wallets Archives

AppWizard

May 12, 2026

This devious Android malware has returned disguised as TikTok or streaming apps — and is now using blockchain to remain undetected

Researchers at ThreatFabric have identified a new variant of the TrickMo banking trojan, named TrickMo.C, targeting Android users in Europe since January 2026. TrickMo.C disguises itself as popular applications like TikTok and streaming services, using tactics such as phishing overlays to harvest login credentials and sensitive information. It can log keystrokes, record screens, livestream content, intercept SMS messages, suppress OTP notifications, modify the clipboard, filter notifications, and capture screenshots. The primary targets are in France, Italy, and Austria, allowing unauthorized access to bank accounts and cryptocurrency wallets. TrickMo.C distinguishes itself by using the TON network for communication, which enhances anonymity and complicates detection efforts.

Tech Optimizer

April 26, 2026

CanisterSprawl: pgserve Compromised on npm: Malicious Versions Harvest Credentials and Exfiltrate to a Decentralized ICP Canister

On April 21, 2026, compromised versions of pgserve (1.1.11, 1.1.12, and 1.1.13) were published on npm, containing a 1,143-line credential-harvesting script that executes during the postinstall phase of npm install. The malware functions as a supply-chain worm, reinjecting itself into other packages if it finds an npm publish token. Stolen credentials are encrypted using RSA-4096 and AES-256 and exfiltrated to a decentralized Internet Computer Protocol (ICP) canister. The last legitimate release was v1.1.10, published on April 17, 2026. The malware was detected by StepSecurity AI Package Analyst and Harden Runner, which flagged the compromised versions as Critical / Rejected and confirmed live exfiltration during analysis. The injected script performs operations such as harvesting environment variables, collecting filesystem secrets, encrypting payloads, and propagating to other npm packages and Python packages if a PyPI token is detected. The exfiltration domains have been added to a global block list.

AppWizard

April 23, 2026

Binance’s Android app is quietly running TikTok and WeChat SDKs alongside 13 other trackers

Security researchers have found that the Binance Android app includes SDKs from ByteDance and Tencent, along with 13 additional third-party trackers. This raises privacy concerns for users, as the TikTok SDK collects device fingerprints, behavioral signals, and potentially clipboard data, while the WeChat SDK adds functionalities not necessary for a financial trading platform. The incorporation of these SDKs could expose sensitive financial information. Under EU GDPR and FTC regulations, undisclosed telemetry in financial apps may be considered deceptive trade practices, potentially leading to regulatory repercussions for Binance. Users are advised to revoke permissions from the app or switch to the browser-based platform. The situation could prompt regulatory scrutiny and audits of cryptocurrency asset management apps.

AppWizard

April 22, 2026

I’m sick of breaking the bank buying AAA games, so I’ve hunted down overlooked alternatives to 2026’s biggest games

Rockstar Games has invested over a billion dollars into the development of Grand Theft Auto 6. Alternatives to this game include Sleeping Dogs, which offers an open-world crime experience. Capcom's Resident Evil Requiem celebrates three decades of survival horror, while Cozy Pal Games provides a budget-friendly horror adventure. Pokémon Pokopia has gained recent success, with alternatives like Before the Green Moon offering a nostalgic farming sim experience. Forza Horizon 6 promises stunning visuals, and Wreckreation serves as a budget-friendly racing alternative. Death Stranding 2 is noted for its innovative gameplay, with Clone Escape providing a unique survival experience.

AppWizard

April 22, 2026

Latest Fanatical bundle is offering 17 Steam Deck-friendly games worth $333 for only $42

The Fanatical Exodus bundle offers a customizable selection of 17 Steam Deck-compatible games at discounted prices. Users can choose their desired titles, with costs decreasing per game as more are selected: .75 for two games, .65 for three, .50 for four or more, and [openai_gpt model="gpt-4o-mini" prompt="Summarize the content and extract only the fact described in the text bellow. The summary shall NOT include a title, introduction and conclusion. Text: For Steam Deck enthusiasts seeking to expand their gaming library without straining their wallets, the latest offering from Fanatical, known as the Exodus bundle, presents an enticing opportunity. This bundle features a diverse assortment of action, adventure, strategy, and arcade games, all available at remarkably low prices. Prices and savings are subject to change. Click through to get the current deal prices. What does the bundle offer? The standout feature of this bundle is its customizable nature, allowing gamers to tailor their purchases to their preferences. Instead of paying for a pre-selected package, users can choose only the titles they desire, which in turn affects the overall cost. For example, selecting two games will set you back .75 each. If you opt for three, the price drops to .65 per title. The savings continue to grow, with four or more games costing just .50 each. Should you decide to indulge in the entire collection of 17 Steam Deck-compatible games, the total comes to a mere .46, representing an impressive 87% discount from the original value of 2.83. Below is a comprehensive list of the games included in Fanatical’s Exodus bundle, along with their compatibility status for the Steam Deck: Game Steam Deck compatibility Original price Disco Elysium – The Final Cut Verified .99 Agatha Christie – Murder on the Orient Express Playable .99 Asgard’s Fall – Viking Survivors Playable .99 Oblivion Override Playable .99 Beyond a Steel Sky Verified .99 Love is… Verified .99 Decline’s Drops Verified .99 Souldiers Verified .99 Death Relives Playable .99 King of Retail Playable .99 KitHack Model Club Playable .99 South of the Circle Verified .99 Charrua Soccer – Pro Edition Unsupported but reportedly runs fine out of the box .99 Heretic’s Fork Playable .99 Fight of Steel: Infinity Warrior Playable .99 Zombasite Playable .99 Fight School Simulator Playable .99 This collection is particularly noteworthy, featuring acclaimed titles such as Disco Elysium. For those looking for additional savings, the Humble Sharp Shooters bundle is also worth exploring, offering seven Steam Deck-friendly games valued at 5 for just ." max_tokens="3500" temperature="0.3" top_p="1.0" best_of="1" presence_penalty="0.1" frequency_penalty="frequency_penalty"].46 for the entire collection, which represents an 87% discount from the original total of .83. The bundle includes games such as Disco Elysium – The Final Cut (Verified), Agatha Christie – Murder on the Orient Express (Playable), and Beyond a Steel Sky (Verified), among others. The original price for each game is .99. Additionally, there is a mention of the Humble Sharp Shooters bundle, which offers seven Steam Deck-friendly games valued at for a lower price.

AppWizard

April 9, 2026

Intent redirection vulnerability in third-party SDK exposed millions of Android wallets to potential risk

Version 5.2.1 of the EngageSDK was released to address security vulnerabilities related to third-party SDKs, particularly affecting digital asset management applications. Although no exploitation of this vulnerability has been reported, developers are urged to upgrade to the latest version. The Android operating system's security model provides some protections against these vulnerabilities, and the Android team has updated user protections during the transition to the secure version. The vulnerability, classified as severe, allows unauthorized access to protected components and sensitive data through intent redirection. Affected applications, particularly in the cryptocurrency and digital wallet sectors, account for over 30 million installations. The vulnerability was first identified in version 4.5.4 of the EngageLab SDK, reported in April 2025, and was addressed in version 5.2.1 released on November 3, 2025, which set the vulnerable activity to non-exported. Developers are advised to regularly review their Android manifests and upgrade to the latest SDK version to maintain application security.

AppWizard

April 4, 2026

Best Free PC Games You Should Be Playing in 2026

The costs associated with PC gaming are rising, with new GPUs priced like used cars and AAA games exceeding high prices. However, there are many high-quality free games available. Marvel Rivals is a team-based hero shooter featuring characters from the Marvel universe, offering tactical gameplay and vibrant art. Valorant, developed by Riot Games, blends tactical shooting with character-specific abilities and remains popular five years after its launch, emphasizing team composition and skill. Delta Force has returned as a free-to-play tactical shooter, combining expansive battlefield modes with extraction gameplay, satisfying gunplay, and a robust player base. Wuthering Waves is an open-world action RPG with an anime art style and dynamic combat, allowing players to enjoy the game without spending money despite a gacha system. Dota 2, launched in 2013, remains one of the most played games on Steam, known for its depth, over 120 unique heroes, and a steep learning curve, along with a large esports scene. There are many more free PC games available across platforms like Steam and Epic, with new titles launching regularly and opportunities for players to discover quality games.

Tech Optimizer

March 30, 2026

Fake Cloudflare CAPTCHA Pages Spread Infiniti Stealer On macOS

Security researchers have identified a new macOS information stealer called Infiniti Stealer, which extracts sensitive information from Mac users using a social engineering tactic known as ClickFix. This method involves a counterfeit Cloudflare human verification page that prompts users to enter a command in their Mac Terminal, allowing the malware to bypass security measures. The infection process consists of three stages: 1. A Bash dropper script downloads and decodes a hidden payload. 2. A Nuitka loader, designed for Apple Silicon Macs, complicates detection by compiling Python code into a native application. 3. The final payload, Infiniti Stealer, harvests personal data such as browser passwords, macOS Keychain entries, cryptocurrency wallets, and captures screenshots. Indicators of Compromise (IOCs) associated with Infiniti Stealer include: - MD5 Dropper: da73e42d1f9746065f061a6e85e28f0c - SHA256 Stage-3: 1e63be724bf651bb17bcf181d11bacfabef6a6360dcdfda945d6389e80f2b958 - C2 Domain: update-check[.]com - C2 URL: https://update-check[.]com/m/7d8df27d95d9 - Panel: Infiniti-stealer[.]com - Packer Magic: 4b 41 59 28 b5 2f fd (KAY + zstd) - Debug Log: /tmp/.bs_debug.log

Tech Optimizer

March 27, 2026

Bogus Avast website fakes virus scan, installs Venom Stealer instead

A deceptive website impersonating Avast antivirus tricks users into downloading Venom Stealer malware, which steals passwords, session cookies, and cryptocurrency wallet information. The site conducts a fake virus scan, falsely reporting threats to encourage users to download a malicious file named Avastsystemcleaner.exe. This file mimics legitimate software and operates stealthily, targeting web browsers to harvest credentials and session cookies. It also captures screenshots and sends stolen data to the command-and-control domain app-metrics-cdn[.]com via unencrypted HTTP. The malware employs evasion techniques to avoid detection and is part of a long-standing cybercrime tactic that exploits user trust in security software. Indicators of compromise include the file hash SHA-256: ecbeaa13921dbad8028d29534c3878503f45a82a09cf27857fa4335bd1c9286d, the domain app-metrics-cdn[.]com, and the network indicator 104.21.14.89.

BetaBeacon

March 19, 2026

Best Mobile RPG Games 2026: Quest for Glory in Android RPG Realms And iPhone

The most popular mobile RPG games in 2026 are "Genshin Impact" and "Honkai: Star Rail," which dominate the app store charts and offer deep stories, smooth controls, and regular updates on Android and iPhone.