Security

AppWizard
June 19, 2025
Cybersecurity researchers at Zimperium zLabs have discovered a new variant of the GodFather Android malware that uses on-device virtualization to hijack legitimate mobile applications, primarily targeting banking and cryptocurrency apps. This malware installs a concealed host application that downloads a genuine version of the targeted app within a controlled environment, redirecting users to this manipulated version. It monitors user actions in real time, capturing sensitive information like usernames and passwords. The GodFather malware targets 484 applications globally, with a focus on 12 financial institutions in Turkey. It employs traditional overlay attacks and uses legitimate open-source tools to evade detection. The malware manipulates APK files, relocates malicious code, and utilizes Android’s accessibility services to deceive users into granting permissions. It also encodes critical information to complicate tracking efforts and transmits screen details back to attackers for real-time monitoring.
Winsage
June 18, 2025
A newly discovered vulnerability in Asus Armoury Crate, identified as CVE-2025-3464, has a severity rating of 8.4 out of 10 and allows hackers to gain low-level privileges on Windows systems. The affected versions of Armoury Crate range from V5.9.9.0 to V6.1.18.0. Researcher Marcin "Icewall" Noga from Cisco Talos highlighted this issue, prompting Asus to issue a product security advisory. Users are advised to verify their version of Armoury Crate and update to the latest version if necessary. No incidents of this exploit being actively used have been reported thus far. This is the second vulnerability found in an Asus utility within two months, following a separate issue with DriverHub reported in May.
AppWizard
June 18, 2025
The Iranian government has advised citizens to uninstall WhatsApp due to concerns that user data is being transmitted to Israel amid ongoing military tensions between Iran and Israel. Iranian state television has called for action against the app, while WhatsApp has responded by emphasizing its commitment to user privacy and denying allegations of data sharing with any government. WhatsApp's end-to-end encryption ensures that only the sender and recipient can access message content, maintaining the confidentiality of communications.
Winsage
June 18, 2025
Microsoft has acknowledged that the updates released on June 10 during Patch Tuesday may disrupt the Dynamic Host Configuration Protocol (DHCP) service on Windows Server versions 2025, 2022, 2019, and 2016. The DHCP Server service might intermittently stop responding after installing this security update, causing issues for network administrators as clients may be unable to renew their IP addresses. There is currently no viable workaround for affected users other than rolling back the patch, which is not ideal due to the critical security fixes included in the update. The impact of this issue varies among users, with some experiencing significant problems while others report no disruptions. Microsoft is working on a resolution and will provide further information soon. Additionally, Microsoft has faced challenges with its Surface Hub v1 devices, requiring an out-of-band update.
Winsage
June 18, 2025
To check your Windows version and build number, you can use the following methods: 1. Winver Tool: Type “winver” in the taskbar search bar and select the command to display your version and build number in a pop-up window. 2. Windows Settings: Go to the start menu, select “Settings,” then navigate to “System” and click on “About” to find your version and build number under “Windows specifications.” 3. Registry Database: Type “regedit” in the taskbar search field, open the Registry Editor, and navigate to HKEYLOCALMACHINE->SOFTWARE->Microsoft->Windows NT->CurrentVersion to find the version number under “ReleaseId” and “DisplayVersion.”
Search