Promoted Archives

Winsage

July 3, 2026

Microsoft brags Copilot key has main character energy on Windows 11, but you can soon remap it

Microsoft promoted the Copilot key on social media, branding it as a button with “main character energy,” despite acknowledging that it has negatively impacted productivity for some users. The company plans to allow remapping of the key in an upcoming Windows 11 update. User reactions to the promotion were largely critical, with many expressing dissatisfaction and calling for the removal of the Copilot key. Microsoft had previously admitted that the key caused disruptions in productivity and accessibility workflows. Additionally, only 3.3% of Microsoft 365 users are paying for Copilot, indicating low adoption. Microsoft has distanced its flagship products from the Copilot branding and users have reported preferring alternatives like ChatGPT and Claude over Copilot.

Winsage

June 30, 2026

A critical Windows 11 and Windows 10 flaw turns Microsoft Defender into a hacker’s best friend

Chaotic Eclipse, also known as Nightmare-Eclipse, bypassed Windows 11's BitLocker security using a USB stick and claimed Microsoft left a backdoor in the system. Following this, Microsoft patched three zero-day exploits named YellowKey, GreenPlasma, and MiniPlasma. Nightmare-Eclipse then revealed another zero-day vulnerability called RoguePlanet, which affects Microsoft Defender on Windows 10 and 11, potentially allowing attackers full control over compromised systems. Microsoft is tracking this vulnerability as CVE-2026-50656 and is working on a security update. Nightmare-Eclipse provided a proof-of-concept exploit and described it as a race condition with variable success rates. Microsoft has promoted Windows Defender as adequate for most users but acknowledged that third-party tools can offer additional protection. The company initially threatened legal action against Nightmare-Eclipse but later decided not to pursue lawsuits against researchers sharing their findings.

Winsage

June 27, 2026

New Millenium RAT version infects 62,000 Windows systems worldwide

A significant evolution of the Millenium remote access trojan (RAT) has impacted over 62,000 Windows devices across more than 160 countries. The latest version, 4.*, marks a departure from previous .NET-based versions and is attributed to a threat cluster known as Y2K Operators, with the creator identified as “ShinyEnigma.” There are 62,289 infected endpoints, with 39,730 infections occurring in the first quarter of 2026. The RAT is marketed as malware-as-a-service (MaaS) and promoted through underground forums and platforms like GitHub, with accessible pricing. Millenium RAT 4 is developed in native C++ and uses the Telegram Bot API for command-and-control communications. Its capabilities include stealing browser data, collecting system information, logging keystrokes, capturing screenshots and audio, accessing Telegram and Discord data, downloading additional payloads, and executing Windows or PowerShell commands. The malware ensures persistence by replicating itself in the %APPDATA% directory and creating an autorun registry entry. The malware is distributed through social engineering tactics such as cracked software, cryptocurrency utilities, hacking toolkits, OSINT tools, exploit builders, and Roblox-related cheats. Some campaigns have trojanized malware builders, infecting cybercriminals. One campaign used PDF-themed lures with a malicious Windows shortcut to download the RAT while displaying a legitimate document. Payloads often use filenames associated with Windows components or security software to blend into infected systems. Group-IB recommends avoiding untrusted executables, applying security updates, enabling multi-factor authentication, and monitoring for unusual autorun registry entries.

AppWizard

June 18, 2026

How Your Location Influences Android App Availability

The Google Play Store customizes its app offerings based on the user's location, which affects app availability and functionality. App developers often set distribution rules that vary by region, leading to differences in user experience even for identical apps. Android devices determine location through a combination of signals, including SIM card data, GPS, and Wi-Fi positioning. Connectivity issues, particularly in rural areas, can limit app usability, while social habits influence regional app demand. Developers analyze engagement data to adapt their offerings based on regional preferences, creating a feedback loop that affects app visibility and features. Users should verify app functionality based on their location and connectivity before assuming an app's absence is due to obscurity.

Tech Optimizer

June 16, 2026

Subscription twist: Norton 360 Deluxe adds more than just antivirus

Norton 360 Deluxe is a mid-tier security subscription from Gen Digital that offers antivirus protection, a VPN, a password manager, dark web monitoring, and parental controls for up to five devices. It includes real-time threat protection, a firewall, ransomware shielding, and cloud backup of up to 50 GB for Windows users. The parental controls, known as Norton Family, allow monitoring of children's online activities. The Secure VPN encrypts internet traffic on public Wi-Fi and masks IP addresses. The package also features PC SafeCam for webcam security and a smart firewall. Norton 360 Deluxe is marketed with a promotional first-year rate, with higher renewal prices, and is available through digital subscriptions, app stores, and major retailers. The product is designed for households and individuals seeking comprehensive security solutions.

Tech Optimizer

June 11, 2026

Avast One: Security and privacy suite under the microscope

Avast One is the flagship consumer security suite from Avast (Gen Digital), combining antivirus, firewall, VPN, and privacy utilities into a single subscription for Windows, macOS, Android, and iOS. It offers four primary areas: device security, online privacy, identity protection, and performance tools. Device security includes real-time antivirus, Web Shield, Mail Shield, and Ransomware Shield. The online privacy component features a full VPN service with bank-grade encryption and a no-logs policy. Identity protection includes data breach monitoring and, in some markets, credit monitoring. Performance tools assist with disk cleanup and system optimization. Avast One has three plan tiers: Avast One Essential (free), Avast One Individual (paid, supports multiple devices), and Avast One Family (paid, supports up to 30 devices). Pricing varies based on promotions, with Avast One Individual typically around per year and Avast One Family ranging from to 0 per year. The suite can be downloaded directly from Avast's website, with installers available for various platforms. Avast One includes automatic updates and is designed to operate lightly on modern hardware, with options to minimize system impact during scans. Customer support includes self-help documentation, community forums, and direct support for paying customers. Avast One aims to appeal to both non-technical users and power users, providing a user-friendly interface while allowing for advanced configurations. The product is positioned as a comprehensive solution for households looking to secure multiple devices with a single subscription.

AppWizard

June 11, 2026

Apple removes Russian messenger from App Store

Apple has removed Russia’s state-backed Max messenger from its App Store, as confirmed by the app’s developers. The Max app, which lacks encryption, has been promoted by the Russian government, which has restricted access to popular messaging platforms like WhatsApp and Telegram, forcing civil servants and state agencies to use Max for communications. The app became unavailable for download on Apple’s platform on Wednesday night, and while current users can still access it, new downloads and updates are prohibited. Max, introduced in 2025 by VK, combines social media, messaging, government services, and banking options, and has been endorsed by President Putin. It is pre-installed on devices sold in Russia but not available in the European Union, with user data stored on Russian servers.

AppWizard

June 6, 2026

Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

Arabic-speaking users are the target of a new Android spyware called Asin, identified by ESET in early 2025. The malware is distributed through fraudulent websites that mimic legitimate services, including: - govlens[.]net, registered on May 27, 2025, impersonating a government news source. - pdf-reader[.]help, registered on May 29, 2025, claiming to be a secure PDF editor. - live-war-map[.]com, registered on January 20, 2025, providing updates on military incidents. Two of these domains are promoted via social media accounts on Facebook and Telegram. The spyware combines legitimate functionality with covert capabilities, and its campaigns may target journalists and OSINT researchers in Arabic-speaking regions. Artifacts linked to Asin include an upload to VirusTotal from Türkiye in October 2025, an APK downloaded from c-pdf[.]net in December 2025, and a sample disguised as "Syria Defense Map" detected in January 2026. Users must manually install the applications and grant permissions for the spyware to operate.

AppWizard

June 5, 2026

Apple removes Russia’s state-backed messaging app Max from its store

Apple has removed the state-backed messaging app Max from its App Store, leading to criticism from Russian officials who deemed the action "unfriendly." Max is no longer available for download on iPhones and iPads, although existing users can still access it without updates. Russia's Digital Development Minister, Maksut Shadaev, stated that the removal denies access to about 20 million Russians and that Apple provided no explanation to the app's developers. Apple cited compliance with sanctions regulations as the reason for the removal but did not specify which sanctions. Max remains available on Android devices through Google Play and RuStore. The app, promoted by Russian authorities as an alternative to foreign platforms, was developed by VK and integrates messaging, voice calls, and access to government services. At the time of removal, Max was the ninth most downloaded app in Russia's App Store. Russian officials have criticized Apple, with some labeling the company as "enemies." Digital rights advocates have raised concerns about Max's ties to the government and lack of encryption, suggesting potential monitoring of users. Apple has a history of removing apps from the Russian store, but Max's removal does not appear to be linked to a specific government request.

AppWizard

June 5, 2026

Apple Removes Max from App Store, Russian Messaging App Without Encryption

Apple has removed the messaging app Max from its App Store, making it unavailable for download as of June 3. Max is classified as a super-app that integrates various services, including messaging, social media, government services, and banking, but lacks end-to-end encryption, raising concerns about security and user tracking. The Russian government has encouraged citizens to adopt Max, restricting access to other messaging platforms, and state employees have been directed to use it for communications. While existing users in Russia can continue to use Max, new downloads and updates are no longer available. Launched in 2025 by VK, Max is compared to China's WeChat and is pre-installed on devices sold in Russia, but it is not available in the European Union. The app's terms of use state that user data is stored on Russian servers, raising further concerns about surveillance.