated techniques to entice users into downloading malware, with many individuals still falling victim to basic social engineering tactics. A counterfeit website mimicking the legitimate antivirus program Bitdefender has been created, which could mislead users. This spoofed site hosts a bundled executable named StoreInstaller.exe that contains malware configurations linked to VenomRAT, capable of remote access, credential theft, keylogging, and data exfiltration. The counterfeit site closely resembles the legitimate one, making it difficult for untrained users to distinguish between them. Users are advised to download antivirus software only from reputable sources and to verify the authenticity of the website before proceeding.

Tech Optimizer

May 29, 2025

How to run an antivirus scan on your computer

When selecting antivirus software, understanding its functionality is crucial to ensure adequate protection. Running a virus scan involves opening the antivirus program, clicking the ‘Scan’ button, and allowing the software to operate. Automated scan schedules are important for consistent protection, especially during system startup to catch hidden malware. Key points for executing scans include avoiding heavy applications during the scan, utilizing the ability to pause scans, and ensuring laptops are charged and plugged in. During scans, the antivirus may identify potentially unwanted programs (PUPs), which should not be dismissed. After a scan, reviewing the results is essential, including threat names, severity ratings, affected files, and recommended actions. If threats are detected, correlating them with known vulnerabilities is advisable. Some malware may require a device restart or boot-time scanning for removal. Maintaining exportable logs can be beneficial for future reference. Post-scan, it is important to patch operating systems, change passwords if necessary, perform system backups, and establish a regular backup plan. Most antivirus programs offer features for automated scans and real-time protection, which should be utilized. Regular checks of reports are necessary to stay informed about device security. To maintain virus-free devices, users should avoid unknown links or email attachments, download software from legitimate sources, use strong passwords, back up important files, keep browsers updated, and enable multi-factor authentication. Regular virus scans are vital for safeguarding online presence and preventing performance issues.

Tech Optimizer

May 29, 2025

Antivirus alone won’t protect you: The real danger is social engineering

Social engineering is a manipulation tactic that exploits human trust to obtain sensitive information or access, posing a significant cybersecurity threat. Unlike traditional cyber threats that rely on malware, social engineering targets individuals through deception, often invoking emotions like fear or urgency. Common examples include fraudulent phone calls, phishing emails, and deceptive text messages. Antivirus software primarily protects against malware but is ineffective against social engineering attacks, which do not involve malicious code. The consequences of falling victim to such attacks can include financial losses, identity theft, and compromised networks. Effective defenses against social engineering include skepticism towards unsolicited contact, verifying requests independently, never disclosing sensitive information, using strong passwords, and enabling two-factor authentication. Awareness and education are crucial in combating these threats.

Tech Optimizer

May 28, 2025

Hackers Mimic Popular Antivirus Site to Deliver VenomRAT & Steal Finance Data

Cybercriminals are executing a sophisticated malware campaign through a counterfeit Bitdefender antivirus website, specifically the domain “bitdefender-download[.]co,” which mimics the legitimate site. This fraudulent site distributes three types of malware: VenomRAT, StormKitty, and SilentTrinity, aimed at stealing financial data and maintaining persistent access to victims’ computers. When users click the “Download For Windows” button, they inadvertently download a ZIP file containing these malicious programs. VenomRAT acts as a remote access tool, allowing attackers to steal files, cryptocurrency wallets, and browser data, including credit card information. StormKitty quickly harvests sensitive credentials, while SilentTrinity provides stealthy long-term access for further exploitation. The fake Bitdefender site is linked to other malicious domains impersonating banks, indicating a coordinated phishing operation. The attackers utilize the same command and control infrastructure, with the IP address 67.217.228.160:4449 identified as a connection point. Bitdefender is working to take down the fraudulent site, and Google Chrome has begun flagging the link as malicious. Security experts recommend verifying website authenticity and downloading software only from official sources.

Tech Optimizer

May 28, 2025

M&S shoppers urged to set up security measure on ‘all accounts’

M&S shoppers are being urged to enhance their online security following a cyber attack that disrupted customer services. The retailer has acknowledged ongoing challenges, stating they cannot process online orders while stores remain open. Sensitive customer information, including phone numbers, email addresses, and order histories, was compromised in the breach. Security expert Luis Corrons from Norton recommends activating two-step verification for online accounts, being cautious about stored personal and payment information, deleting unused accounts, using strong passwords, and keeping devices and software updated to improve security. He emphasizes that cyber threats are increasingly targeting human behavior and that these security measures are essential for digital safety.

Winsage

May 28, 2025

All Windows users must ‘watch out’ and delete ‘Microsoft’ updates now

Windows 10 and Windows 11 users are experiencing a rise in phishing emails that appear to be from Microsoft, according to Action Fraud, the UK's national fraud and cybercrime reporting center. Over 250 users have reported receiving fraudulent messages claiming their devices are infected with malware, often encouraging them to click on malicious links. These emails may look credible, sometimes using legitimate Microsoft addresses. Action Fraud advises users to verify messages directly with organizations using official contact details and warns that legitimate institutions will never request personal information via email. Microsoft also states it does not send unsolicited emails or calls for personal information and recommends downloading software only from official sources.

Winsage

May 27, 2025

Microsoft Windows Warning—Do Not Install These Apps On Your PC

A recent advisory warns Microsoft users about malicious websites that install harmful applications on Windows PCs. Security researchers at DomainTools have identified a scheme where attackers create counterfeit websites resembling popular brands to trick users into downloading malware-laden applications. These applications deploy three types of malware: VenomRAT, StormKitty, and SilentTrinity, which can steal passwords and digital wallet information, and allow attackers to maintain control over compromised systems. The counterfeit sites impersonate well-known brands, including Bitdefender and various banks, highlighting the need for users to follow Microsoft's guidance on transitioning from passwords to passkeys. The attacks utilize open-source components, making them more efficient and adaptable. Users are advised to download software only from official websites, verify website addresses, and be cautious when entering credentials.

Tech Optimizer

May 26, 2025

This Stealthy Malware Takes Control of Your Computer to Steal Your Data

Skitnet is a new malware that targets personal data by stealthily infiltrating computer systems. It is used by hackers to steal sensitive information through advanced methods, including the insertion of invisible malicious code in emails and the creation of fraudulent websites. Cybersecurity experts from PRODAFT have revealed that Skitnet is often employed by ransomware groups and can remotely control infected computers using services like AnyDesk. The malware operates discreetly, monitoring user actions without detection for extended periods, making it difficult for victims to realize they are infected until after data theft occurs. To protect against such threats, security specialists recommend identifying suspicious emails, using reliable antivirus software, and enhancing account security with two-step verification and strong passwords.