NewApp Digest
search bot

system

Russia's national messenger app Max found to contain backdoor capable of secret screen captures
AppWizard
September 19, 2026

Russia’s national messenger app Max found to contain backdoor capable of secret screen captures

Researchers have found that Max, a messaging app mandated by the Russian government, can secretly capture screenshots, access sensitive information, impersonate users, and inject code into other applications. Developed by VK, the app integrates messaging, banking, and government services. Since September 1 of last year, it has been preinstalled on new smartphones, following the blocking of WhatsApp and Telegram. Despite its reach, it is not widely used in political circles, with insiders indicating that compliance with its use is performative.
Windows 11 is getting a better way to find your mouse cursor, and we tried it
Winsage
September 19, 2026

Windows 11 is getting a better way to find your mouse cursor, and we tried it

Microsoft has released a modernized version of the Mouse Indicator in Windows 11 Insider Preview Build 26340.9502 on September 18, 2026. This update features a new animation that can be activated through Accessibility settings, allowing users to keep the indicator on until they press the Esc key. Users can choose to activate the Mouse Indicator with a single or double Ctrl press. The previous version displayed a simplistic circle around the pointer briefly, while the new version offers a smoother, more dynamic animation. The feature is currently available only in the Insider build for the Experimental channel, and users can enable it by navigating to Settings > Accessibility > Mouse pointer and touch > Mouse indicator.
New RatHat Android Malware Uses AI to Steal Banking Logins, PINs and OTP Codes
AppWizard
September 19, 2026

New RatHat Android Malware Uses AI to Steal Banking Logins, PINs and OTP Codes

Security researchers have identified an Android banking Trojan named RatHat, which utilizes artificial intelligence, accessibility features, and Android Debug Bridge (ADB) to steal financial credentials, PINs, and one-time passcodes. Unlike traditional malware, RatHat employs a live AI assistant that interacts with the Android accessibility tree, allowing it to make real-time decisions based on the victim's screen content. The infection typically starts with social-engineering tactics, leading victims to counterfeit download pages where they are tricked into sideloading a malicious APK. Once installed, RatHat prompts users to enable Android Accessibility Service permissions, which it exploits to navigate Developer Options and enable Wireless Debugging. This grants it shell-level ADB access, allowing it to bypass application sandbox restrictions. RatHat deploys two native binaries for executing commands and maintaining a connection to the attacker's infrastructure. It targets banking applications through credential-stealing overlays and can intercept SMS messages for transaction verification codes. Additionally, it can record touch coordinates to reconstruct PINs and unlock patterns. RatHat includes persistence mechanisms to restore itself after removal, and users are advised to perform a factory reset if they suspect compromise. To reduce infection risk, users should avoid sideloading apps from unknown links, deny unnecessary Accessibility Service requests, and refrain from enabling Developer Options or Wireless Debugging for unfamiliar applications.
Microsoft's research boss reveals why Windows 11 features don't show up, and his fix half works
Winsage
September 19, 2026

Microsoft’s research boss reveals why Windows 11 features don’t show up, and his fix half works

Windows 11 has introduced new features such as a resizable Start menu, a movable taskbar, and the option to remove Bing from Windows Search. Users report not seeing significant changes after updates, leading to frustration. Marcus Ash, the design and research lead for Windows & Devices, acknowledged this issue, explaining that features may not appear immediately due to gradual rollouts. Users can enable the “Get the latest updates as soon as they’re available” option, but this does not guarantee instant access to new features. The September 2026 update includes a movable taskbar, a smaller taskbar option, and the ability to disable Bing results in Windows Search, though immediate visibility of these changes is not assured. Microsoft is also testing new features with Windows Insiders, including a customization tool for the context menu, enhanced File Explorer performance, a reduction in memory footprint for devices with 8GB RAM and above, a new WinUI-based Run dialog, a revamped Properties dialog, a redesigned pop-up for connected drives, the ability to remap the Copilot key, and improvements to Bluetooth connections and headset calls.
We finally know how Windows XP’s infamous FCKGW product key ended up everywhere
Winsage
September 19, 2026

We finally know how Windows XP’s infamous FCKGW product key ended up everywhere

Windows XP was released in two versions: Retail for individual consumers and Volume for Microsoft's partners and OEMs. The product key FCKGW-RHQQ2-YXRKT-8TG6W-2B7Q8 became widely recognized due to a potential leak by an insider at a major OEM, which was then spread by the pirate group Devils0wn. The Volume version's activation system required a unique key, but the FCKGW key was incompatible with the standard installation CD. To verify the legitimacy of Volume discs, the activation system searched for a secret 10MB binary blob exclusive to the Volume media. Microsoft blacklisted the FCKGW key with Service Pack 1 and implemented further security measures with Service Pack 2, restricting access to certain updates. Contrary to prior beliefs, the key's functionality was not due to a simple key generation algorithm but was designed by skilled engineers.
Search