social engineering tactics Archives

Tech Optimizer

February 27, 2026

Fake Avast Website Steals Users’ Credit Card Information

A phishing scam is targeting French-speaking users in Europe by impersonating Avast antivirus software. Victims are lured to a fraudulent website that mimics Avast's official portal, where they are tricked into providing credit card details due to a fabricated €499.99 charge and promises of a refund. The scam uses realistic branding, dynamic JavaScript for urgency, and live chat features to collect personal information. Users are asked to select refund reasons and submit their personal details, after which they are prompted for credit card information. The scam employs the Luhn algorithm to validate card numbers and displays a fake confirmation message after data submission. Key red flags include dynamic dates, tight deadlines, requests for full card re-entry, and suspicious live chat interactions. Avast has warned users about these scams and encourages reporting to authorities.

AppWizard

February 19, 2026

Android security gets aggressive as Google bans thousands of developers and millions of sketchy apps

Google has reported significant improvements in app security for Android in 2025, preventing over 1.75 million policy-violating apps from entering the Play Store and removing more than 80,000 developer accounts attempting to distribute malware. The integration of AI models into the app review process has enhanced the speed and accuracy of identifying malicious patterns. Additionally, Google blocked over 255,000 apps from requesting unnecessary sensitive data and eliminated 160 million spam ratings and reviews. Google Play Protect now evaluates over 350 billion apps daily, identifying 27 million new malicious apps outside the Play Store and blocking 266 million risky installation attempts across 185 markets. A new measure has been implemented to prevent users from disabling Play Protect during phone calls to combat social engineering tactics. Future plans include democratizing developer verification and simplifying protection against "tapjacking" attacks in Android 16.

Winsage

February 16, 2026

Multiple Flaws Found in Microsoft Windows & Office — Could Let Hackers In

Microsoft has identified at least six zero-day vulnerabilities in Windows and Microsoft Office that were actively being exploited by hackers before patches were released. These vulnerabilities allow attackers to compromise systems with minimal user interaction, such as clicking on malicious links or opening compromised Office documents. Notable examples include a Windows Shell Security Bypass (CVE-2026-21510) and an Office File Exploit that can execute malicious code. The vulnerabilities pose serious risks, including active exploitation, remote code execution, and the potential for malware installation and credential theft. Microsoft has released security patches to address these vulnerabilities, and users are urged to install them immediately. The affected systems include all supported versions of Windows and Microsoft Office applications. Users are advised to install updates, be cautious with emails and links, enable security tools, and keep software up to date.

Tech Optimizer

January 28, 2026

Top Android Antivirus Apps for 2026: Reviews and Key Features

Android users face increasing cyber threats as we approach 2026, with AI-driven malware and ransomware becoming more prevalent. The antivirus market has evolved to include advanced features like real-time threat intelligence and integrated privacy tools. Norton Mobile Security is noted for its machine learning-powered malware detection, VPN, app advisor, and dark web monitoring, achieving a 99.9% detection rate. TotalAV offers user-friendly antivirus scanning and system optimization, with features like real-time phishing protection and cloud-based scanning. Aura Antivirus combines antivirus with identity theft protection and family safety features, excelling in AI-driven behavioral analysis. Bitdefender Mobile Security is recognized for its lightweight design, anti-theft features, and effective web protection. McAfee Mobile Security provides secure Wi-Fi scanning and IoT integration, with high user satisfaction reported. Norton leads in predictive analytics, while TotalAV includes a VPN for remote workers. Aura offers family-oriented tools and compliance-friendly features, incorporating blockchain technology for secure identity verification. Bitdefender is efficient in battery usage and has a high detection rate. McAfee supports multi-device protection and has strong customer support. Norton’s dark web monitoring helps prevent identity theft, and TotalAV blocks trackers and ads. Aura links antivirus protection to financial security with credit monitoring. Bitdefender automates threat responses and has a strong anti-ransomware module. McAfee scans for vulnerabilities in smart devices and provides threat intelligence feeds. Future developments may include quantum-resistant encryption. TotalAV is praised for its user interface, while Aura encourages user feedback for improvements. Bitdefender uses machine learning to reduce false positives, and McAfee employs predictive modeling for personalized security. Organizations must evaluate antivirus solutions based on integration with existing security frameworks, cost, and performance impact. Emerging trends include biometric authentication and deeper hardware-level security protections.

AppWizard

January 26, 2026

Google to Make Sideloading Android Apps a High-Friction Process

Google is enhancing the safety of Android users by complicating the process of sideloading applications to reduce security threats. This change aims to inform users about the dangers of installing unverified applications, as criminals often exploit sideloading through social engineering tactics. Last year, Google introduced new developer verification requirements and a revised installation flow to highlight these risks. The new process is designed to resist coercion, ensuring users are not misled into bypassing safety measures. Advanced users will still have the option to sideload apps but through a more challenging process. Additionally, a survey by Bitdefender indicates that while smartphones are commonly used for transactions, many users lack an understanding of their vulnerabilities, leading to increased risks from cybercriminals.

Winsage

January 16, 2026

Windows Remote Assistance Vulnerability Allow Attacker to Bypass Security Features

Critical security updates have been released to address CVE-2026-20824, a vulnerability in Windows Remote Assistance that allows attackers to bypass the Mark of the Web (MOTW) defense system. This affects various Windows platforms, including Windows 10 and Windows Server 2025, and is rated with an Important severity level. The flaw enables unauthorized local attackers to circumvent MOTW defenses, posing risks to confidentiality. The vulnerability requires local access and user interaction for exploitation, often using social engineering tactics. Microsoft has issued security updates for 29 Windows configurations, including specific KB articles for affected versions of Windows 10, Windows 11, and Windows Server. Users are advised to apply the necessary patches, which are classified as “Required” customer actions. The vulnerability remains unexploited in the wild and was not publicly disclosed before the patches were released. Microsoft’s assessment categorizes it as “Exploitation Less Likely.”

AppWizard

December 8, 2025

Android scam protection: How new screen sharing warnings and a 30-second pause safeguard bank app users from call scams | – The Times of India

Fraudsters are using screen sharing during phone calls to impersonate bank representatives and extract sensitive information from users, leading to unauthorized transactions. In response, Android has launched a pilot program in the U.S. to enhance user security against these scams. The program automatically detects when a call from an unknown number coincides with screen sharing on a banking app, displaying a warning and offering an option to end the call. This feature is available on Android devices running version 11 and above. It includes a 30-second pause before users can continue interacting with the call, disrupting the scammers' tactics. The feature was previously tested in the U.K., where it successfully helped users terminate risky calls and avoid financial losses. Major financial service providers, including popular fintech apps and banks, are supporting the U.S. rollout of this scam protection.

AppWizard

December 3, 2025

Android scam protection pilot pauses screen sharing after opening bank apps

Android is rolling out enhanced scam protection features in the United States to combat sophisticated social engineering tactics. For users on calls with unrecognized numbers, Android 11 and later versions will activate a warning when screen sharing is enabled while accessing banking applications. This warning appears as a pop-up with a red "End call now" button, which also terminates the screen-sharing session. The alert introduces a 30-second delay before users can proceed, disrupting scammers' tactics that create urgency. Earlier this year, this feature was tested in the UK, helping thousands of users avoid financial losses. The initiative is being piloted in the US in collaboration with fintech companies and major banks.

AppWizard

December 2, 2025

New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control

A new Android malware named Albiriox has emerged, marketed as malware-as-a-service (MaaS). It features a hard-coded list of over 400 applications, including banking and cryptocurrency platforms, and is distributed through social engineering tactics using dropper applications. Initially advertised in late September 2025, it became a full MaaS offering by October, with Russian-speaking threat actors behind its development. Albiriox allows remote control of compromised devices via an unencrypted TCP socket connection and Virtual Network Computing (VNC), enabling attackers to extract sensitive information and perform overlay attacks for credential theft. One campaign targeted victims in Austria using German-language lures and counterfeit Google Play Store listings. Albiriox also utilizes Android's accessibility services to bypass security measures and employs a novel distribution strategy involving a counterfeit website that collects phone numbers. Additionally, another Android MaaS tool, RadzaRat, was introduced, masquerading as a file management utility while offering extensive surveillance and remote control capabilities. RadzaRat can log keystrokes and maintain persistence through specific permissions, highlighting a trend in the availability of sophisticated cybercrime tools.

AppWizard

November 26, 2025

Hackers Bypass Signal, Telegram And WhatsApp Encryption To Read Messages

CISA has issued a warning about spyware targeting users of instant messaging applications, particularly highlighting the Sturnus trojan, which poses significant risks to Android smartphone users. Sturnus, identified as a banking trojan, can bypass encrypted messaging by capturing messages after they are decrypted on the smartphone screen, rather than cracking the encryption itself. Security expert Aditya Sood noted that Sturnus uses a combination of plaintext, RSA, and AES-encrypted communication, complicating detection efforts. The trojan can read everything displayed on the smartphone screen in real time, including sensitive messages and contacts. CISA also identified tactics used by cyber threat actors, such as phishing, zero-click exploits, and impersonation to gain unauthorized access to messaging apps. Users are advised to keep Google’s Play Protect activated, avoid unauthorized app stores, and be cautious with accessibility permissions to protect against these threats.