usernames Archives

AppWizard

October 3, 2026

Chrome for Android might soon force a biometric scan before filling your passwords

Google is experimenting with a new biometric verification feature for password autofill in Chrome on Android devices, which may require users to authenticate their identity through fingerprint scans, facial recognition, or other methods before accessing saved passwords. This initiative aims to enhance security by preventing unauthorized access to stored passwords, even if a device is unlocked. The feature has resurfaced in the latest Chrome Canary build after a previous attempt was shelved over a year ago. Users will need to authenticate themselves before Chrome releases a saved credential, similar to existing biometric methods for password autofill on Apple devices. The feature is currently in the experimental phase with no official release timeline announced.

AppWizard

September 19, 2026

New RatHat Android Malware Uses AI to Steal Banking Logins, PINs and OTP Codes

Security researchers have identified an Android banking Trojan named RatHat, which utilizes artificial intelligence, accessibility features, and Android Debug Bridge (ADB) to steal financial credentials, PINs, and one-time passcodes. Unlike traditional malware, RatHat employs a live AI assistant that interacts with the Android accessibility tree, allowing it to make real-time decisions based on the victim's screen content. The infection typically starts with social-engineering tactics, leading victims to counterfeit download pages where they are tricked into sideloading a malicious APK. Once installed, RatHat prompts users to enable Android Accessibility Service permissions, which it exploits to navigate Developer Options and enable Wireless Debugging. This grants it shell-level ADB access, allowing it to bypass application sandbox restrictions. RatHat deploys two native binaries for executing commands and maintaining a connection to the attacker's infrastructure. It targets banking applications through credential-stealing overlays and can intercept SMS messages for transaction verification codes. Additionally, it can record touch coordinates to reconstruct PINs and unlock patterns. RatHat includes persistence mechanisms to restore itself after removal, and users are advised to perform a factory reset if they suspect compromise. To reduce infection risk, users should avoid sideloading apps from unknown links, deny unnecessary Accessibility Service requests, and refrain from enabling Developer Options or Wireless Debugging for unfamiliar applications.

AppWizard

September 10, 2026

How to Delete Your Digital Footprint From the Internet: A Complete Guide

Android privacy tools allow users to control camera access, microphone use, location permissions, and app activity, but they only protect information managed on the device or connected services. A digital footprint extends beyond the device, with personal information remaining accessible through search results, social media profiles, and data broker listings even after permissions are changed. To manage this footprint, users should identify publicly visible information, review old accounts, and delete unnecessary records. Simply deleting an Android app does not erase the associated account, which may retain personal data. Users should actively close unused online accounts to maintain digital hygiene. Data brokers publish personal information that cannot be removed through Android privacy settings, requiring users to follow an opt-out process to remove their data. While Android privacy settings are important, they do not eliminate external records. Data breaches require vigilance, including changing compromised credentials and monitoring for suspicious activity. Removing the source of information is more effective than just eliminating search results, and legal rights may exist in some regions for personal data removal. Completely erasing a digital footprint is rarely feasible due to public records and the persistence of past posts. The goal should be to minimize irrelevant content while retaining useful accounts. Users should begin by deleting information they control, then address data brokers and public profiles.

Tech Optimizer

September 1, 2026

Fake Microsoft Security Scan Tells You to Remove Antivirus—Then Scammers Ask for Remote Access

A new web-based scam is using counterfeit Microsoft-branded security scans to deceive users into uninstalling their antivirus software. The scam websites conduct fake inspections, reporting false security failures and claiming third-party antivirus products are unsupported by Windows. They gather browser information to create customized-looking scan reports and aim to mislead victims into a fraudulent refund process. Investigators have identified 11 related scam sites under the name SysScan, which present themselves as legitimate Microsoft security checks. The scam does not involve file downloads but relies on convincing websites, fabricated security scores, and personal information forms. The scan results are hard-coded, and the security score is limited to a range between 13 and 30 out of 100. The scams instruct users to uninstall antivirus software, which is misleading since Windows does not cease support for third-party antivirus solutions. The scam sites request extensive personal information, including names, addresses, phone numbers, and banking details, and redirect victims to a page claiming a refund manager will call shortly. This process allows scammers to gain remote access to victims' computers. Indicators of compromise include specific IP addresses and domains associated with the scam.

Winsage

August 29, 2026

Microsoft Edge update adds Apple sign-in and scam protection, but officially ends Edge Drop and real-time video translation

Microsoft Edge has introduced a feature allowing users to sign in with their Apple accounts on both Windows and macOS devices, with administrators able to manage its availability. The update includes a security enhancement that automatically unsubscribes users from notifications from scam or malicious sites. However, it also retires features such as Edge Drop, which allowed users to send messages and files to themselves, and the real-time video translation capability. An enhanced key icon in the address bar has been added for easier access to saved credentials. Additional updates include a new Copilot Cowork policy and clarifications on the DowngradeVersion policy for WebView2, while the LocalNetworkAccessRestrictionsTemporaryOptOut policy is set for removal in a future update.

AppWizard

August 12, 2026

Privacy or Evasion? The Policy Dilemma Around Messaging App Usernames

On June 29, 2026, WhatsApp introduced a feature allowing users to create usernames to enhance privacy by enabling connections without revealing phone numbers. The Government of India expressed concerns about potential increases in cybercrime linked to this feature and issued a notice to WhatsApp requesting a pause on its rollout. The notice demanded justification under various laws, including the Information Technology Act, 2000. Similar inquiries were sent to other messaging platforms like Telegram and Signal. This scrutiny represents a shift from reactive measures to proactive assessments of platform design, emphasizing how features like usernames can impact user safety and accountability. The Delhi High Court upheld a temporary ban on Telegram during an examination period, recognizing the relevance of platform architecture in assessing risks. The increase in cybersecurity incidents in India raised concerns about usernames enabling fraud and evasion. The government is advocating for a balanced approach that allows pseudonymous interaction while ensuring accountability.

AppWizard

July 22, 2026

WhatsApp adds Apple CarPlay and Android Auto upgrades, iPad sign-ups, and more

WhatsApp is enhancing its platform for cross-device communication by introducing new features for Apple CarPlay and Android Auto, allowing users to listen to incoming messages, respond, view call history, and access favorite contacts while driving. Users can now create an account directly from their iPads without linking to a primary phone, although a phone number is still required for registration. The app also allows users to share songs from Apple Music or Spotify to their WhatsApp Status and enables opening and editing PDFs directly within the app on web and desktop versions. Additionally, WhatsApp has introduced usernames for privacy and launched a subscription plan, WhatsApp Plus, which offers premium features.

AppWizard

July 16, 2026

Amnesia: What If a Messenger Was Designed to Forget?

In digital communication, traditional messaging platforms act as persistent archives of user data, including accounts, devices, contacts, and interactions, which can hinder the essence of communication. While end-to-end encryption enhances privacy, it does not eliminate data retention. Amnesia is a concept that proposes a messaging platform emphasizing temporary communication with no permanent accounts or conversation histories. The initial prototype allows users to create one-time sessions using QR codes, ensuring that all data is destroyed once the session ends. Each session generates unique identity keys, preventing credential reuse and session token theft. The system does not retain any conversation history, reinforcing the principle that once a session is terminated, the data is irretrievable. Amnesia's relay facilitates communication without retaining user accounts or histories, and its design minimizes durable information to reduce risks. The project is currently an architectural concept and an early prototype, not ready for production or sensitive communications.

AppWizard

July 10, 2026

WhatsApp Username Issue: Meta’s messenger submits reply to govt; centre weighs risks of digital fraud

Meta-owned WhatsApp has responded to the Indian government's notice concerning its proposed "username" feature, which aims to allow users to communicate without sharing phone numbers. The Indian government expressed concerns about potential risks such as online fraud and impersonation. WhatsApp requested more time to address these issues and confirmed that the feature will not launch in India until discussions are complete. The Ministry of Information Technology is currently reviewing WhatsApp's submission. Other messaging platforms, including Telegram and Signal, have also received similar notices. WhatsApp plans to implement measures to mitigate impersonation risks, such as allowing only legitimate owners to claim high-profile names and requiring users to know exact usernames to initiate contact. The platform will limit the number of new contacts an account can reach and provide information about the sender's account status when a user receives a message via a username.

Winsage

July 8, 2026

Trojanized LetsVPN installer gives attackers remote access to Windows PCs

A malware campaign has been discovered that exploits the VPN service LetsVPN. Researchers from ThreatLocker found a malicious Windows installer that pretends to be the legitimate LetsVPN application while deploying a remote access trojan (RAT) called GoodPersonRAT. The malware allows attackers to control infected systems using stealth techniques. The malicious installer first deploys the RAT and then installs the authentic LetsVPN application, creating an illusion of legitimacy. The package identified as Kuailian_win-setup.86.msi contains the legitimate LetsVPN installer, a loader, and an encrypted payload. GoodPersonRAT features include remote desktop control, file upload/download, command execution, proxying, keylogging, and clipboard monitoring. It specifically targets Telegram Desktop users by archiving critical account information and altering proxy settings. The malware ensures persistence through Windows services and scheduled tasks and can undermine security software. The LetsVPN installer is legitimate and signed, but the MSI package is unsigned and contains malicious components. Users are advised to download software only from official sources and verify digital signatures.