user information Archives

AppWizard

April 23, 2025

Sanso’s chat messenger aims to dethrone usual messengers

LetsTalkh Messenger is a messaging app developed by Sanso Technologies that offers a unique user experience without advertisements or data tracking. It features global roaming chat capabilities, end-to-end encryption, built-in privacy tools, and a focus on user empowerment. Sanso Technologies, led by founder Haroon S Khan, has a strong presence in the EU and UAE and has been recognized by platforms like FORBES. SansoPay is a cross-border digital payment platform that enables secure international transactions for individuals and businesses. It includes features like cross-border capabilities, API integration, a SansoPay Debit Card, and robust security measures compliant with regulations. SansoPay aims to provide financial freedom and cater to various sectors, addressing challenges faced by traditional payment platforms.

Winsage

April 11, 2025

Microsoft Is Ready to Try Again With Recall AI Feature That Screenshots Your Activity

Microsoft's Recall feature is being rolled out in preview mode to Windows Insiders using Copilot PCs powered by Snapdragon technology. The tool allows users to retrieve previously displayed content by searching for keywords, capturing screenshots throughout the day, and using AI for organization. The rollout faced delays due to privacy concerns, leading Microsoft to pause and review security measures. Users must opt in to save snapshots and enroll in Windows Hello for access, with the ability to control what is saved and pause saving at any time.

Winsage

April 5, 2025

Microsoft AI chief Suleyman sees advantage in building models ‘3 or 6 months behind’

Microsoft's CEO of AI, Mustafa Suleyman, outlined the company's strategy for AI development, focusing on adapting its Copilot digital assistant to consumer needs. Despite having a large inventory of Nvidia GPUs, Microsoft is not using them for the most advanced AI models, opting instead for a measured approach that allows for lower costs and targeted solutions. The company collaborates with organizations like OpenAI and CoreWeave to enhance products such as Bing and Windows. A new feature called "memory" will be added to Copilot, allowing it to retain user information for personalized interactions. Microsoft has invested .75 billion in OpenAI, but in July 2024, it classified OpenAI as a competitor. OpenAI announced a collaboration with Oracle on the Stargate project, moving away from exclusive reliance on Microsoft Azure, although Microsoft stated that OpenAI remains committed to Azure. Suleyman emphasized the importance of developing internal AI capabilities and maintaining a long-term partnership with OpenAI through at least 2030.

AppWizard

March 27, 2025

What Is Signal, the App Used by Trump Staff, and Is It Safe?

The Trump administration is under scrutiny for officials using the messaging app Signal for discussions about sensitive military operations, revealed in an article by Jeffrey Goldberg on March 24. Secretary of Defense Pete Hegseth and others discussed military actions in Yemen via Signal, despite prior warnings from the U.S. government against using such applications for official communications. Democratic lawmakers, including Senator Chuck Schumer, are calling for an investigation into potential national security breaches. Signal, launched in 2014, emphasizes privacy through end-to-end encryption and has gained popularity among activists. However, its use in government contexts is contentious, with previous reprimands for non-compliance with federal record preservation requirements. Concerns have been raised about sharing sensitive information on Signal, although intelligence officials stated that no classified information was exchanged in the Trump officials' conversations. The Pentagon has warned military personnel about using Signal due to risks from Russian hackers, and experts suggest that government-specific communication tools would provide a higher level of security.

AppWizard

March 26, 2025

Devious new Android malware uses a Microsoft tool to avoid being spotted

Cybercriminals are using legitimate software tools to create deceptive Android applications that steal sensitive user information. McAfee's findings indicate that hackers are exploiting the .NET MAUI framework to develop sophisticated malware that can evade traditional antivirus detection. The malware uses a multi-stage dynamic loading process, incrementally loading and decrypting code, making it difficult for security software to identify the applications' true nature. Hackers add extraneous settings and permissions to confuse security scanners and use encrypted communications for data transmission instead of standard internet requests. These malicious applications are not found in reputable app stores like Google Play but are distributed through unofficial app stores, often accessed via phishing links. Examples include a counterfeit banking app and a fraudulent social networking service targeting the Chinese-speaking community. The main goal of these apps is to secretly extract user data and send it to the attackers' servers. Users are advised to download apps only from official repositories and to be cautious by reviewing user feedback before installation.

AppWizard

March 25, 2025

What to know about Signal, the app used by Trump officials to text war plans

An encrypted messaging app named Signal has been used by high-ranking officials from the Trump administration, including Defense Secretary Pete Hegseth and Vice President JD Vance, to discuss a sensitive military operation. This conversation included Jeffrey Goldberg, editor-in-chief of The Atlantic, who reported on the incident. The National Security Council confirmed the authenticity of the messages. Signal, which has around 70 million users, offers end-to-end encryption and is operated by the nonprofit Signal Foundation. Despite its security features, experts warn that it is not immune to hacking, as highlighted by a National Security Agency bulletin in February 2025 regarding vulnerabilities within the app. Government officials have used Signal for sensitive communications, but there are potential legal implications for sharing classified information on nonsecure platforms, which could violate the Espionage Act. Some messages in a group chat were set to disappear after one to four weeks, raising concerns about federal record preservation laws.

AppWizard

March 24, 2025

Malicious Game Infects Steam Users With Info-Stealing Malware

Steam removed the game Sniper: Phantom's Resolution due to a security breach involving malware designed to extract sensitive user information. The malware was disguised as a legitimate Windows process and employed tactics like executing Node.js scripts and establishing startup persistence. A month earlier, another game, PirateFi, was found to be spreading the Vidar infostealer, affecting up to 1,500 users. Both incidents highlight the risks associated with malware hosted on trusted platforms like Steam, which may exploit vulnerabilities in submission processes. Users often identified suspicious behavior before the platforms did, indicating delayed detection and response times. The lack of timely communication regarding breaches further exacerbates user concerns.

AppWizard

March 18, 2025

Malicious Android ‘Vapor’ apps on Google Play installed 60 million times

Over 300 malicious Android applications, identified as adware, have been downloaded 60 million times from Google Play. These apps, part of an operation called "Vapor," have attempted to steal sensitive user information and generate 200 million fraudulent advertising bid requests daily. The campaign was first uncovered by the IAS Threat Lab and has been active since early 2024. A total of 331 malicious applications were identified, with significant infections reported in Brazil, the United States, Mexico, Turkey, and South Korea. Notable offenders include AquaTracker, ClickSave Downloader, Scan Hawk, Water Time Tracker, Be More, BeatWatch, TranslateScan, and Handset Locator, each with varying download counts. The apps disguise themselves as utilities and employ tactics to evade detection, such as disabling their Launcher Activity and creating fullscreen overlays for ads. Users are advised to avoid unnecessary apps from unverified publishers and regularly check installed applications.

AppWizard

March 12, 2025

Researchers find North Korean spy apps hosted in Google Play

Researchers from Lookout have identified several Android applications that, despite passing Google Play's security checks, are covertly uploading sensitive user data to operatives affiliated with the North Korean government. The malware, named KoSpy, disguises itself as utility applications for managing files, performing updates, and ensuring device security, while harvesting personal information such as SMS messages, call logs, location data, files, ambient audio, and screenshots. The malware has been found under five app names: 휴대폰 관리자 (Phone Manager), File Manager, 스마트 관리자 (Smart Manager), 카카오 보안 (Kakao Security), and Software Update Utility. These applications are available on Google Play and third-party markets like Apkpure. A privacy policy associated with one app claims to protect user information but also admits that no method of transmission is 100% secure. The IP addresses linked to the command-and-control servers of these apps have been connected to domains involved in North Korean espionage activities since at least 2019.

AppWizard

March 11, 2025

PlayPraetor Malware Targets Android Users via Fake Play Store Apps to Steal Passwords

A malware campaign called PlayPraetor has been identified by cybersecurity firm CTM360, involving counterfeit Google Play Store websites that trick users into downloading malicious Android applications. These apps are advanced banking Trojans that steal sensitive information, including banking credentials and clipboard data. The operation spans over 6,000 fraudulent web pages designed to mimic the official Play Store, prompting users to install APK files that contain the PlayPraetor Trojan. This malware can log keystrokes, capture screen content, and monitor clipboard activity. Distribution occurs mainly through Meta Ads and SMS messages, exploiting psychological triggers to deceive users. The malware communicates with a command and control server to target specific banking and cryptocurrency wallet applications. The attackers aim for financial gain by draining compromised accounts, executing unauthorized transactions, and potentially engaging in ad fraud. The operation is particularly focused on South-East Asia, and users are advised to download apps only from the official Google Play Store and to maintain updated security software.