phishing sites Archives

AppWizard

September 9, 2026

Gigabud Uses Android App Cloning to Evade Fraud Detection

The Gigabud Android banking trojan can clone banking applications into a separate Android work profile, allowing fraudsters to bypass malware alerts during transactions. Research by Group-IB, released on September 9, indicates that Gigabud is used with Vwork, a modified app for cloning, attributed to the GoldFactory group. The infection has been confirmed in Indonesia but targets 11 countries, including Brazil, Colombia, Egypt, Mexico, Thailand, and Turkiye. Vwork uses Android's Work Profile feature to isolate cloned apps, making them less detectable. This allows operators to install malware, clone banking apps, and execute transactions without raising alarms. During fraud, fake login screens capture credentials, and an invisible overlay collects lock screen codes. From February to July 2026, 1,469 devices were compromised in Indonesia, with financial losses nearing 0,939. Gigabud spreads through phishing and social media, requesting permissions to control devices. Group-IB identified six behavioral signals for banks to monitor as indicators of high-risk sessions. Recommendations include device binding and downloading apps only from official stores.

Tech Optimizer

September 1, 2026

NordVPN’s antivirus tool blocks 94% of phishing sites in latest independent test

NordVPN's next-generation antivirus achieved a 94% detection rate for phishing threats in an evaluation by AV-Comparatives, tested against 250 active phishing URLs and recording zero false positives. The antivirus also demonstrated a 92% block rate in similar independent testing and ranked third overall in speed and malware protection behind Avast and Norton. It is included in NordVPN's Complete subscription tier and operates alongside the standard VPN tunnel to block trackers, ads, and malicious sites in real-time. Users are advised to maintain vigilance and practice strong digital hygiene, including scrutinizing URLs and enabling two-factor authentication for added security.

AppWizard

August 31, 2026

Home Ministry alerts about rise in financial frauds through malicious Android apps

The Indian Cyber Crime Coordination Centre (I4C) has reported a rise in financial frauds associated with malicious Android applications disguised as pornography apps. These apps, including names like "Night Play," "Reloop," and "Kyss," are promoted through ads on Facebook and Instagram, leading users to phishing websites where they are encouraged to download APK files from unverified sources. The malicious apps exploit permissions granted by users to take control of devices, potentially facilitating unauthorized financial transactions. Recommendations for safety include only installing apps from reputable sources, avoiding suspicious downloads, and regularly monitoring financial transactions. Instructions for uninstalling these apps involve starting the phone in Safe Mode, uninstalling the suspicious app, and then restarting the device.

Tech Optimizer

August 30, 2026

WHAT THE TECH? iPhone antivirus scam

A viewer received a popup warning claiming her device had 120 viruses, which is a scam designed to prompt her to download a free antivirus app called "Total Cleaner." This alert is misleading and cannot scan the phone for viruses. The app has fake reviews, hidden costs, and privacy concerns, as it collects personal data. Most modern smartphones do not need traditional antivirus programs, and such popups are advertisements from free apps, misleading websites, or ad networks. To protect yourself, close the tab immediately, keep your device updated, and only download apps from official app stores after thorough research.

Tech Optimizer

August 29, 2026

What the Tech: Antivirus Scams

A viewer reported receiving a popup on her smartphone claiming her system was infected with 120 viruses, which is a scam designed to provoke panic and encourage the download of a free antivirus app called “Total Cleaner.” This popup aims to trick users into downloading an app that may have hidden costs, initiate expensive subscriptions, or direct them to phishing sites. The app “Total Cleaner” has fake reviews, hidden costs after installation, and privacy concerns regarding personal data collection. Most modern smartphones do not require traditional antivirus programs, and such popups are advertisements from deceptive sources. To protect against these alerts, users should close the tab immediately, keep their devices updated, and only download apps from official app stores after thorough research.

Tech Optimizer

August 27, 2026

What The Tech: Beware of the anti-virus popup scam

A viewer encountered a popup warning claiming her device was infected with 120 viruses, which is a scam designed to induce panic and prompt users to download a deceptive app called “Total Cleaner.” This app has fake reviews, hidden costs, and privacy concerns. Modern smartphones typically do not need traditional antivirus programs, and such popups are ads from free apps or misleading websites. To protect oneself, it is advised to close the browser tab immediately, keep the device updated, and only download apps from official app stores after thorough research.

Tech Optimizer

August 26, 2026

What The Tech: Beware of the anti-virus popup scam

A viewer experienced a pop-up warning claiming her device had 120 viruses, which is a scam designed to promote a free antivirus app called “Total Cleaner.” The pop-up aims to incite panic and persuade users to download the app, which has hidden costs, fake reviews, and privacy concerns. Modern smartphones generally do not require traditional antivirus programs, and these pop-ups are advertisements that do not reflect the phone's security status. To protect against such alerts, users should close the tab immediately, keep their device updated, and be cautious with app downloads.

AppWizard

August 23, 2026

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

A new Android malware threat, codenamed Manic, poses significant risks to Ukrainian banks, government services, and messaging applications, with a reach extending to Russian and European financial institutions, global fintech platforms, cryptocurrency services, and military communication channels. Manic combines Android banking malware and mobile spyware, targeting sensitive applications and enabling comprehensive device takeover. It features a novel Wi-Fi mesh technique for data relay through compromised devices and utilizes phishing sites and dropper apps. The malware originated in February 2026, with initial development leading to its first deployment by late May. It monitors 169 package IDs related to banks, payment services, and messaging applications, primarily affecting Ukrainian targets but also impacting applications in Russia and Europe. Manic can infiltrate commercial and military messaging apps, track locations, monitor notifications, and collect files. It exploits Android's accessibility services to capture sensitive data and employs a store-and-forward relay mechanism for data exfiltration through nearby compromised devices. Google has stated that no apps containing this malware are found on Google Play, and Android users are protected by Google Play Protect.

Tech Optimizer

August 22, 2026

Best Ransomware Protection 2026: Tested and Ranked

Ransomware protection is best approached as a layered strategy rather than relying on a single solution. The effectiveness of software is significantly enhanced by maintaining a well-managed backup that is disconnected during an attack. Five tools were evaluated based on their default settings, focusing on behavioral detection, protected folders, file rollback, and real-time protection. 1. Norton 360: Rated as the best overall ransomware protection, it offers comprehensive features including behavioral monitoring, protected folders with dual alert modes, and 50 GB of cloud backup within a single subscription. It has a perfect score in advanced threat assessments. 2. Bitdefender: Recognized for its file rollback and remediation capabilities, it provides an effective "undo" feature that restores files, although this feature is turned off by default. 3. Avast One Free: The best free ransomware protection option, it includes a dedicated shield on the free Windows tier and has achieved a perfect score in advanced threat assessments. 4. NordVPN Threat Protection Pro: Best for blocking the delivery route of ransomware, it prevents downloads before encryption starts but cannot stop the process once it has begun. 5. McAfee: Best for protecting multiple devices simultaneously, it offers unlimited device coverage on most plans with integrated ransomware defense in its scanning engine. Modern ransomware protection software has shifted from signature matching to focusing on monitoring the behavior of processes interacting with files. The four essential layers of protection include behavioral monitoring, protected folders, automatic file rollback, and backup. Most users do not need a separate anti-ransomware product, as these features are typically included in main antivirus suites, with the key consideration being whether these features are activated. The rankings of the tools were based on whether the ransomware protection layer is enabled by default, the extent of file recovery when intervention occurs, and the frequency of false positives during normal use. - Norton 360: Best overall, with protection enabled by default and a perfect score in advanced threat testing. - Bitdefender: Best for file rollback, but the rollback feature is disabled by default. - Avast One Free: Best free option, with a perfect score in advanced threat assessments but lacks rollback capabilities. - NordVPN Threat Protection Pro: Effective at blocking malware downloads but does not provide rollback or backup features. - McAfee: Suitable for families with multiple devices, offering automatic backup of flagged files but lacks user-configurable protected folder options. The effectiveness of ransomware protection tools is primarily assessed through behavioral responses rather than library matching. Backup remains a critical layer of defense, functioning even when other layers fail.

Tech Optimizer

July 10, 2026

Gen Digital stock holds steady as cybersecurity demand supports long term growth

Gen Digital is a publicly traded company focused on cybersecurity and digital privacy solutions, primarily targeting consumers and small businesses. The company generates revenue through recurring subscriptions for its security and identity protection services, which include antivirus software, VPN services, and identity monitoring. Gen Digital's business model relies on bundling multiple security features into comprehensive offerings, providing predictable revenue and stability in cash flows. The company emphasizes continuous updates to its services to protect against evolving cybersecurity threats. Its growth prospects are linked to trends in cybersecurity spending and the increasing adoption of subscription-based solutions. Gen Digital differentiates itself from competitors by focusing on individual devices and home networks rather than large enterprises. The company also benefits from distribution partnerships that help expand its customer base. Long-term demand for its products is driven by digitalization, cyber risks, and growing consumer awareness of privacy issues. Gen Digital's stock performance is influenced by both company-specific factors and broader market trends in technology and cybersecurity.