scammers Archives

Tech Optimizer

September 1, 2026

What a smart firewall does and why it matters on home Wi-Fi

Home Wi-Fi connects various devices and presents security risks, making firewalls important for network protection. A router firewall is built into the home router and protects all connected devices, while a software firewall operates on individual devices for additional security. Inbound traffic is data coming to a device, while outbound traffic is data leaving it; firewalls analyze this traffic to manage connections. Network security is critical as sensitive information is often accessed on devices used for leisure, and remote work increases data overlap. Firewalls can control network connections and filter unwanted traffic but cannot replace weak passwords or antivirus protection. To enhance home network security, users should secure router settings, keep routers updated, strengthen Wi-Fi access, check connected devices, and replace outdated routers. A comprehensive security strategy includes keeping software updated, using multifactor authentication, being cautious with links, and strengthening firewalls with antivirus protection. Protecting valuable data is essential, and understanding ransomware risks is crucial. The 3-2-1 backup strategy involves maintaining three copies of data on two different storage types, with one copy offsite. Regularly testing backups and knowing how to respond to ransomware incidents are also important.

AppWizard

September 1, 2026

Take a look: Users are now getting Android’s convoluted sideloading process, and everyone hates it

Google has started rolling out a new process for sideloading apps on Android devices, which requires users to restart their devices and wait 24 hours before sideloading applications. Users must confirm if they were prompted by someone to enable sideloading, with warnings about potential scams. After the waiting period, users can allow sideloading for seven days or indefinitely. The new process does not affect sideloading via ADB. Many users have expressed concerns about the future of sideloading, fearing increased restrictions.

Tech Optimizer

September 1, 2026

NordVPN’s antivirus tool blocks 94% of phishing sites in latest independent test

NordVPN's next-generation antivirus achieved a 94% detection rate for phishing threats in an evaluation by AV-Comparatives, tested against 250 active phishing URLs and recording zero false positives. The antivirus also demonstrated a 92% block rate in similar independent testing and ranked third overall in speed and malware protection behind Avast and Norton. It is included in NordVPN's Complete subscription tier and operates alongside the standard VPN tunnel to block trackers, ads, and malicious sites in real-time. Users are advised to maintain vigilance and practice strong digital hygiene, including scrutinizing URLs and enabling two-factor authentication for added security.

Tech Optimizer

September 1, 2026

Fake Microsoft Security Scan Tells You to Remove Antivirus—Then Scammers Ask for Remote Access

A new web-based scam is using counterfeit Microsoft-branded security scans to deceive users into uninstalling their antivirus software. The scam websites conduct fake inspections, reporting false security failures and claiming third-party antivirus products are unsupported by Windows. They gather browser information to create customized-looking scan reports and aim to mislead victims into a fraudulent refund process. Investigators have identified 11 related scam sites under the name SysScan, which present themselves as legitimate Microsoft security checks. The scam does not involve file downloads but relies on convincing websites, fabricated security scores, and personal information forms. The scan results are hard-coded, and the security score is limited to a range between 13 and 30 out of 100. The scams instruct users to uninstall antivirus software, which is misleading since Windows does not cease support for third-party antivirus solutions. The scam sites request extensive personal information, including names, addresses, phone numbers, and banking details, and redirect victims to a page claiming a refund manager will call shortly. This process allows scammers to gain remote access to victims' computers. Indicators of compromise include specific IP addresses and domains associated with the scam.

AppWizard

August 29, 2026

Android 17 adds new protections against sneaky Wi-Fi tracking and web snooping

Google has introduced several network security enhancements in Android 17 to improve user privacy. One key feature is Encrypted Client Hello (ECH), which encrypts domain names to prevent external observers from monitoring user activities. ECH is integrated with private DNS and is enabled by default for apps using compatible networking libraries. Google claims to be the first major mobile operating system to implement widespread ECH support. Testing conducted by Jigsaw showed stable connection success rates and minimal interference across various networks. Additional security features in Android 17 include: - Local Network Protection, requiring apps to request permission before accessing devices on a user's home network. - Certificate Transparency, mandating public logging of certificates to detect forged ones. - A 2G Network Shutdown option for mobile operators to disable 2G services, reducing exposure to phishing messages.

AppWizard

August 28, 2026

4 new ways Android is protecting your network connections

Developers are encouraged to upgrade to OkHttp 5.5.0 and enable Encrypted Client Hello (ECH) for modern networking practices. Android 17 introduces Local Network Protection, requiring apps to obtain user permission before scanning local networks. Android has implemented Certificate Transparency (CT) by default to log all certificates in a public registry, reducing the risk of fraudulent certificates. Scammers are using portable devices known as “SMS blasters” to target mobile users by forcing them onto less secure 2G networks, allowing phishing texts to bypass modern spam filters.

Tech Optimizer

August 27, 2026

Scammers Impersonate Microsoft to Push Fake Security Scans and Refund Fraud

A network of fraudulent websites, branded as SysScan, has been discovered, which falsely claims to evaluate antivirus software effectiveness through deceptive security scans. These sites manipulate users into uninstalling legitimate antivirus products and disclosing sensitive personal and banking information. Eleven distinct domains associated with SysScan have been identified, all hosted on a single server. The fraudulent scans generate misleading results based on static findings rather than actual system assessments, and users are coerced into believing their computers are at risk. The scams misrepresent normal browser behaviors as security threats and instruct victims to uninstall their antivirus software, compromising their defenses. The operation targets both individual and business users, collecting extensive personal information and utilizing remote-access tools. The data submitted is sent to Telegram via its bot API. Users are advised to disconnect from the internet and secure their devices if they suspect they have been compromised. Indicators of compromise include specific IP addresses and domains associated with the scam.

AppWizard

August 26, 2026

How to sideload Android apps on your phone in 2026 – and what’s behind the changes

Google has revamped the sideloading process on Android devices with a new protocol called "Advanced Flow" to enhance user security while allowing the installation of applications from downloaded APK files. Users must enable sideloading, authenticate their identity, and confirm they are not being pressured into installation, followed by a device restart and a 24-hour waiting period. Users can choose to allow installations for seven days or indefinitely. To sideload apps, users need to download an APK file, disable Advanced Protection temporarily, install the app, and then re-enable Advanced Protection. Caution is advised when downloading APK files from unknown sources, with recommendations for trusted sites like APKMirror, F-Droid, and Uptodown.

Tech Optimizer

August 26, 2026

Catch Of The Week: The ‘Security Scan’ That Wants You Defenseless

Researchers at Malwarebytes have identified a network of deceptive websites posing as a service called “SysScan,” which pretends to conduct Microsoft security checkups. Users encounter these sites through search results, browser hijacking pop-ups, or unsolicited emails. The sites use Microsoft branding and a fake progress bar to create the illusion of a scan, but they only collect harmless data like operating system and location, which are then manipulated into alarming fake alerts. The fabricated security score is predetermined and does not reflect the user's actual security status. The scam misleads users into believing that Windows no longer supports third-party antivirus software, prompting them to uninstall their protections, which increases their vulnerability. Users are then asked to provide personal and banking information through a form that sends data via a Telegram bot. Eleven fraudulent sites have been traced back to a single server. Indicators of the scam include requests to disable antivirus software, installation of remote-access software, and solicitation of sensitive information. Microsoft does not initiate cold calls or scan computers through web pages. If someone has engaged with the scam, they should disconnect from the internet, uninstall any remote-access tools, reinstall antivirus software, and report the incident to authorities.

AppWizard

August 26, 2026

Beware of fake Indeed interview apps used to install spyware

Scammers are exploiting the Indeed platform to target job seekers by using counterfeit Android "interview" applications. Users in the UK and Brazil reported being instructed by supposed employers to download fraudulent apps like MyInterview, which compromised their devices. These scammers post fake job listings and prompt applicants to install apps that mimic Indeed's login page and establish a VPN connection. The malicious apps, classified as Trojan.Droppers, can install additional untrusted software and gain control over devices, complicating uninstallation efforts. Indeed confirmed that their interview process does not require downloading any separate app and warned job seekers against such scams. Indicators of compromise include specific MD5 hashes and package names associated with the Trojan droppers and dropped malware payloads.