NewApp Digest
search bot

victim

North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections
Tech Optimizer
July 18, 2026

North Korea Buried Four-Stage Malware in Flag Images: Zero Antivirus Detections

North Korea's Contagious Interview hackers have been using a deceptive strategy to target developers by posing as recruiters and embedding malware in SVG files. Elastic Security Labs discovered that the attackers hid malicious payloads within HTML comment blocks of these files, allowing the malware to evade antivirus detection. At the time of the findings, no antivirus engines flagged the compromised repositories, which included trojanized GitHub repositories disguised as coding challenges. The malware executed automatically at server startup and deployed four modules: a browser credential and cryptocurrency wallet stealer, a file stealer, a remote access Trojan, and a clipboard monitor. The campaign, tracked as REF9403, is part of the ongoing Contagious Interview operation attributed to North Korea's Lazarus Group, which aims to generate revenue through cryptocurrency theft. Developers are advised to audit any projects run from unsolicited sources and to monitor specific domains associated with the attack.
The devil works hard but AI ripoffs work harder as Meccha Chameleon falls victim to hordes of copycats coming out of the woodwork
AppWizard
July 15, 2026

The devil works hard but AI ripoffs work harder as Meccha Chameleon falls victim to hordes of copycats coming out of the woodwork

Meccha Chameleon has experienced concept appropriation, with its unique gameplay mechanics being imitated by various games, including Scribble Hunt, which features a hide-and-seek format similar to Meccha Chameleon's chameleon-inspired gameplay. Other games, such as REPO, have also faced similar challenges with ripoffs on platforms like the Nintendo eShop. Developers from Peak have expressed frustration, preferring players to pirate their original game rather than engage with what they consider inferior imitations. The indie game community is increasingly concerned about the difficulty of standing out in a saturated market, where successful games attract opportunistic imitators. Meccha Chameleon has over 15 million players, highlighting the importance of supporting original creators in the gaming industry.
This is my 3rd time playing EVE Online's upcoming extraction shooter little brother, and it finally feels like it's coming together⁠—all without the ambitious crossover features it was made for
AppWizard
July 14, 2026

This is my 3rd time playing EVE Online’s upcoming extraction shooter little brother, and it finally feels like it’s coming together⁠—all without the ambitious crossover features it was made for

In 2013, CCP Games launched Dust 514, a first-person shooter for PlayStation 3 that aimed to complement EVE Online but struggled due to its exclusivity. The developer, now known as Fenris Creations, is revisiting this concept with EVE Vanguard, which combines extraction gameplay with cross-game integration. The game features engaging gameplay and allows players to deploy immediately from the "war barge" menu. Initial objectives focus on eliminating foes and looting, promoting exploration. The playtest revealed solid mechanics, satisfying weapon feedback, and a core gameplay loop of exploration, combat, and survival. Fenris aims to create an experience that players will miss if canceled, reminiscent of the nostalgia for Dust 514. Players can follow updates on Fenris' official website or Steam.
silver Android smartphone
Tech Optimizer
July 10, 2026

Hackers Use Fake VLC Executable and Malicious libvlc.dll to Deploy ValleyRAT

Cybercriminals are exploiting the VLC media player to install ValleyRAT, a remote access trojan, by embedding malware in a seemingly harmless file linked in phishing emails. The attack starts with an email that prompts the victim to download a ZIP archive containing a fake VLC executable and a malicious DLL named libvlc.dll. This method uses DLL sideloading to execute the malware under the guise of a legitimate application. Once executed, the malware establishes persistence by creating a registry entry and connects to a remote server to retrieve the final payload. ValleyRAT employs evasion tactics to avoid detection, including assessing system characteristics before executing harmful actions and using a fileless approach to deliver the payload directly into memory. Researchers have identified indicators of compromise, including specific SHA1 hashes and URLs associated with the malicious campaign.
Microsoft's new Windows 11 recovery tool is the ultimate Undo button
Winsage
July 10, 2026

Microsoft’s new Windows 11 recovery tool is the ultimate Undo button

On July 19, 2024, at 12:09 AM EDT, 8.5 million Windows PCs, including devices from half of the Fortune 500 companies and the leading U.S. cybersecurity agency, experienced a catastrophic failure due to the Blue Screen of Death, leading to reboot loops. IT teams had to physically access each machine to resolve the issue by removing a problematic CrowdStrike file. CrowdStrike released an automated remediation tool three days later, on July 22. Microsoft pledged to improve Windows' resilience, introducing Quick Machine Recovery nearly a year later. Microsoft unveiled a new recovery feature called Point-in-time Restore, which allows users to revert their PCs to a previous state when functioning correctly. This feature generates daily snapshots of the entire system using the Volume Shadow Copy Service, retaining the three most recent snapshots and consuming minimal disk space (typically 2% of the system drive). Users can access the restore point through the Windows Recovery Environment after three failed startups, with the restoration process taking 30 to 45 minutes. Point-in-time Restore differs from System Restore, which creates less comprehensive snapshots and preserves document files. Point-in-time Restore is automatically enabled for systems with at least 200 GB drives in retail or OEM editions of Windows Home or Pro, while it must be manually activated for smaller drives. In Windows 11 Enterprise edition, it is disabled by default and may require administrative approval to activate. The feature intelligently manages disk usage, discarding older snapshots as needed, but users must enter a BitLocker recovery key if their system drive is encrypted. Users are warned about the risk of losing unsaved work when applying a restore snapshot, and reversing the operation is not straightforward.
Echoes of Aincrad (PC) Review
AppWizard
July 9, 2026

Echoes of Aincrad (PC) Review

Echoes of Aincrad is an original game set in the world of Sword Art Online, allowing players to assume the role of a background character who starts as a beta tester. The game features a prologue where players form an alliance with a solo player named Ito to combat player killers. The main storyline, which takes about three hours to complete, involves navigating the dangers of a game where death in-game results in real-life consequences. Players create their own character and experience familiar story elements while uncovering new narratives. The gameplay includes a mix of quests and environmental puzzles, though it suffers from repetitiveness and underutilized expansive worlds. Combat is satisfactory, with various melee weapons and coordinated attacks with party characters. The game is compatible with VR for an immersive experience.
Search