Vaults Archives

Tech Optimizer

September 22, 2026

This fake LastPass Authenticator app will just shut off your antivirus and leave you open to attack

LastPass has identified a sophisticated scheme targeting users of its Authenticator app, involving SEO poisoning and deceptive GitHub pages that distribute malicious ZIP files disguised as legitimate software. Users searching for "LastPass Authenticator download" may encounter these counterfeit pages, which redirect them to a malicious server delivering a ZIP file containing vsdbg.exe and vsdbg.dll. The executable is a legitimate Microsoft debugging tool exploited to execute the malicious DLL through DLL sideloading, allowing the malware to run undetected. Named Rapuncel by security researchers from Delphos, this malware is undetectable by antivirus engines and targets a hardcoded list of 145 antivirus and endpoint security products, disabling them upon detection. Rapuncel harvests sensitive information, including saved passwords from over 25 web browsers, cryptocurrency wallet files from more than 30 applications, and session tokens from platforms like Discord and Steam. It also captures screenshots and compiles a profile of the infected system, uploading the stolen data to an attacker-controlled server. The malware includes a kernel driver that intercepts web traffic, allowing for advertisement injection and search result manipulation. This campaign has been active for several months, with LastPass vaults remaining unaffected. Users are advised to download applications only from trusted sources. Rapuncel establishes persistence on infected machines by installing itself as a Windows service that starts with the system and terminates activated security products. Removing the kernel driver requires booting into Safe Mode or using external recovery tools, as standard Windows utilities cannot eliminate software operating at that level.

Tech Optimizer

September 21, 2026

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

On September 17, researchers from LastPass and Delphos Labs discovered a counterfeit LastPass Authenticator installer on GitHub that installs a malicious Windows kernel driver designed to disable antivirus and steal passwords. The driver, named Alinubx.sys, was signed through Microsoft's hardware compatibility program and initially scored zero detections on VirusTotal. The fake installer is hosted on a fraudulent GitHub page that mimics a legitimate LastPass product page. When executed, the installer uses DLL side-loading to gain SYSTEM-level access and terminates security processes, allowing it to harvest saved passwords from various browsers and applications. The driver is a renamed variant of a known malicious driver, evading detection due to its new file hash. Delphos reported the driver to Microsoft, but it was not considered a security vulnerability. Users who executed the fake installer should treat their passwords and sensitive data as compromised and change them from a secure device. The malicious server has been linked to impersonation pages for multiple brands, and the loader was likely created using a specific crypter tool.

AppWizard

September 21, 2026

RuneScape: Dragonwilds (PC) Review

RuneScape: Dragonwilds introduces players to the new continent of Ashenfall, where they face the Dragon Queen Kuldra amidst a significant dragon threat. The game features a new biome called the Scorned Wilderness and a raid-style dungeon, requiring 40 to 60 hours of gameplay to complete its story content. It includes a sophisticated crafting system that allows for extensive customization of the game world. The combat system has been modernized, incorporating various weapon types and a nuanced parrying system, while the magic system offers unique runes that alter spell effects. Players experience skill progression through the use of tools or weapons, but the early game lacks healing potions, making it challenging. The game encourages exploration with a robust crafting system and in-game mounts, as well as the ability to create travel routes using loadstone teleporter panels. It also features dungeons with platforming elements and diverse enemy encounters. RuneScape: Dragonwilds supports full crossplay for consoles and has a roadmap for future updates.

AppWizard

September 11, 2026

Android can now move passwords and passkeys between password managers

Google has integrated a password manager transfer feature into the Android operating system, allowing users to move passwords and passkeys between compatible applications without exporting an unencrypted CSV file. This feature is available for devices running Android 8 and later, including users in the UAE. It supports popular password managers such as Google Password Manager, 1Password, Bitwarden, and Dashlane, with more providers expected to join. The transfer process involves selecting the import or copy option in the new password manager app, where Android identifies compatible managers and users authorize the transfer. This functionality operates through Google Play Services, requiring no separate Android version update.

AppWizard

September 10, 2026

Switching password managers on Android just got a lot safer

Google has introduced a credential transfer feature for password managers on Android devices, allowing users to seamlessly transfer saved passwords and passkeys between applications using the Credential Exchange Format. This feature enhances security by encrypting the transfer process, ensuring that credentials remain secure and inaccessible to Android during the exchange. Users can initiate the transfer by selecting the import option in their desired password manager app, which automatically detects other installed password managers. Currently, the feature is supported by Google Password Manager, 1Password, Bitwarden, and Dashlane, and is compatible with devices running Android 8 or later.

AppWizard

September 10, 2026

New Android Feature Lets You Securely Switch Password Managers

Google has introduced a new system-level feature for Android that simplifies the transfer of passwords and passkeys between password managers. This feature allows users to transfer credentials with a few taps, eliminating the need for file downloads and reducing the risk of data exposure. Previously, migrating credentials involved exporting sensitive information into unencrypted CSV files, which posed security risks. The new mechanism operates at the operating system level, enabling direct communication between applications. Users can initiate transfers by selecting the option to import credentials from another provider, after which Android identifies existing password manager apps. The process requires user authentication and ensures that sensitive information is not stored in an unencrypted format. The feature supports several password management platforms, including Google Password Manager, 1Password, Bitwarden, and Dashlane.

Tech Optimizer

August 25, 2026

Migrate Vaultwarden to PostgreSQL: Scale for Teams [2026]

Self-hosting Vaultwarden with SQLite can lead to performance issues as the user base grows, particularly due to SQLite's limitations with concurrent writes. Transitioning to PostgreSQL allows for better performance, multi-user support, and enhanced data durability. PostgreSQL supports concurrent connections and row-level locking, making it more suitable for team environments. To migrate from SQLite to PostgreSQL, certain prerequisites must be met, including having an existing Vaultwarden deployment, Docker Engine, a PostgreSQL server, and pgloader installed. The migration process involves backing up existing data, deploying a PostgreSQL container, updating configuration files, and using pgloader to transfer data. A VPS with 2 vCPU and 4GB RAM can support up to 50 users, with larger teams requiring more resources. PostgreSQL also allows for the creation of organizations for shared vault access and the configuration of group policies for security. Regular backups and performance tuning are necessary to maintain optimal operation. Common pitfalls during migration include not stopping the Vaultwarden container before migration, failing to encode special characters in the database password, and neglecting to back up data. Troubleshooting may involve checking connection strings and ensuring the PostgreSQL container is healthy. Advanced configurations can enhance performance and functionality, and understanding the differences between Vaultwarden and Bitwarden's official self-hosted server can aid in decision-making.

Tech Optimizer

August 16, 2026

Best Android Antivirus Apps 2026: Tested and Ranked

Bitdefender Mobile Security is rated as the best antivirus app for Android in 2026, achieving a 100% detection rate, 0.5% battery drain, and unobtrusive operation. The evaluation compared five antivirus applications on a Galaxy S26 Ultra, assessing detection rates, battery drain, scan speed, and permissions. Other notable antivirus apps include Norton 360 for Mobile, which is recognized for its features; Avast Mobile Security, known for its free version; McAfee Mobile Security, which excels in scam call and text filtering; and NordVPN Threat Protection, praised for web and Wi-Fi security. Most users may not need an antivirus app due to built-in protections like Google Play Protect, which automatically scans apps. However, specific scenarios warrant the installation of an antivirus app, such as sideloading apps, receiving scam texts and calls, assisting relatives, conducting banking and shopping on mobile, and using public Wi-Fi. The top five antivirus apps tested are: 1. Bitdefender Mobile Security: 100% detection, 0.5% battery drain, 31-second scan time. 2. Norton 360 for Mobile: 99.9% detection, 0.9% battery drain, 24-second scan time. 3. Avast Mobile Security: 99.9% detection, 0.7% battery drain, 26-second scan time. 4. McAfee Mobile Security: 99.78% detection, 1.0% battery drain, 34-second scan time. 5. NordVPN Threat Protection: 95.60% detection of web threats, 0.2% battery drain. Battery consumption varied, with NordVPN being the lightest and McAfee the heaviest. Permissions requested by each app also varied significantly, with Bitdefender requiring the most extensive permissions. Users are advised to check for legitimate antivirus apps by verifying the developer, installation count, update history, lab participation, and permission requests. Free antivirus apps like Avast and AVG offer effective protection but may lack some features of paid versions. Users should be cautious of fake security apps that mimic legitimate ones. If malware is suspected, users can run scans with Google Play Protect or other anti-malware apps and follow specific steps to remove malware if detected.

AppWizard

August 15, 2026

Next Week on XBOX: New Games for August 17 to 21

Next week, several games are set to launch for Xbox platforms: - S.T.A.L.K.E.R. 2: Cost of Hope - Release Date: August 20, Developer: GSC Game World. - Backyard Baseball - Release Date: August 18, Developer: Playground Productions, Price: .99. - The Sinking City 2 - Release Date: August 18, Developer: Frogwares, Price: .99. - Mortal Shell II - Release Date: August 20, Developer: Playstack, Price: .99. - Black Flower - Release Date: August 17, Developer: Triomatica Games. - Archerio - Release Date: August 18, Developer: Webnetic s. r. o., Price: .99. - Driving is Hard - Release Date: August 18, Developer: Elegant Horse Studios, Price: .99. - Arcade Archives 2 CYBER CYCLES - Release Date: August 19, Developer: HAMSTER Corporation. - Cloudy Day - Release Date: August 19, Developer: RainForest Game Studio. - Dark Reflection - Release Date: August 19, Developer: Stamina Zero LLC, Price: .99. - Dungeon Antiqua 2 - Release Date: August 19, Developer: AMATA K.K. - Grim Trials - Release Date: August 19, Developer: Soft Source Pte Ltd., Price: .99. - Hidden Cats in Barcelona - Release Date: August 19, Developer: Silesia Games Sp. z o.o. - WonderCat Adventures - Release Date: August 19, Developer: Obscure Cloud. - Berry Bury Berry - Release Date: August 20, Developer: Black Lantern Collective. - Educational Family Games - Release Date: August 20, Developer: Crazysoft Limited. - Emoji Killer – Casino Massacre - Release Date: August 20, Developer: EpiXR Games, Price: .99. - Find The Cats 2 - Release Date: August 20, Developer: Ember Box Studio. - Gallipoli - Release Date: August 20, Developer: BlackMill Games. - Ground Zero Hero - Release Date: August 20, Developer: Acclaim, Inc. - Wings of Beyond - Release Date: August 20, Developer: Little Giant, Bad Minion. - Yet Another Zombie Survivors - Release Date: August 20, Developer: Awesome Games Studio, Price: .99. - Creepy Shift: Uncle Joe’s Motel - Release Date: August 21, Developer: Red Limb Studio. - Dark Dungeon Head Haze - Release Date: August 21, Developer: Sweet Bread Games. - KEYQUACK QUEST - Release Date: August 21, Developer: YUME GAME STUDIO. - Mega City Force - Release Date: August 21, Developer: Ravenage Games. - No More Slimes!! - Release Date: August 21, Developer: Minimum Studio. - Pay To Path - Release Date: August 21, Developer: Afil Games. - Psalm 5:9-13 - Release Date: August 21, Developer: Axyos Games. - With Eyes of Ice - Release Date: August 21, Developer: Ratalaika Games S.L.

AppWizard

June 24, 2026

Government’s homegrown messaging app ‘NepaConnect’ appears on google play store

A government-developed messaging application named NepaConnect has been launched on the Google Play Store, aiming to provide a secure internal communications platform for state officials in Nepal. The initiative, disclosed by Finance Minister Dr. Swarnim Wagle, involves the creation of a sovereign digital infrastructure with a team of around 80 technical professionals. NepaConnect features include encrypted communication, document sharing, secure file storage, location sharing, voice messaging, document scanning, meeting scheduling, AI integration, status feeds, and ride-management services. The app is designed to centralize various workplace functions and reduce reliance on foreign communication platforms. However, details about its security standards, encryption protocols, and overall transparency remain limited. Currently, the application is in early development stages, with some features incomplete or non-functional. The future success of NepaConnect will depend on factors such as cybersecurity, user adoption, and the government's ability to encourage civil servants to switch from existing platforms.