NewApp Digest
search bot

security tools

LofyStealer Uses Node.js Loader Against Minecraft Gamers
AppWizard
April 30, 2026

LofyStealer Uses Node.js Loader Against Minecraft Gamers

Cybersecurity threat hunters have discovered an active infostealer campaign targeting the gaming community, involving malware called LofyStealer (or GrabBot) that disguises itself as a Minecraft hack named “Slinky.” The attackers use the official game icon to trick young gamers into executing the malware. The Brazilian cybercrime group LofyGang has enhanced its technical capabilities, utilizing a sophisticated two-stage modular architecture. The initial stage features a 53.5 MB loader file named load.exe, which is a Node.js runtime environment that obscures malicious signatures. The loader connects to the attacker’s server and decrypts a 1.4 MB C++ payload, chromelevator.exe, which targets eight web browsers to extract sensitive information like cookies and passwords. The stolen data is compressed, encrypted, and sent to the attacker’s server. LofyGang has evolved into a Malware-as-a-Service platform, offering a web panel for operators to monitor victims and generate custom executables. The campaign highlights the increasing threats to the gaming community, with advanced evasion techniques being employed by cybercriminals. Security professionals are advised to monitor network traffic and conduct audits for suspicious activities.
Minecraft Players Targeted by LofyStealer Using Node.js Loader and In-Memory Browser Injection
AppWizard
April 30, 2026

Minecraft Players Targeted by LofyStealer Using Node.js Loader and In-Memory Browser Injection

A new infostealer malware called LofyStealer is targeting the gaming community, particularly Minecraft players, by disguising itself as a cheat tool named “Slinky.” It employs a two-stage attack to extract sensitive information from eight major web browsers, including Chrome and Firefox, while evading detection by security software. The malware siphons off cookies, saved passwords, payment card information, and session tokens. Researchers at Zenox.ai identified LofyStealer, linking it to the Brazilian cybercrime group LofyGang, which has been active since October 2022. The malware uses social engineering tactics to appear legitimate and operates as a Malware-as-a-Service platform, offering both Free and Premium tiers to buyers. Its technical sophistication is evident in its method of in-memory browser injection, which allows it to bypass security defenses. The stolen data is compressed and sent to a command-and-control server. Users are advised to avoid downloading unofficial game mods and enable multi-factor authentication to reduce the risk of credential theft. Security teams should monitor for specific behavioral indicators related to the malware's operations.
Fileless Malware and Email Authentication Gaps
Tech Optimizer
April 24, 2026

Fileless Malware and Email Authentication Gaps

Fileless malware operates stealthily within networks, utilizing legitimate system tools like PowerShell and Windows Management Instrumentation (WMI) to execute malicious code in memory without leaving traces on disk. Traditional antivirus solutions struggle to detect these threats due to their reliance on file signatures. The primary vector for fileless malware is email, where attackers use spoofed messages to trick users into activating malicious scripts. Misconfigurations in Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) records create vulnerabilities that attackers exploit to deliver spoofed emails. Traditional endpoint protection mechanisms are inadequate against fileless attacks, necessitating a shift towards behavioral analysis for detection. Organizations must assess their preparedness by ensuring proper email authentication configurations and enhancing endpoint security capabilities. Integration among security teams and updated employee security awareness programs are also essential. Sendmarc helps organizations mitigate vulnerabilities by providing visibility into SPF, DKIM, and DMARC configurations and enforcing DMARC to block unauthenticated messages.
Is Microsoft defender enough to protect Windows?
Tech Optimizer
April 24, 2026

Is Microsoft defender enough to protect Windows?

The operating system on devices manages background tasks, with security being a key focus. Microsoft has improved Microsoft Defender, its pre-installed antivirus software, and now recommends it as a viable protection option for users. Microsoft Defender Antivirus is effective against everyday security risks for many Windows 11 users without needing additional software. It is deeply integrated into the operating system, continuously updated, and works alongside other security features to protect against hacking techniques, unsafe links, and untrusted applications. Microsoft Defender SmartScreen alerts users to suspicious content, while Smart App Control and Controlled Folder Access provide additional protections. Microsoft emphasizes the need to enable security features and keep devices updated. While many users find Defender adequate, experts note it has limitations, particularly in phishing detection and ransomware protection, with a protection accuracy rating of 93 percent, which is lower than some paid alternatives. For users handling sensitive tasks, a third-party antivirus solution is recommended for better protection.
Microsoft says Windows 11 users do not need third-party antivirus software
Tech Optimizer
April 21, 2026

Microsoft says Windows 11 users do not need third-party antivirus software

Microsoft has introduced built-in antivirus software, Microsoft Defender, in Windows 11, which is active by default and continuously updated. Independent testing shows Defender achieving a score of 6 out of 6 from AV-Test and real-world protection rates between 98.5% and 100% from AV-Comparatives. The security features include real-time scanning, behavior monitoring, cloud-delivered protection, SmartScreen technology, Controlled Folder Access, and Smart App Control. Microsoft acknowledges that while Defender is sufficient for most users, third-party solutions may be necessary in enterprise environments. Windows Security benefits from automatic updates through Windows Update, providing continuous protection. Over 500 million Windows 11 users have received this updated guidance.
Best Free Antivirus 2026: Keep Your Devices Safe With These Free Tools
Tech Optimizer
April 21, 2026

Best Free Antivirus 2026: Keep Your Devices Safe With These Free Tools

Many free antivirus services monetize user attention or data, and caution is advised when selecting these options. Recommended free antivirus tools should be free of ads or spyware. Trustworthy antivirus providers present clear privacy policies detailing data collection and sharing practices. Effective free antivirus tools offer real-time protection, on-demand malware scans, and user-friendly features. While free antivirus software is generally sufficient, paid options provide additional cybersecurity tools. The best free antivirus tools consume less than 5% of system resources, with active scans ideally not exceeding 40% CPU usage. Avast faced backlash for selling customer data to over 100 third parties and was fined million by the FTC in 2024. Kaspersky was banned in the U.S. in 2024 due to concerns about potential intelligence exploitation, and it cannot be recommended at this time.
This Is ‘Best Antivirus Software For 2026’—Microsoft Says
Tech Optimizer
April 21, 2026

This Is ‘Best Antivirus Software For 2026’—Microsoft Says

Microsoft has updated its guidance for over 500 million Windows 11 users, encouraging them to evaluate their security measures. The company asserts that Microsoft Defender, its built-in antivirus software, is adequate for most users, providing protection against potential risks from the moment the PC is powered on. While Microsoft acknowledges that its default protections are usually sufficient, it also notes that the decision to use third-party antivirus solutions depends on individual usage patterns and desired features. Users managing multiple devices, sharing devices with family, or seeking additional services like identity monitoring may consider third-party options. However, Microsoft warns that adding extra security tools can complicate system performance and incur unnecessary costs. The perception of built-in protection has evolved since the Windows XP and Windows 7 eras, with Windows 10 and 11 reinforcing the reliability of Microsoft Defender. Despite this, the guidance is not expected to significantly impact the third-party antivirus market, as testing has shown a variety of excellent options available for users looking to enhance their security.
This fake Windows 11 24H2 update looks perfect, until it avoids antivirus and steals your passwords
Winsage
April 14, 2026

This fake Windows 11 24H2 update looks perfect, until it avoids antivirus and steals your passwords

Cybercriminals are using sophisticated tactics to deceive users, particularly with a counterfeit website posing as a legitimate Windows 11 update. This site operates under the domain microsoft-update[.]support and is designed to trick individuals into downloading malware that compromises sensitive information. The site is written in French and mimics a genuine cumulative update for Windows 11, version 24H2, featuring a convincing KB article number and a blue download button. The malware is packaged as a Windows update using the WiX Toolset 4.0.0.5512 and is labeled "WindowsUpdate 1.0.0.msi," with properties that suggest it is from Microsoft. At the time of analysis, VirusTotal showed no detections for the malware, which conceals its harmful code within an Electron shell, making it difficult to identify. Users are advised to download updates directly through the Windows Settings app or from Microsoft's official support hub.
Search