prompt Archives

Tech Optimizer

July 24, 2026

CrashStealer Mac malware steals passwords and wallets

A sophisticated new malware targeting Mac users, named CrashStealer, has been discovered by security researchers at Jamf Threat Labs. It masquerades as Apple's legitimate crash-reporting software and was first identified in May 2026, with active attacks detected by early July. CrashStealer is designed to extract sensitive information, including browser credentials, password manager data, and cryptocurrency wallet information, and can copy the Mac login Keychain. It uses native C++ programming, encrypts collected files, and employs anti-debugging features. The malware is distributed through a disk image labeled "Werkbit Setup," which features a polished installer that bypasses Mac security warnings by using a valid Apple Developer ID and notarization ticket. Once opened, it connects to GitHub for commands and downloads a script that installs a second disk image named CrashReporter.dmg, which mimics an Apple system component. CrashStealer presents a fake password prompt resembling a legitimate macOS request, verifying entered passwords locally. It targets data linked to various browsers and password managers, scanning for approximately 80 cryptocurrency wallet extensions and 14 password managers. Stolen data is stored in hidden folders, encrypted using AES-256-GCM, and packaged into hidden ZIP archives before being uploaded. Warning signs of infection include a website requiring a meeting PIN for download, unexpected password prompts, and unfamiliar apps requesting Full Disk Access. Users are advised to download apps from verified sources, avoid overriding security warnings, pause before entering passwords, review app permissions, install security updates, use antivirus software, and act quickly if they installed Werkbit Setup.

AppWizard

July 24, 2026

The biggest indie “friendslop” game of 2026 appears to be delivering malware via Steam Workshop — How to protect your PC (and what to do next)

Certain custom maps linked to the game Meccha Chameleon may contain malicious scripts that can compromise players' PCs. An analysis by Feint revealed that these maps could include a Blueprint actor designed to execute automatically upon loading, which injects a batch file into the user's Documents folder. This batch file then attempts to run a PowerShell process to connect to an external server and download additional scripts. The behavior of these maps—writing or executing scripts outside their designated folder—indicates potential malware. Valve, the parent company of Steam, previously addressed similar issues with other software but warned that such incidents could happen again.

Tech Optimizer

July 24, 2026

Microsoft has ensured that LG monitors no longer prompt users to install McAfee on Windows

Owners of LG monitors have expressed frustration over an automatic prompt that appears when connecting their devices to Windows 11 PCs, encouraging the download of the LG Monitor App Installer, which suggests installing McAfee antivirus software. Microsoft has intervened, with executive vice president Pavan Davuluri confirming on July 22 that they reached out to LG to address the issue. LG has agreed to disable the McAfee pop-up from their app. Users have also raised concerns about the extensive permissions granted to the app, which reportedly accesses "all system resources" and the Internet connection. Similar practices have been observed with other manufacturers, including Alienware and Samsung.

Winsage

July 24, 2026

Microsoft is cracking down on Windows 11 bloatware ads, forces LG to pull McAfee popup

LG will disable the McAfee ad pop-up in its Monitor App Installer following consumer dissatisfaction and Microsoft's intervention. Users reported that the app was silently installed via Windows Update, leading to unsolicited McAfee trial ads. LG stated that McAfee is not installed without user consent and blamed Microsoft's distribution process, but many users experienced the pop-up without prior consent. Microsoft confirmed LG's agreement to disable the pop-up within three days, emphasizing a commitment to improving user experience. The incident highlights concerns over silent installations and the necessity of third-party antivirus software for Windows 11 users.

AppWizard

July 24, 2026

How to Use WorldEdit in Minecraft Java and Bedrock

WorldEdit is a tool for Minecraft that has different requirements for Java Edition and Bedrock Edition. Users must select the correct version for their Minecraft edition. For Java Edition, WorldEdit can be downloaded from EngineHub or Modrinth, while Bedrock Edition requires a separate add-on. To install WorldEdit on Java Edition, users need to download the appropriate .jar file and place it in the server's plugins or mods folder, depending on the platform. Command access must be granted based on world or server settings, and users can select blocks for editing using various commands. Basic edits can be made using commands like //set, //replace, and //undo. For Bedrock Edition, users must download the add-on package, enable experimental features, and use semicolon commands for editing. The add-on also includes item shortcuts and management commands for access. The main differences between Java and Bedrock versions include the installation process, permissions, and command prefixes.

AppWizard

July 24, 2026

Steam Makes PC and Steam Deck Game Entirely Free for July

Steam has introduced a new free game, available until July 30, for PC and Steam Deck users. The game, released in 2017, is called Yet Another Zombie Defense HD and has an 82% approval rating based on 544 user reviews, earning a “Very Positive” status. It is not officially Steam Deck Verified but is marked as “Playable.” The game features local and online co-op for up to four players and is priced at [openai_gpt model="gpt-4o-mini" prompt="Summarize the content and extract only the fact described in the text bellow. The summary shall NOT include a title, introduction and conclusion. Text: Steam has introduced a new free game, available until July 30, that caters to both PC and Steam Deck users. This title, released in 2017, boasts an impressive 82% approval rating based on 544 user reviews, securing a “Very Positive” status on the platform—an accolade that signifies its quality among PC games. While it is not officially Steam Deck Verified, Valve designates it as “Playable,” making it accessible for handheld gaming enthusiasts. A Simple, But Solid Zombie Game In 2017, an independent developer launched a zombie shooter with tower defense mechanics, aptly named Yet Another Zombie Defense HD. This game supports local and online co-op for up to four players, and its straightforward premise is reflected in its modest .99 price tag. Despite its simplicity, the game has garnered a commendable approval rating, indicating that it delivers a satisfying experience for its players. The gameplay revolves around defending against relentless waves of zombies that emerge each night. While survival is the ultimate goal, the game emphasizes the enjoyment of the experience, encouraging players to embrace the chaos as they fend off hordes of undead foes. As a top-down arcade shooter, Yet Another Zombie Defense HD incorporates tactical and strategic elements, allowing players to engage solo or join forces in co-op mode. With three distinct modes—Defense, Endless, and Deathmatch—players can choose their preferred style of play. User feedback reflects a positive reception, with one highly-rated review stating, “Fun game to play with friends. Highly recommend.” Another popular review echoes this sentiment, noting, “It’s a fun little casual game; I love that it has co-op, which makes it 10 times better.” While Steam offers a plethora of more sophisticated titles, many of which require a purchase, Yet Another Zombie Defense HD stands out as a budget-friendly option for those seeking light-hearted entertainment with friends. For players who may not find this game appealing, there is also another free RPG available on Steam, which is more polished and widely recognized." max_tokens="3500" temperature="0.3" top_p="1.0" best_of="1" presence_penalty="0.1" frequency_penalty="frequency_penalty"].99. Players defend against waves of zombies, with gameplay modes including Defense, Endless, and Deathmatch. User feedback is positive, highlighting its fun co-op experience.

AppWizard

July 23, 2026

ThreatsDay: Android Spyware, PLC Attacks, AI Image Prompt Injection + 12 More Stories

GitHub will reject command-line support bundle uploads from outdated versions of GitHub Enterprise Server lacking security patches starting August 18, 2026. The npm package @copilot-mcp/apex has been identified as a post-install dropper that installs a macOS infostealer, phishing for sensitive information and maintaining a connection to an attacker's server. A rogue extension on the Microsoft Visual Studio Code marketplace, "Markdown All Pro," impersonates a legitimate tool and opens a backdoor after installation. A phishing campaign targeting Portuguese users delivers the Lampion banking malware, which has been active since 2019. DoubleVerify reports a rise in "AfterCall" apps that exploit user permissions for ad fraud. The GhostCommit attack method hides malicious instructions within PNG images in pull requests. The U.S. government has updated its advisory on Iranian-affiliated cyber activity targeting operational technology devices. An Android app posing as a civil defense alert system has been found to contain malware for data harvesting. An Iranian threat actor is distributing MarkiRAT malware through fake applications. An analysis of 28 AI-coded applications revealed 434 vulnerabilities, prompting Cisco to introduce Antares to identify vulnerabilities in codebases. A Russian-speaking threat actor is dismantling guardrails on AI models to create offensive tools.

AppWizard

July 22, 2026

Google is this close to bringing third-party app stores to the Play Store

Google is testing new features in the Play Store, including Play Labs, which allows users to experiment with new functionalities. The company is also exploring the integration of third-party app stores, allowing users to install alternative app stores directly from the Play Store, although this feature is not yet available to the general public. Users have reported limited access to these experimental features through adjustments in the latest Play Store version. Additionally, Google has confirmed the rollout of a revamped search experience, featuring a new two-row search bar for longer queries and a prompt labeled “Ask Store” to enhance search capabilities. These updates aim to improve user experience and accessibility in the Play Store.

Winsage

July 21, 2026

LG admits its monitor app installs bloatware via Windows Update, and Microsoft is letting it happen

A growing number of LG monitor users have reported that connecting their devices to Windows systems results in the automatic installation of the LG Monitor App Installer, which prompts users with a McAfee trial advertisement. YouTuber Gamers Nexus found that connecting an LG UltraGear monitor led to the installation of LG's driver package and the LG Monitor App Installer, with the McAfee pop-up appearing 31 times over 32 boots. This automatic installation is facilitated by device metadata, which Windows uses to download associated applications without user notification. Users must be signed into the Microsoft Store and connected to the internet for this to occur, leading to frustrations about transparency. Reports of unsolicited McAfee pop-ups have been shared on platforms like Reddit, with users confirming the app's installation was logged as part of a Windows Update. LG has acknowledged the inclusion of McAfee in their app updates, promoting a free trial, which has raised privacy concerns. The app's rating on the Microsoft Store has dropped to around 1 out of 5 due to user dissatisfaction. Users can prevent automatic installations by adjusting Group Policy settings, while macOS requires manual approval for third-party applications. Neither Microsoft nor LG has formally addressed the concerns regarding silent installations and McAfee pop-ups.

Winsage

July 20, 2026

Enable BitLocker on Windows 11: 11 Steps, 45 Min [2026]

A stolen laptop can lead to a significant data breach, particularly when taken from public places. Windows 11 has introduced BitLocker, a full-disk encryption feature that became mandatory for Australian businesses in 2026. The Office of the Australian Information Commissioner reported 766 notifiable data breaches in the latter half of 2024, with unauthorized access to devices being a major cause. Full-disk encryption is crucial for compliance with the Essential Eight framework, which mandates data protection on portable devices. BitLocker ensures that data on an encrypted drive becomes unreadable if the drive is removed and connected to another computer. It aligns with the Essential Eight framework, requiring evidence of encryption rather than just claims of protection. There are three types of encryption on Windows 11: Device Encryption, BitLocker Drive Encryption, and File-Level Encryption. BitLocker is available only on Windows 11 Pro and higher editions. To use BitLocker, certain prerequisites must be met, including having Windows 11 Pro or higher, a Trusted Platform Module (TPM) 2.0, UEFI firmware with Secure Boot enabled, and local administrator rights. The process to enable BitLocker involves confirming the edition, checking TPM status, enabling BitLocker through Windows Settings or PowerShell, and backing up the recovery key. Organizations can deploy BitLocker fleet-wide using Microsoft Intune, and additional security measures like TPM+PIN can be implemented for pre-boot authentication. Common pitfalls during BitLocker rollout include skipping recovery key backup and assuming that Home edition machines are covered. Troubleshooting common BitLocker issues involves identifying symptoms and applying appropriate fixes. Advanced tips for enhancing security include suspending BitLocker before maintenance and auditing compliance at the fleet level. BitLocker is integral to protecting data on portable devices, and compliance documentation is essential for proving that every device has an active recovery key.