NewApp Digest
search bot

technique

Android Malware Caught by Teaching AI to Read Apps as Pictures
AppWizard
October 11, 2026

Android Malware Caught by Teaching AI to Read Apps as Pictures

A research team from Turkey, led by Erdal Başaran and Ömer Okucu of Ağrı İbrahim Çeçen University, along with Yusuf Alaca from Hitit University, has developed an innovative detection framework for Android malware that utilizes a visual approach. This framework transforms key features of Android applications into images, allowing a Vision Transformer to differentiate between benign software and malware. The researchers created two types of images from static and dynamic analysis features: a conventional 2D grayscale image and a QR code image. Separate Vision Transformer models were trained on each image type, and spatial pooling features were extracted from deeper layers to create a comprehensive representation of application behavior. To refine the fused feature vector, Recursive Feature Elimination (RFE) was employed, enhancing classification clarity and reducing computational load. The final classification utilized a majority-voting ensemble strategy, achieving a detection accuracy of 98.72 percent, surpassing standalone models. The study demonstrates that the multimodal system outperforms individual grayscale or QR code pathways. The dataset used is publicly available, promoting reproducibility. The framework's reliance on static and dynamic analysis features allows it to adapt to new threats, and the novel QR code representation offers distinctive visual signatures of malicious behavior. However, challenges remain regarding feature extraction quality and computational demands.
Nineteen Years Later, The Simpsons Game Finally Runs Natively on PC
AppWizard
October 5, 2026

Nineteen Years Later, The Simpsons Game Finally Runs Natively on PC

A solo developer named YesterMester has revived The Simpsons Game, originally released by Electronic Arts in 2007, by recompiling the Xbox 360 version to run on Windows, Linux, and Steam Deck. The latest version, 0.0.6.2, was released on GitHub in early October 2026 and features capabilities such as booting up, playing videos, saving progress, loading levels, and engaging gameplay. The game utilizes static recompilation to convert approximately 82,000 game functions into a standard x86-64 application, allowing for smooth gameplay at 60 frames per second. Players can enhance visuals with features like supersampling and anisotropic filtering, and the game now supports keyboard and mouse controls with customizable settings. Installation requires downloading a launcher, and a NoAVX2 package is available for older processors.
Microsoft warns fake CAPTCHA tests are hijacking Windows PCs
Winsage
October 5, 2026

Microsoft warns fake CAPTCHA tests are hijacking Windows PCs

Microsoft has warned Windows users about a cyber threat that disguises itself as a CAPTCHA test, where cybercriminals use fraudulent verification pages to trick users into executing commands that can install malware. This tactic involves users being directed to a compromised website that presents a fake verification window, prompting them to copy text and execute it in the Windows Run dialog. This method allows attackers to bypass antivirus software by pre-loading malicious scripts disguised as harmless images in the browser's cache. Once activated, the malware collects system information, steals data, and maintains long-term control over the system. Microsoft recommends using robust security software and being aware that no legitimate service will ask users to copy and paste commands into system dialogs.
Avatar Legends add on
AppWizard
October 4, 2026

Avatar Legends add on

The Avatar Legends add-on for Minecraft allows players to wield elemental powers of water, fire, air, and earth, enabling exploration, landscape transformation, and combat. Players can master various bending techniques and unlock the Avatar State, which provides temporary invincibility and access to powerful abilities. The add-on features elemental temples where players learn from Avatar Spirits and includes a meditation system for refining powers. Each element offers three unique techniques, and mastering them grants passive benefits, such as fire resistance. Players can find meditation points at temples or craft their own for convenience.
This new Android app fixes everything wrong with Google Clock
AppWizard
September 30, 2026

This new Android app fixes everything wrong with Google Clock

The Google Clock app has faced criticism for its alarm functionality and reliability, prompting users to seek alternatives. Pixel Clock has emerged as a new contender, offering a user-friendly design and features such as a Wake-up mission that requires users to solve math problems to dismiss alarms. It includes alarm presets for napping, a sophisticated timer feature called Pixel Timer for time-blocking, and Smart Presets for various time management needs. The app also tracks timer analytics on a Stats page. Despite minor bugs, Pixel Clock has made a strong impression and is seen as a more reliable option compared to Google Clock.
silver Android smartphone
Tech Optimizer
September 23, 2026

BigDiskBuster PoC Blocks Windows Defender Updates

A new tool named BigDiskBuster has been released on GitHub, which disrupts Microsoft Defender Antivirus by preventing it from installing updates. It does this by consuming available disk space during the update process, causing Defender to remain on its current version and unable to receive new platform or signature updates. BigDiskBuster operates as a local denial-of-service technique and requires prior access to the target machine to execute. The tool was created by researcher Abdelhamid Naceri, known as Nightmare Eclipse, who has previously worked on similar projects. As of now, there is no CVE identifier, patch, or advisory from Microsoft regarding this issue.
This fake LastPass Authenticator app will just shut off your antivirus and leave you open to attack
Tech Optimizer
September 22, 2026

This fake LastPass Authenticator app will just shut off your antivirus and leave you open to attack

LastPass has identified a sophisticated scheme targeting users of its Authenticator app, involving SEO poisoning and deceptive GitHub pages that distribute malicious ZIP files disguised as legitimate software. Users searching for "LastPass Authenticator download" may encounter these counterfeit pages, which redirect them to a malicious server delivering a ZIP file containing vsdbg.exe and vsdbg.dll. The executable is a legitimate Microsoft debugging tool exploited to execute the malicious DLL through DLL sideloading, allowing the malware to run undetected. Named Rapuncel by security researchers from Delphos, this malware is undetectable by antivirus engines and targets a hardcoded list of 145 antivirus and endpoint security products, disabling them upon detection. Rapuncel harvests sensitive information, including saved passwords from over 25 web browsers, cryptocurrency wallet files from more than 30 applications, and session tokens from platforms like Discord and Steam. It also captures screenshots and compiles a profile of the infected system, uploading the stolen data to an attacker-controlled server. The malware includes a kernel driver that intercepts web traffic, allowing for advertisement injection and search result manipulation. This campaign has been active for several months, with LastPass vaults remaining unaffected. Users are advised to download applications only from trusted sources. Rapuncel establishes persistence on infected machines by installing itself as a Windows service that starts with the system and terminates activated security products. Removing the kernel driver requires booting into Safe Mode or using external recovery tools, as standard Windows utilities cannot eliminate software operating at that level.
Search