security products Archives

Tech Optimizer

June 19, 2026

Real-World Threats Demand Real Results

AV-Comparatives conducted a Real-World Protection Test from February to May 2026, evaluating 20 consumer security products against real-world internet threats. Seven products received the ADVANCED+ award for their effective protection and low false alarm rates. The complete test report is available for free at av-comparatives.org. The evaluated products included well-known security solutions such as Avast, AVG, Bitdefender, Kaspersky, Microsoft, Norton, and TotalAV. The test aimed to assess how well these products protect against various online threats, including malware embedded in trusted platforms.

Tech Optimizer

June 18, 2026

Real-World Threats Demand Real Results

AV-Comparatives conducted its Real-World Protection Test from February to May 2026, assessing 20 consumer security products against real-world internet threats. Seven products received the ADVANCED+ award for their reliable protection capabilities. The complete test report is available for free at av-comparatives.org. The tested products included well-known names such as Avast, AVG, Bitdefender, Kaspersky, Microsoft, Norton, and TotalAV. The test methodology involved evaluating the products against a curated set of threats and assessing false-positive rates.

Winsage

June 12, 2026

Hackers Use Fake Windows Update Installers to Deliver OnyxC2 Credential Stealer

OnyxC2 is a sophisticated credential stealer available for a subscription fee of 0 per month, distributed through disguised lures such as fake Windows updates and legitimate software installers. It functions as a commercial product with features like an automated payload builder, tiered licensing, and a centralized web dashboard. The malware boasts a 99% detection-evasion rate, successfully evading major antivirus solutions during tests. It is developed in C++, utilizing direct system calls and mutating with each build to avoid detection. OnyxC2 collects data from around 210 applications, targeting 45 web browsers, password managers, cryptocurrency wallets, and FTP clients. The malware is delivered using DLL sideloading, where a password-protected archive contains a legitimate application and a malicious DLL. The attacker's DLL is disguised by inflating its size and is loaded by a trusted binary. The malicious code remains encrypted on disk and decrypts in memory to evade analysis. OnyxC2 communicates with a Cloudflare-fronted command-and-control server to manage infected hosts and execute commands like hardware registration and cookie uploads. The threat extends to business environments, targeting FTP and email clients, with stolen session cookies allowing ongoing access to corporate infrastructure. Implementing anti-data exfiltration controls is recommended as a mitigation strategy.

Winsage

June 2, 2026

PHANTOMPULSE RAT Uses UAC Bypass to Hijack Windows Systems

PHANTOMPULSE is a remote access trojan (RAT) used as a final payload in multi-stage attacks targeting Windows environments. It employs advanced post-exploitation techniques, including process injection, User Account Control (UAC) bypass, and a decentralized blockchain-based command-and-control (C2) mechanism. The malware utilizes three process injection techniques: module stomping, manual DLL mapping, and debug-driven execution. It avoids detection by using direct system calls instead of standard Windows APIs and incorporates a hardware breakpoint mechanism to disable security protections like AMSI and ETW. PHANTOMPULSE retrieves its C2 server address from Ethereum-based transaction data but has a vulnerability that allows defenders to hijack communication. It achieves persistence through scheduled tasks and supports self-healing capabilities. Privilege escalation is done using the "schuac" UAC bypass technique. The malware conducts system reconnaissance focusing on cryptocurrency wallets and messaging apps but does not directly steal credentials. It shows signs of AI-assisted development and shares tactics with DPRK-aligned threat groups, particularly in targeting cryptocurrency platforms.

Tech Optimizer

May 29, 2026

Beyond VPNs: NordVPN’s New All-in-One App Redefines Digital Security

NordVPN has launched an updated application that combines its VPN services with next-generation antivirus capabilities, creating a comprehensive digital security suite. The new offering emphasizes three main features: an advanced VPN for private connectivity, a next-generation antivirus for threat protection, and the Dark Web Monitor™ for data breach monitoring. The updated antivirus solution uses artificial intelligence and behavioral analysis to identify threats in real-time, including phishing and malware. In April 2026, NordVPN reported blocking 4.8 million threats, with over 3 million instances of malware blocked. The company’s Threat Protection Pro includes malware and phishing protection, ad and tracker blocking, vulnerability scanning, and dark web monitoring. Independent evaluations have shown high detection rates for blocking malicious URLs. The cybersecurity industry is seeing a trend towards bundling multiple security tools into single subscription packages, with NordVPN aiming to simplify digital protection for users. The company maintains a commitment to privacy, ensuring minimal data collection for threat assessments.

Tech Optimizer

May 19, 2026

Avast Free Antivirus for US users: core features explained

Avast Free Antivirus is a free security application that provides essential malware protection and additional tools for Windows, macOS, Android, and iOS. It blocks malware and suspicious websites using real-time scanning and integrates with the operating system's security center on Windows. Key features include file shield scanning, web and mail shields, and ransomware-related shields on select platforms. It is available for free download in the US and is popular among home users, families, students, and individual professionals. Avast competes with other antivirus vendors like McAfee and Bitdefender and is often reviewed positively by tech outlets. While it offers core protections, advanced features require paid subscriptions. Users can conduct various types of scans and utilize browser extensions to assess site safety. The software is designed to coexist with Windows built-in security features, but experts advise using additional security measures for online banking and shopping.

Tech Optimizer

May 17, 2026

Avast Antivirus free download and security basics

Avast Antivirus is a consumer-focused security application designed to detect and block malware, unsafe downloads, and dubious websites on personal computers. It employs local scanning and cloud-assisted analysis to assess files and URLs for known or suspicious patterns. The software operates background services that continuously monitor files and web traffic for harmful content on both Windows and Mac systems. Avast offers a free version for personal use, with optional paid upgrades, and provides English-language downloads and support specifically for US users. It is developed by Avast, part of Gen Digital, which is publicly traded on Nasdaq under the ticker GEN. Independent testing organizations like AV-Test and AV-Comparatives evaluate Avast Antivirus, positioning it among mainstream antivirus solutions.

Winsage

May 11, 2026

New GhostLock tool abuses Windows API to block file access

A security researcher has developed a proof-of-concept tool called GhostLock, which exploits a vulnerability in the Windows file API, specifically the 'CreateFileW' function. By manipulating the 'dwShareMode' parameter to grant exclusive access to files, GhostLock can prevent other users or applications from opening those files, resulting in a 'STATUSSHARINGVIOLATION' error. The tool automates the process of opening multiple files on SMB shares, causing access disruptions without requiring elevated privileges. This technique is intended as a disruption attack rather than a destructive one, similar to ransomware, and can serve as a diversion during intrusions. Detection of this attack relies on monitoring the open-file count with ShareAccess set to 0 at the file server layer. Dvash has provided resources for IT teams to enhance detection capabilities against this threat.

Tech Optimizer

May 10, 2026

‘People use smartphones more but invest less in their security’: New report claims McAfee and Norton remain the most loved antivirus brands as users ditch lesser-known security products for free tools like Microsoft Defender or Apple Xprotect

Recent findings indicate that only 18% of American smartphone users invest in third-party antivirus software, despite the increasing reliance on mobile devices. A survey of over 1,000 adults revealed a significant gap in mobile security awareness. The adoption of paid antivirus solutions on computers has increased by 2% to 41%, while the use of third-party antivirus on mobile devices has decreased by approximately 10%, from 28% to 18%. Although ransomware attacks on smartphones are less common, many users may underestimate modern cyber threats. A considerable number of mobile users remain unprotected or unsure about their device security measures.

Tech Optimizer

May 10, 2026

Avast Antivirus: What US Users Need to Know Right Now

Avast Antivirus is a widely used security tool for Windows, macOS, and Android in the U.S., functioning primarily as a real-time malware scanner that protects against threats like viruses and ransomware. The free version for Windows includes on-access scanning and web-shield protection, while paid versions offer additional features such as a firewall, ransomware shield, and VPN. On macOS, it focuses on malware detection and web protection, and on Android, it includes app-permission monitoring and device location features. Avast has faced criticism for its data-collection practices, particularly its past monetization of user data through a subsidiary, Jumpshot, which was discontinued in 2020. Despite improvements, it still collects telemetry and usage data. Avast is suitable for users looking for an easy-to-use antivirus solution at low cost, particularly those using Windows PCs for everyday tasks. However, it may not be ideal for privacy-conscious users or those with older hardware, as it can slow down system performance. Avast competes with other antivirus providers like Norton, McAfee, Bitdefender, and Kaspersky, each offering various features and performance levels. The company is a subsidiary of Gen Digital, which consolidates multiple cybersecurity brands, and its growth potential is influenced by user retention and regulatory scrutiny. Users should weigh their priorities regarding cost, privacy, and performance when deciding on antivirus solutions.