security software Archives

Winsage

August 21, 2025

Windows 10 Support Ends Soon. Here Are Your Best Options if You Can’t Upgrade

Microsoft will end official support for Windows 10 on October 14, meaning users will no longer receive bug fixes, technical support, or security updates. Extended security updates (ESU) will be available for a fee, primarily aimed at businesses and educational institutions, with a consumer version available for one year. Users can also consider alternative operating systems like Linux or ChromeOS Flex. Microsoft suggests cloud solutions like Windows 365 or Azure Virtual Desktop for those unable to upgrade their devices. Some users are opting for third-party security software, such as the 0patch agent, to address security risks associated with using Windows 10 post-support. There are methods to bypass Windows 11 upgrade compatibility checks using tools like Rufus or Registry Editor modifications.

Tech Optimizer

August 21, 2025

The Best Antivirus for Gaming PCs in 2025: 6 Top Picks Compared

McAfee has enhanced its offerings for gaming PCs, providing robust real-time protection and firewall capabilities that block threats without affecting performance. The Gamer Security version is now integrated within McAfee+ tiers and prioritizes CPU resources during gaming sessions. However, it uses more system resources compared to alternatives like Malwarebytes and Panda Dome, and some features, such as VPN and identity monitoring, are only available in higher-tier plans. The McAfee plans include: - McAfee Free Tools: Limited tools like web protection and password manager trials (Free) - McAfee+ Premium Individual: Real-time protection, VPN, password manager (.99 first year) - McAfee+ Advanced Individual: Adds identity monitoring and personal data cleanup (.99 first year) - McAfee+ Unlimited Individual: Adds identity theft coverage and security freeze tools (.99 first year) Key considerations for antivirus software for gaming PCs include performance impact, robust threat detection, dedicated gaming mode, resource usage, false positives, user interface, cross-device security, and customer support. Gaming PCs are susceptible to malware, ransomware, and phishing attacks, making reliable antivirus solutions essential. Panda Dome is highlighted as a suitable option for gamers, offering real-time protection, a dedicated gaming mode, and minimal resource usage. Free antivirus options can be used while gaming but may lack advanced features. It is not advisable to disable antivirus software during gaming, and running antivirus can slightly reduce FPS. Gaming mode enhances the gaming experience by pausing background scans and notifications. The best antivirus for gaming should have real-time protection, low resource usage, a gaming mode, robust threat detection, ransomware protection, a VPN, and password managers. Some antivirus software may block online game servers, but most have an allowlist function. Streamers should also use antivirus software while live to protect against additional risks. Antivirus programs can detect cheat software or malicious mods, especially if they contain malware.

AppWizard

August 20, 2025

Fake Antivirus App Spreads Android Malware to Spy on Russian Users

Cybersecurity experts at Doctor Web have identified a new variant of Android malware called Android.Backdoor.916.origin, active since January 2025. This malware can eavesdrop on conversations, steal messages, stream video, and log keystrokes. It targets Russian business representatives rather than average users, being distributed through direct messages as a fake antivirus app named GuardCB, which mimics the Russian Central Bank's emblem. The app requests extensive permissions, including geolocation, audio recording, camera access, and SMS data, and can function as a keylogger. It is designed for persistence, launching background services and communicating with multiple command-and-control servers. The malware can livestream audio, broadcast video, capture text, and upload contacts and call history. It exploits Android’s Accessibility Service to capture keystrokes and prevent uninstallation. The interface is exclusively in Russian, indicating it is specifically designed for a targeted group. Users in Russia are advised to download applications only from trusted sources to mitigate risks.

Tech Optimizer

August 20, 2025

Norton 360 adds Genie AI scam protection to all packages

Norton has launched Genie Scam Protection, integrating artificial intelligence to enhance its security software against AI-driven scams. Genie includes features like a Scam Assistant for on-demand security guidance and the ability to detect scams in SMS messages before they are opened. It scans text messages, emails, and images for signs of fraudulent activity and is included in all Norton 360 packages, starting with the AntiVirus Plus offering. The entry-level Norton AntiVirus Plus package provides antivirus protection, a password manager, and Genie scam protection for a single device. Higher-tier Norton 360 packages offer additional features such as secure cloud backups, a VPN, dark web monitoring, enhanced parental controls, and real-time credit monitoring. Promotional pricing is currently available for Norton 360 packages, with discounts of at least 50% for the first year. All subscriptions include Genie anti-scam protection, reflecting Norton’s commitment to combating evolving AI-driven threats.

Winsage

August 19, 2025

Microsoft Windows Warning—Stop Playing These Free PC Games

Windows users are at risk when downloading large files, particularly free games from sites like Dodi Repacks, which have been linked to malware distribution. An investigation revealed that downloading these games involves multiple redirects leading to a ZIP file containing a malicious .dll file. This file triggers the installation of HijackLoader malware, designed to bypass antivirus protections and install additional malicious software. HijackLoader employs advanced techniques to evade detection, including checks for virtual machines and monitoring system resources. It manipulates environment variables and executes payloads to maintain persistence on infected PCs. The malware has been associated with various families, including Danabot and RedLine Stealer, and is capable of delivering secondary payloads, with LummaC2 being a recent example. Users are advised to exercise caution when engaging with pirated downloads.

AppWizard

August 15, 2025

Facebook Messenger Hacked? Here’s How to Secure Your Account

Facebook Messenger has raised concerns about unauthorized access to user chats. Signs of unauthorized access include: receiving messages from unknown contacts, login times when the user was not online, changes to account settings such as password changes or alterations to privacy settings, chats marked as read without the user opening them, and warnings from Facebook about suspicious activities. Users are advised to regularly check their account for unfamiliar devices, monitor connected applications for unusual activity, and take proactive security measures like installing security software, logging out of all devices, changing passwords, and enabling two-factor authentication.

Winsage

August 14, 2025

Still Running Windows 10 and Can’t Upgrade? Here Are Your Top Options

Beginning October 14, Microsoft will stop broad support for Windows 10, meaning users will lose access to free updates, bug fixes, and technical assistance. Users are encouraged to transition to Windows 11, though not all devices may support it. Microsoft will offer a paid Extended Security Updates (ESU) program for Windows 10, allowing users to access critical security updates for a fee. Alternatives to Windows include various Linux distributions and Google ChromeOS Flex. Users can also consider cloud solutions like Windows 365 or Azure Virtual Desktop for access to Windows 11. Some users are opting for third-party security software to mitigate risks associated with using Windows 10 after the support deadline. There are methods to bypass the Windows 11 upgrade compatibility checker, allowing installation on unsupported devices.

Winsage

August 10, 2025

Windows UAC Bypassed via Character Editor, Allowing Local Privilege Escalation

A cybersecurity researcher, Matan Bahar, has developed a method to bypass User Account Control (UAC) in Windows using the Private Character Editor (eudcedit.exe), which is located in C:WindowsSystem32. This utility, intended for creating user-defined characters, can be manipulated to grant attackers elevated privileges without user consent. The exploit takes advantage of the application manifest configuration of eudcedit.exe, which includes directives that allow the program to run with full administrative rights and enables an elevated PowerShell session. This method poses a significant security risk as it exploits a trusted Windows utility, highlighting vulnerabilities in Windows security architecture. Security professionals are advised to monitor unusual execution patterns related to eudcedit.exe and reconsider UAC configuration policies to mitigate such risks.

Tech Optimizer

August 8, 2025

Understanding polymorphic malware: A comprehensive guide

Polymorphic malware is a type of malicious software that can change its code structure while maintaining its core functionality, making it difficult for traditional signature-based antivirus solutions to detect. It uses a mutation engine to create new variants by altering its code through techniques like code obfuscation, encryption, and junk code insertion. There are several categories of polymorphic malware, including polymorphic viruses, trojans, rootkits, and ransomware, each with unique characteristics. Detection of polymorphic malware is challenging due to its ability to evade conventional methods, prompting the use of behavioral analysis and machine learning for identification. To protect against such threats, a multi-layered security approach is recommended, including regular software updates, network segmentation, and employee training. Real-world examples like the Storm Worm and Conficker worm illustrate the significant impact of polymorphic malware, which has caused substantial financial losses. As cybersecurity measures advance, polymorphic malware continues to evolve, incorporating artificial intelligence and machine learning, leading to new challenges for security professionals. Cloud-based security solutions are emerging as effective tools to combat these threats.

Winsage

August 8, 2025

Hackers can bypass Microsoft Defender to install ransomware on PCs

A significant vulnerability in Microsoft Defender has been identified, allowing hackers to bypass the software and deploy Akira ransomware. This vulnerability exploits the legitimate driver rwdrv.sys, associated with the Intel CPU tuning tool ThrottleStop, granting cybercriminals kernel-level access to a target PC. Once access is obtained, hackers can introduce the driver hlpdrv.sys to manipulate the Windows Registry, disabling Microsoft Defender's protective measures. GuidePoint Security has noted that this method has been increasingly used in Akira ransomware attacks since July of this year. Users are advised to use reputable antivirus software and keep it updated to protect against such threats.