NewApp Digest
search bot

security software

Antivirus protection built into Windows
Tech Optimizer
April 11, 2026

Antivirus protection built into Windows

Windows 11 includes Microsoft Defender Antivirus, which is active from the moment the device is powered on and integrated into the operating system. It continuously updates to protect against various threats, including malicious files and unsafe links. Microsoft Defender SmartScreen evaluates the safety of websites and downloads, providing warnings for dubious content. Smart App Control prevents untrusted applications from executing, while Controlled folder access protects personal files from unauthorized modifications. Users can verify the operational status of Microsoft Defender Antivirus through Windows Security settings. Best practices for maintaining security include keeping the antivirus updated, using a single real-time antivirus engine, and enhancing security habits. Microsoft Defender Antivirus is generally sufficient for everyday risks, but additional third-party antivirus solutions may be considered based on individual needs.
Fake Cloudflare CAPTCHA Pages Spread Infiniti Stealer On macOS
Tech Optimizer
March 30, 2026

Fake Cloudflare CAPTCHA Pages Spread Infiniti Stealer On macOS

Security researchers have identified a new macOS information stealer called Infiniti Stealer, which extracts sensitive information from Mac users using a social engineering tactic known as ClickFix. This method involves a counterfeit Cloudflare human verification page that prompts users to enter a command in their Mac Terminal, allowing the malware to bypass security measures. The infection process consists of three stages: 1. A Bash dropper script downloads and decodes a hidden payload. 2. A Nuitka loader, designed for Apple Silicon Macs, complicates detection by compiling Python code into a native application. 3. The final payload, Infiniti Stealer, harvests personal data such as browser passwords, macOS Keychain entries, cryptocurrency wallets, and captures screenshots. Indicators of Compromise (IOCs) associated with Infiniti Stealer include: - MD5 Dropper: da73e42d1f9746065f061a6e85e28f0c - SHA256 Stage-3: 1e63be724bf651bb17bcf181d11bacfabef6a6360dcdfda945d6389e80f2b958 - C2 Domain: update-check[.]com - C2 URL: https://update-check[.]com/m/7d8df27d95d9 - Panel: Infiniti-stealer[.]com - Packer Magic: 4b 41 59 28 b5 2f fd (KAY + zstd) - Debug Log: /tmp/.bs_debug.log
Don’t miss out: Bitdefender, One of the World’s Best Antiviruses, Is Now on Sale
Tech Optimizer
March 28, 2026

Don’t miss out: Bitdefender, One of the World’s Best Antiviruses, Is Now on Sale

Bitdefender is known for its effective early threat detection and elimination, reflected in high scores from independent lab evaluations. The current deal offers the complete all-in-one security suite at a competitive price, allowing users to upgrade from standard protection. Bitdefender operates in the background, providing real-time scanning of files, links, and downloads for safe browsing. The suite includes virus detection, web protection, ransomware defenses, a built-in VPN, a password manager, and anti-tracking capabilities. It offers proactive protection, such as scanning downloads on public Wi-Fi to prevent security risks. Bitdefender is resource-efficient, allowing users to run it without significant impact on system performance. The current sale makes it easier to justify moving from free tools to a comprehensive solution, especially given the sensitivity of information stored on devices.
Bogus Avast website fakes virus scan, installs Venom Stealer instead
Tech Optimizer
March 27, 2026

Bogus Avast website fakes virus scan, installs Venom Stealer instead

A deceptive website impersonating Avast antivirus tricks users into downloading Venom Stealer malware, which steals passwords, session cookies, and cryptocurrency wallet information. The site conducts a fake virus scan, falsely reporting threats to encourage users to download a malicious file named Avastsystemcleaner.exe. This file mimics legitimate software and operates stealthily, targeting web browsers to harvest credentials and session cookies. It also captures screenshots and sends stolen data to the command-and-control domain app-metrics-cdn[.]com via unencrypted HTTP. The malware employs evasion techniques to avoid detection and is part of a long-standing cybercrime tactic that exploits user trust in security software. Indicators of compromise include the file hash SHA-256: ecbeaa13921dbad8028d29534c3878503f45a82a09cf27857fa4335bd1c9286d, the domain app-metrics-cdn[.]com, and the network indicator 104.21.14.89.
This Norton Deal Makes Premium Cybersecurity Worth It
Tech Optimizer
March 25, 2026

This Norton Deal Makes Premium Cybersecurity Worth It

Norton’s premium suites, traditionally seen as luxury cybersecurity options, are now more accessible due to a recent promotional offer. This package includes antivirus protection, a VPN, a password manager, and dark web monitoring, all in one subscription. It offers real-time protection and simplifies cybersecurity management through a single interface. The VPN protects data on public Wi-Fi, while the password manager enhances security by securely autofilling credentials. The deal allows protection for multiple devices under one subscription. However, it is a paid plan with renewal pricing returning to the original rate, and some features may not be included in every package. The software may consume more system resources than free alternatives, and users seeking basic malware scanning might find the additional tools excessive. The promotion encourages consumers to invest in cohesive cybersecurity solutions rather than relying on free tools.
This tax-themed malvertising attack can blind security software before it arrives — and then unleashes ransomware
Tech Optimizer
March 24, 2026

This tax-themed malvertising attack can blind security software before it arrives — and then unleashes ransomware

Cybercriminals are targeting taxpayers with phishing schemes and malware attacks as the April 15 tax deadline approaches. They create fake tax form websites that appear in Google Ads, leading users to download malicious software like ScreenConnect, which can disable device security. These tactics aim to steal sensitive information and potentially facilitate ransomware attacks. Counterfeit Chrome updates are also being used in similar schemes. Taxpayers are advised to verify the authenticity of websites and rely on trusted sources to protect their personal information.
How AI And Hacking Professionalism Are Overwhelming Endpoint Security
Tech Optimizer
March 19, 2026

How AI And Hacking Professionalism Are Overwhelming Endpoint Security

The digital landscape is transforming due to the professionalization of cybercrime, which is now a significant part of organized crime, second only to drug trafficking. Malware includes various types such as viruses, browser hijackers, password stealers, Trojans, botnet malware, and ransomware. Traditional antivirus solutions rely on signature-based detection, heuristic analysis, and behavior monitoring, but these methods can lead to false positives and negatives. The evolution of cybersecurity has seen the rise of "Ransomware-as-a-Service" (RaaS) and the use of polymorphic malware that changes its signature, making traditional defenses ineffective. Hackers are also using AI and machine learning to evade behavioral monitoring. New defense strategies include Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR), which focus on monitoring for breaches rather than preventing them. Leading vendors in this space include CrowdStrike, SentinelOne, Microsoft, and Palo Alto Networks. The zero trust security framework treats all access attempts as potentially hostile and emphasizes the integration of various security technologies. Emerging startups like FinalAV Security are developing zero trust solutions for consumers and small businesses, focusing on prevention rather than detection.
Search