NewApp Digest
search bot

web browsers

Mozilla accuses Microsoft of running the old browser wars playbook to lock in AI dominance through Windows
Winsage
April 13, 2026

Mozilla accuses Microsoft of running the old browser wars playbook to lock in AI dominance through Windows

Mozilla has accused Microsoft of using its dominance in the Windows operating system to marginalize competitors in the AI sector, particularly through the promotion of its Copilot feature. Mozilla claims that misleading update mechanisms are being used to push Copilot onto users and that system settings are being adjusted to hinder the performance of alternative browsers like Firefox. This situation is reminiscent of the 1990s browser wars when Microsoft bundled Internet Explorer with Windows to eliminate competition. In July 2025, Opera filed a formal antitrust complaint in Brazil against Microsoft, leading to an investigation into whether Microsoft was coercing hardware manufacturers to bundle Edge exclusively. A ruling against Microsoft could require a separation between the operating system and AI services. Microsoft's current strategy aims to control the AI inference layer, with each interaction through Copilot representing valuable data and monetization opportunities. Reports indicate that Microsoft is removing Copilot branding from standalone applications to further integrate it into the operating system. Despite Edge being the third most popular browser, Microsoft's tactics suggest a focus on securing AI infrastructure rather than just competing for browser market share. Regulatory scrutiny may increase due to ongoing antitrust challenges related to Microsoft's OpenAI investment and cloud AI bundling practices. The development of OEM relationships and potential resistance to Microsoft's requirements could significantly impact its integration strategy.
Slack Messenger: Revolutionizing Team Communication
AppWizard
April 6, 2026

Slack Messenger: Revolutionizing Team Communication

Slack Messenger is a cloud-based platform for workplace collaboration that enhances team communication through real-time messaging, file sharing, and workflow integrations. Since its launch in 2013, it has replaced traditional email chains with organized channels for discussions and direct messaging. Users can create dedicated channels for specific projects, utilize threaded replies for clarity, and send targeted notifications through mentions. Key features include an intuitive interface accessible on various devices, unlimited message history on paid plans, voice and video huddles, and support for over 2,600 applications like Google Workspace and Salesforce. Security features include data encryption and compliance with regulations such as GDPR and HIPAA. Slack is used across various sectors including project management, customer support, and engineering, and is widely adopted by companies like IBM, Shopify, and NASA. On a daily basis, teams use Slack for status updates, file sharing, and conducting polls. For larger organizations, it offers multi-workspace setups and analytics. A free tier is available for freelancers and small teams, while its mobile app facilitates coordination for gig economy workers. Slack operates in over 150 countries and supports multiple languages. The collaboration software market, valued at over a billion dollars, continues to grow, driven by hybrid work demands. Competitors include Microsoft Teams, Discord, and Mattermost, although Slack remains distinguished by its integrations. Slack is supported by AWS cloud infrastructure and boasts an uptime of 99.99%. Recent updates introduced AI features aimed at enhancing efficiency. Salesforce acquired Slack in 2020 for .7 billion, integrating it into its Customer 360 ecosystem while maintaining its standalone brand. Slack is publicly listed under the ISIN US79466L3024.
Bogus Avast website fakes virus scan, installs Venom Stealer instead
Tech Optimizer
March 27, 2026

Bogus Avast website fakes virus scan, installs Venom Stealer instead

A deceptive website impersonating Avast antivirus tricks users into downloading Venom Stealer malware, which steals passwords, session cookies, and cryptocurrency wallet information. The site conducts a fake virus scan, falsely reporting threats to encourage users to download a malicious file named Avastsystemcleaner.exe. This file mimics legitimate software and operates stealthily, targeting web browsers to harvest credentials and session cookies. It also captures screenshots and sends stolen data to the command-and-control domain app-metrics-cdn[.]com via unencrypted HTTP. The malware employs evasion techniques to avoid detection and is part of a long-standing cybercrime tactic that exploits user trust in security software. Indicators of compromise include the file hash SHA-256: ecbeaa13921dbad8028d29534c3878503f45a82a09cf27857fa4335bd1c9286d, the domain app-metrics-cdn[.]com, and the network indicator 104.21.14.89.
ClickFix Lures Power LeakNet’s Growing Ransomware Attack Chain
Tech Optimizer
March 19, 2026

ClickFix Lures Power LeakNet’s Growing Ransomware Attack Chain

The ransomware group LeakNet has evolved its tactics, increasing its average targets from three per month and shifting from purchasing stolen network access to launching its own campaigns. They now use deceptive error screens and a new tool that executes malicious code in a computer's memory. Their strategy includes ClickFix lures, which compromise legitimate websites to display fake security checks, tricking users into executing malicious commands. This method broadens their victim reach and reduces costs. The Deno loader, part of this strategy, collects machine information and retrieves additional malicious code without leaving standard files, making detection difficult. After infiltrating a network, LeakNet checks for active user credentials and uses PsExec for lateral movement, employing Amazon S3 buckets for payload staging and data exfiltration. Defenders are advised to monitor for suspicious behavior rather than just known malicious files, focusing on unusual web commands and unexpected cloud storage connections.
Microsoft: Windows 11 users can't access C: drive on some Samsung PCs
Winsage
March 14, 2026

Microsoft: Windows 11 users can’t access C: drive on some Samsung PCs

Microsoft is investigating an issue affecting some Samsung laptops running Windows 11, particularly after the February 2026 security updates, where users are losing access to their C: drive. This problem prevents them from launching essential applications and is reported to display an error message stating, "C: is not accessible – Access denied." The issue appears to be linked to specific Samsung software, with reports mainly coming from Brazil, Portugal, South Korea, and India, particularly involving the Samsung Galaxy Book 4. The problem is confined to Windows 11 versions 25H2 and 24H2. A workaround has been suggested that involves changing the ownership of the C: drive to the "Everyone" group, but this poses security risks, and users are advised to wait for an official fix from Microsoft.
Six Android Malware Families Target Pix Payments, Banking Apps, and Crypto Wallets
AppWizard
March 12, 2026

Six Android Malware Families Target Pix Payments, Banking Apps, and Crypto Wallets

Cybersecurity researchers have identified six new families of Android malware designed to extract sensitive data and facilitate financial fraud. Notable threats include: - PixRevolution: Targets Brazil's Pix payment platform, activates during Pix transfers, and uses real-time monitoring to intervene in transactions. Victims are tricked into installing malicious apps from counterfeit Google Play Store listings, which enable accessibility services for the malware to capture screens and overlay fake interfaces to reroute funds. - BeatBanker: Spreads through phishing attacks disguised as legitimate Google Play Store pages. It uses an inaudible audio loop for persistence, functions as a banking trojan, and includes a cryptocurrency miner. It creates deceptive overlays for platforms like Binance and Trust Wallet to divert funds and can monitor web browsers and execute remote commands. - TaxiSpy RAT: Exploits accessibility services to gather sensitive information such as SMS messages and call logs, targeting banking and cryptocurrency applications with overlays for credential theft. It employs advanced evasion techniques like native library encryption and real-time remote control. - Mirax: A private malware-as-a-service (MaaS) offering with a subscription model that provides tools for banking overlays and information gathering, including keystrokes and SMS. - Oblivion: Another Android RAT available at a competitive price, featuring capabilities to bypass security measures on various devices. - SURXRAT: Distributed through a Telegram-based MaaS ecosystem, it uses accessibility permissions for persistent control and communicates with a Firebase-based command-and-control infrastructure. Some samples incorporate a large language model component, indicating experimentation with AI by threat actors.
Search