A 2D platformer packed with monsters and everyone's favorite gold.
Some people lose their composure when they see gold. The boy who suffers from the gold rush will not give up on anything. All gold, his own or someone else's, he will take by force. Loot gold from monsters? Yes Easy!
Golden Boy is a 2D platformer packed with monsters and everyone's favorite gold. You need to help the boy collect all the gold in the levels, as well as get rid of annoying bubbles and bats. Sleight of hand and more!

Features of the game:
- Beautiful Pixel Art
- Nice musical accompaniment
- Variety of levels
- Complexity

System Requirements:
OS: Windows; Processor: Intel Celeron 1800 MHz; Memory: 512 MB RAM; Graphics: Intel HD Graphics; Storage: 11 MB available space; Sound Card: DirectSound Compatible; Additional Notes: Keyboard

Homepage:
https://store.steampowered.com/app/1682890/Golden_Boy/

GP:
https://game.giveawayoftheday.com/golden-boy/

Startup Timer is a freeware app that measures exactly how long it takes for Windows to fully boot and which apps make your Windows startup slower.
To make your Windows start faster, you need to know which apps are slowing down the startup the most. Startup Timer allows you to do just that: benchmark Windows start time and detect which software are making your computer start slow.

https://startuptimer.com/

Key Features

• Benchmark Windows startup time to know exactly how long it takes for your computer to fully start up.
  
• Measures which system processes and installed third party apps make your Windows startup slower.
  
• Supports Windows Dark Mode.
  
• Supports comparing your results with other users, so you will know whether your startup time is normal. See the Leaderboard below.
  
• Freeware and lightweight. No bells and whistles. No nonsense.
  

Compared with the right-click menu on Windows, there appear to be some common functionalities missing from the Mac right-click option, such as new file creation and app uninstallation. If you'd like to customize your Mac right-click menu by adding some useful shortcuts to make it similar to the one on Windows, you can try iBoysoft MagicMenu.

iBoysoft MagicMenu is a Mac right-click menu enhancer that permits you to add different shortcuts, including new file creation, file transfer, quick access, app uninstalling, screen capture, and more to your right-click context menu, which greatly improves your work efficiency and gives you a cleaner desktop.

Main Functions
1. Right-click to create different kinds of files you need, including doc, docx, xls, xlsx, txt, pdf, ppt, Keynote, Pages, Markdown, and Numbers.
2. Right-click to rapidly access different items, be it an app, a work file, or a webpage.
3. Right-click to quickly move/copy files to a target location.
4. Uninstall the undesirable programs entirely.
5. Support duplicate file deletion, similar photo deletion, file compression, screen capture, screen recording, launching with Terminal, hiding/unhiding all items, etc.
...

Download iBoysoft MagicMenu: https://iboysoft.com/magic-menu/

Attached Files

Thumbnail(s)
   

Click on a huge ball of different colors, while earning money.
Mini Super Cliker Ball is a game where you have to click on a huge ball of different colors, while earning money to tart them in a special store for you, and you could develop and get better and better! 

System Requirements:
Windows

Homepage:
https://anton-malezhik.itch.io/mini-super-cliker-ball

GP:
https://game.giveawayoftheday.com/mini-s...iker-ball/

Quote:An update to System Examiner is available!

System Examiner is one of the new tools within jv16 PowerTools, and you can download its standalone version from here: https://lnkd.in/d8e3nZqG

As you can see, we're currently working on many different things. But, this doesn’t mean that our focus is away from developing jv16 PowerTools.

On the contrary, this work directly benefits all jv16 PowerTools users. By developing new standalone programs, we aim to bring new users for jv16 PowerTools as well. The more users we have, the better chance we have to keep jv16 PowerTools alive. And more specifically in this case, the improvements in System Examiner will be used in the Software Uninstaller tool in jv16 PowerTools.

PS: an updated version with major improvements and new features on jv16 PowerTools will be released next week

A slow-running computer can be a major headache, affecting your productivity and causing unnecessary stress.

But before frustration kicks in and makes you run to buy a new machine, there are several simple and effective steps you can take to speed up your current PC. From freeing up space on your hard drive to updating drivers, these tips can help revive your sluggish computer and get you back to work in no time.

And while some years ago this seemed a job only an IT specialist could do, these days Windows makes it really easy for anyone to manage some simple settings that can make a lot of difference.

Where to start?

Here are 10 tips to try on Windows 11 or Windows 10!

1. Clear out space

2. Manage your apps

3. Clean up your storage

4. Manage the apps you need at startup

5. Adjust your Privacy settings

6. Manage energy performance

7. Disable visual effects

8. Update your PC

9. Check for malware

10. Reset your PC

Finally, a bonus tip! Don’t let your PC run for days non-stop just because you think it will take a frustratingly long time to start up. Instead, you can let it go to Sleep instead of Shut down, but make sure to restart your PC every two or three days. Contrary to what you may think, turning off the computer does not close all processes running, while restarting your computer will make it do all necessary installations and updates and close all apps.


Read more Here

Vovsoft Window Resizer is a utility that allows you to resize any window to an exact, predefined size. This is extremely useful when designing web pages, as it allows you to see how the page will look when viewed at a smaller size. The utility is also handy when compiling screenshots for documentation, using Window Resizer allows you to easily maintain the same window size across screen grabs.

If you are looking for a program resizer software, this utility is able to resize programs by identifying the window title of any currently running application. This software is not limited to just resizing browsers, unlike browser extensions. It has the capability to resize all programs, including Word, Excel, PowerPoint and browsers such as Chrome, Firefox, Internet Explorer, Edge.

When you open the program, it shows the list of all apps running on your Windows PC. You can select any app and specify the size at the bottom section and click on the “Apply” button. Additionally, you can save the current positions (width, height, left, top) as CSV file and “Load and Apply” later. All the running programs will be resized depending on the values in the CSV file. This program can get and set exact window size values by taking non-client areas into account. It can utilize Desktop Window Manager (DWM).

GP:
https://sharewareonsale.com/s/free-windo...0-discount

Download (Registration Built-in)
http://downloads.sharewareonsale.com/fil...esizer.exe

Directions:
The download link for Windows Resizer is given to you above. The download is a SharewareOnSale exclusive installer with registration built-in. Download and install Windows Resizer. After install, run Windows Resizer and enjoy! There is no need to register it, because we register it for you automatically when you download from us.

Terms and Conditions:

• This is a 1-computer lifetime license, for noncommercial use
  
• No free updates; if you update the giveaway, it may become unregistered
  
• No free tech support
  
• You must download and install the giveaway before this offer has ended
  
• May not be resold
  

• Developed by Vovsoft
  
• Version is v2.5
  
• Download size is 2.6 MB
  
• Supports Windows 7, 8/8.1, 10, and 11 (32-bit and 64-bit)
  

Win one of the 5 licenses for AffSync!
The Largest Database of Top Quality Affiliate Programs on the Web! AffSync is a six-in-one affiliate research tool suite built for bloggers, affiliate marketers, Youtubers, and influencers. Find affiliate programs, products, niche ideas, guest blog opportunities, and more from one dashboard. Our tools also allow you to search products by key metrics such as EPC, commission rates, conversion rates, etc. The data is updated frequently, and new products/programs are also added regularly.

System Requirements:
Windows/ Mac/ Linux with Browsers (this is online service)

Homepage:
https://www.affsync.com/

Licence details:
Lifetime

Enter Here:
https://www.giveawayoftheday.com/affsync/

(7 Days remaining from now!)

Shoot back from enemies in the form of vegetables!
Vegetable chaos has awakened and now each of the vegetables is eager to devour the kitchen world and get to the bread, which will fight off the crazy vegetables and save its existence.

Veggies War - Top Down shooter game in which you have to shoot back from enemies in the form of vegetables, under your control a piece of bread, armed with a special gun and which from room to room learns new abilities!

Game Features:
- Difficulty
- Pixel Art
- Random Rooms

System Requirements:
OS: Windows (Requires a 64-bit processor and operating system); Processor: Intel Celeron 1800 MHz; Memory: 1 GB RAM; Graphics: Intel HD Graphics; Storage: 100 MB available space; Sound Card: DirectSound Compatible

Homepage:
https://store.steampowered.com/app/2091280/Veggies_War/

GP:
https://game.giveawayoftheday.com/veggies-war/

Convert CSV files to VCF vCard file. VCF files store information regarding your contacts, enclosing vCards (Virtual Business Cards). Such files are used to export and import contacts from and to mobile phones (Android or iPhone) and Microsoft Outlook. You just have to select the input Excel file and choose to export it to VCF format, all with just a few clicks.
internet in any case.

System Requirements:
Windows 11, Windows 10, Windows 8/8.1, Windows 7, Windows Vista, Windows XP (32-bit & 64-bit)

Homepage:
https://vovsoft.com/

GP:
https://vovsoft.com/giveaway/free-csv-to...rter-2023/
OR
License Key: TDJCV-549XV-6SEB8
Product Name: CSV to VCF Converter v2.1
Product Website: https://vovsoft.com/software/csv-to-vcf-converter/

► Campaign Start: April 23, 2023
► Campaign End: April 30, 2023

PlayerFab Amazon Player is a full-featured and professional Amazon Video Playing Media Player that allows you to play Amazon online videos whenever and wherever you want.This Amazon player supports you to play movies and TV shows from all regional prime video sites, like US, JP, DE, UK and more.

System Requirements:
Windows 11/10/8/8.1/7

Home:
https://dvdfab.at/amazon-player.htm

Promo (07/2023)
https://dvdfab.at/chip-giveaway.htm

Go to the AudFree Software website to find its Spring Sales and get best discounts for its all music converters for Spotify, Tidal, Apple Music, Amazon, etc. 

Here is the entry page: https://www.audfree.com/promotion/spring-sales/

Ater that you can listen to Spotify, Tidal, Apple Music, Amazon Music anywhere. 


https://www.audfree.com/promotion/spring...anner.webp

Remove iCloud activation lock easily and safely.
Joyoshare Activation Unlocker for Windows is a great tool for you to remove iCloud activation lock from iPhone, iPad and iPod touch. It can bypass the activation screen on your device without using Apple ID and password. This software functions well to get rid of activation lock no matter which situation you are in, like forgotten iCloud account, iPhone is in lost mode, informed with ‘unable to activate’ errors, failed to activate a second-hand device locked with its previous owner’s Apple ID, etc. Best of all, it allows you to remove iCloud lock for unlimited times.

Key Features:
- Bypass iCloud activation lock for unlimited times.
- Remove iCloud account without Apple ID & password.
- Support various lockup situations.
- Unlock Apple ID on iPhone, iPad and iPod touch.

System Requirements:
Windows 7/ 8/ 10/ 11; CPU: 1GHz (x32/x64) or above; RAM: 1 GB or more; Hard Disk Space: 512MB or above; iOS Version: iOS 12.0 - iOS 14.8

Homepage:
https://www.joyoshare.com/activation-unlocker/

Giveaway Version :
1.1.0

License Details:
6 month license

GP:
https://www.giveawayoftheday.com/joyosha...-unlocker/

Registration code:
2a108b4f0b6708ca8d2cc1af22e8f6510d4b301aff

Terms and conditions:
Please note that the software you download and install during the Giveaway period comes with the following important limitations:

1) No free technical support
2) No free upgrades to future versions
3) Strictly non-commercial usage

https://www.bleepingcomputer.com/news/se...are-gangs/      Google ads push BumbleBee malware used by ransomware gangs
By Bill Toulas
April 22, 2023 10:08 AM    The enterprise-targeting Bumblebee malware is distributed through Google Ads and SEO poisoning that promote popular software like Zoom, Cisco AnyConnect, ChatGPT, and Citrix Workspace.

Bumblebee is a malware loader discovered in April 2022, thought to have been developed by the Conti team as a replacement for the BazarLoader backdoor, used for gaining initial access to networks and conducting ransomware attacks.

In September 2022, a new version of the malware loader was observed in the wild, featuring a stealthier attack chain that used the PowerSploit framework for reflective DLL injection into memory.

Researchers at Secureworks have recently discovered a new campaign using Google advertisements that promote trojanized versions of popular apps to deliver the malware loader to unsuspecting victims.

Hiding in popular apps
One of the campaigns seen by SecureWorks started with a Google ad that promoted a fake Cisco AnyConnect Secure Mobility Client download page created on February 16, 2023, and hosted on an "appcisco[.]com" domain.

"An infection chain that began with a malicious Google Ad sent the user to this fake download page via a compromised WordPress site," explains SecureWorks' report.

This fake landing page promoted a trojanized MSI installer named "cisco-anyconnect-4_9_0195.msi" that installs the BumbleBee malware.

Upon execution, a copy of the legitimate program installer and a deceptively named (cisco2.ps1) PowerShell script is copied to the user's computer.  The CiscoSetup.exe is the legitimate installer for AnyConnect, installing the application on the device to avoid suspicion.

However, the PowerScrip script installs the BumbleBee malware and conducts malicious activity on the compromised device.

"The PowerShell script contains a selection of renamed functions copied from the PowerSploit ReflectivePEInjection.ps1 script," explains Secureworks.

"It also contains an encoded Bumblebee malware payload that it reflectively loads into memory."

This means that Bumblebee still uses the same post-exploitation framework module to load the malware into memory without raising any alarms from existing antivirus products.

Secureworks found other software packages with similarly named file pairs like ZoomInstaller.exe and zoom.ps1, ChatGPT.msi and chch.ps1 and CitrixWorkspaceApp.exe and citrix.ps1.

A path to ransomware
Considering that the trojanized software is targeting corporate users, infected devices make candidates for the beginning of ransomware attacks.

Secureworks examined one of the recent Bumblebee attacks closely. They found that the threat actor leveraged their access to the compromised system to move laterally in the network approximately three hours after the initial infection.

The tools the attackers deployed on the breached environment include the Cobalt Strike pen-test suite, the AnyDesk and DameWare remote access tools, network scanning utilities, an AD database dumper, and a Kerberos credentials stealer.

This arsenal creates an attack profile that makes it very likely that the malware operators are interested in identifying accessible network points, pivoting to other machines, exfiltrating data, and eventually deploying ransomware.

https://www.mcafee.com/blogs/other-blogs...66031401=1      Goldoson: Privacy-invasive and Clicker Android Adware found in popular apps in South Korea      McAfee Labs
APR 12, 2023

8 MIN READ


Authored by SangRyol Ryu

McAfee’s Mobile Research Team discovered a software library we’ve named Goldoson, which collects lists of applications installed, and a history of Wi-Fi and Bluetooth devices information, including nearby GPS locations. Moreover, the library is armed with the functionality to perform ad fraud by clicking advertisements in the background without the user’s consent. The research team has found more than 60 applications containing this third-party malicious library, with more than 100 million downloads confirmed in the ONE store and Google Play app download markets in South Korea. While the malicious library was made by someone else, not the app developers, the risk to installers of the apps remains.

McAfee Mobile Security detects this threat as Android/Goldoson and protects customers from this and many other mobile threats. McAfee is a member of the App Defense Alliance focused on protecting users by preventing threats from reaching their devices and improving app quality across the ecosystem. We reported the discovered apps to Google, which took prompt action. Google has reportedly notified the developers that their apps are in violation of Google Play policies and fixes are needed to reach compliance. Some apps were removed from Google Play while others were updated by the official developers. Users are encouraged to update the apps to the latest version to remove the identified threat from their devices.


Top 9 applications previously infected by Goldoson on Google Play

How does it affect users?
The Goldoson library registers the device and gets remote configurations at the same time the app runs. The library name and the remote server domain varies with each application, and it is obfuscated. The name Goldoson is after the first found domain name.


Mutating class names
Remote configuration contains the parameters for each of functionalities and it specifies how often it runs the components. Based on the parameters, the library periodically checks, pulls device information, and sends them to the remote servers. The tags such as ‘ads_enable’ or ‘collect_enable’ indicates each functionality to work or not while other parameters define conditions and availability.



A response of remote configuration

The library includes the ability to load web pages without user awareness. The functionality may be abused to load ads for financial profit. Technically, the library loads HTML code and injects it into a customized and hidden WebView and it produces hidden traffic by visiting the URLs recursively.


Pages loaded without user perception
Collected data is sent out periodically every two days but the cycle is subject to change by the remote configuration. The information contains some sensitive data including the list of installed applications, location history, MAC address of Bluetooth and Wi-Fi nearby, and more. This may allow individuals to be identified when the data is combined. The following tables show the data observed on our test device.


Collected Data sent out in JSON format
Google Play considers the list of installed apps to be personal and sensitive user data and requires a special permission declaration to get it. Users with Android 11 and above are more protected against apps attempting to gather all installed apps. However, even with the recent version of Android, we found that around 10% of the apps with Goldoson have the permission “QUERY_ALL_PACKAGES” that allows them to access app information.

Likewise, with Android 6.0 or higher, users may be asked for permissions such as Location, Storage, or Camera at runtime. If user allows the location permission, the app can access not only GPS data but also Wi-Fi and Bluetooth device information nearby. Based on BSSID (Basic Service Set Identifier) and RSSI (Received Signal Strength Indicator), the application can determine the location of the device more accurately than GPS, especially indoors.


A demo of runtime permission request

Where do the apps come from?
The infected applications come from various Android application stores. More than 100 million downloads have been tracked through Google Play. After that, ONE store, Korea’s leading app store, follows with about 8 million installations.

Conclusion
As applications continue to scale in size and leverage additional external libraries, it is important to understand their behavior. App developers should be upfront about libraries used and take precautions to protect users’ information. McAfee Mobile Security products can also help detect threats and protect you from not only malware but also unwanted programs. For more information, visit our McAfee Mobile Security.

Identified Apps and Goldoson Domains
Domains
bhuroid.com
enestcon.com
htyyed.com
discess.net
gadlito.com
gerfane.com
visceun.com
onanico.net
methinno.net
goldoson.net
dalefs.com
openwor.com
thervide.net
soildonutkiel.com
treffaas.com
sorrowdeepkold.com
hjorsjopa.com
dggerys.com
ridinra.com
necktro.com
fuerob.com
phyerh.net
ojiskorp.net
rouperdo.net
tiffyre.net
superdonaldkood.com
soridok2kpop.com
List of Apps and Current Status
Package Name Application Name GooglePlay Downloads  GP
Status
com.lottemembers.android L.POINT with L.PAY 10M+ Updated*
com.Monthly23.SwipeBrickBreaker Swipe Brick Breaker 10M+ Removed**
com.realbyteapps.moneymanagerfree Money Manager Expense & Budget 10M+ Updated*
com.skt.tmap.ku TMAP – 대리,주차,전기차 충전,킥보 … 10M+ Updated*
kr.co.lottecinema.lcm 롯데시네마 10M+ Updated*
com.ktmusic.geniemusic 지니뮤직 – genie 10M+ Updated*
com.cultureland.ver2 컬쳐랜드[컬쳐캐쉬] 5M+ Updated*
com.gretech.gomplayerko GOM Player 5M+ Updated*
com.megabox.mop 메가박스(Megabox) 5M+ Removed**
kr.co.psynet LIVE Score, Real-Time Score 5M+ Updated*
sixclk.newpiki Pikicast 5M+ Removed**
com.appsnine.compass Compass 9: Smart Compass 1M+ Removed**
com.gomtv.gomaudio GOM Audio – Music, Sync lyrics 1M+ Updated*
com.gretech.gomtv 곰TV – All About Video 1M+ Updated*
com.guninnuri.guninday 전역일 계산기 디데이 곰신톡–군인 … 1M+ Updated*
com.itemmania.imiapp  아이템매니아 – 게임 아이템 거래 … 1M+ Removed**
com.lotteworld.android.lottemagicpass LOTTE WORLD Magicpass 1M+ Updated*
com.Monthly23.BounceBrickBreaker Bounce Brick Breaker 1M+ Removed**
com.Monthly23.InfiniteSlice Infinite Slice 1M+ Removed**
com.pump.noraebang 나홀로 노래방–쉽게 찾아 이용하는 … 1M+ Updated*
com.somcloud.somnote SomNote – Beautiful note app 1M+ Removed**
com.whitecrow.metroid Korea Subway Info : Metroid 1M+ Updated*
kr.co.GoodTVBible GOODTV다번역성경찬송 1M+ Removed**
kr.co.happymobile.happyscreen 해피스크린 – 해피포인트를 모으 … 1M+ Updated*
kr.co.rinasoft.howuse UBhind: Mobile Tracker Manager 1M+ Removed**
mafu.driving.free 스피드 운전면허 필기시험 … 1M+ Removed**
com.wtwoo.girlsinger.worldcup 이상형 월드컵 500K+ Updated*
kr.ac.fspmobile.cu CU편의점택배 500K+ Removed**
com.appsnine.audiorecorder 스마트 녹음기 : 음성 녹음기 100K+ Removed**
com.camera.catmera 캣메라 [순정 무음카메라] 100K+ Removed**
com.cultureland.plus 컬쳐플러스:컬쳐랜드 혜택 더하기 … 100K+ Updated*
com.dkworks.simple_air 창문닫아요(미세/초미세먼지/WHO … 100K+ Removed**
com.lotteworld.ticket.seoulsky 롯데월드타워 서울스카이 100K+ Updated*
com.Monthly23.LevelUpSnakeBall Snake Ball Lover 100K+ Removed**
com.nmp.playgeto 게토(geto) – PC방 게이머 필수 앱 100K+ Removed**
com.note.app.memorymemo 기억메모 – 심플해서 더 좋은 메모장 100K+ Removed**
com.player.pb.stream 풀빵 : 광고 없는 유튜브 영상 … 100K+ Removed**
com.realbyteapps.moneya Money Manager (Remove Ads) 100K+ Updated*
com.wishpoke.fanciticon Inssaticon – Cute Emoticons, K 100K+ Removed**
marifish.elder815.ecloud 클라우드런처 100K+ Updated*
com.dtryx.scinema 작은영화관 50K+ Updated*
com.kcld.ticketoffice 매표소–뮤지컬문화공연 예매& … 50K+ Updated*
com.lotteworld.ticket.aquarium 롯데월드 아쿠아리움 50K+ Updated*
com.lotteworld.ticket.waterpark 롯데 워터파크 50K+ Updated*
com.skt.skaf.l001mtm091 T map for KT, LGU+ 50K+ Removed**
org.howcompany.randomnumber 숫자 뽑기 50K+ Updated*
com.aog.loader 로더(Loader) – 효과음 다운로드 앱 10K+ Removed**
com.gomtv.gomaudio.pro GOM Audio Plus – Music, Sync l 10K+ Updated*
com.NineGames.SwipeBrickBreaker2 Swipe Brick Breaker 2 10K+ Removed**
com.notice.safehome 안심해 – 안심귀가 프로젝트 10K+ Removed**
kr.thepay.chuncheon 불러봄내 – 춘천시민을 위한 공공  … 10K+ Removed**
com.curation.fantaholic 판타홀릭 – 아이돌 SNS 앱 5K+ Removed**
com.dtryx.cinecube 씨네큐브 5K+ Updated*
com.p2e.tia.tnt TNT 5K+ Removed**
com.health.bestcare 베스트케어–위험한 전자기장, … 1K+ Removed**
com.ninegames.solitaire InfinitySolitaire 1K+ Removed**
com.notice.newsafe 안심해 : 안심지도 1K+ Removed**
com.notii.cashnote 노티아이 for 소상공인 1K+ Removed**
com.tdi.dataone TDI News – 최초 데이터 뉴스 앱 … 1K+ Removed**
com.ting.eyesting 눈팅 – 여자들의 커뮤니티 500+ Removed**
com.ting.tingsearch 팅서치 TingSearch 50+ Removed**
com.celeb.tube.krieshachu 츄스틱 : 크리샤츄 Fantastic 50+ Removed**
com.player.yeonhagoogokka 연하구곡 10+ Removed**
* Updated means that the recent application on Google Play does not contain the malicious library.

** Removed means the application is not available on Google Play as of the time of posting.

https://www.mcafee.com/en-us/consumer-co...66451c8a46      McAfee Extends Partnership with Samsung to Continue Providing Online Protection to Samsung Customers



Apr 11, 2023 -

The consumer electronics giant continues to partner with McAfee to power protection against malware for smartphones, tablets and PCs

SAN JOSE, Calif.—(BUSINESS WIRE)— Today, McAfee Corp., a global leader in online protection, announced the extension of its nine-year partnership with Samsung to protect consumers’ personal data and information from online threats.

Through this partnership, Samsung smartphones, including the new Galaxy S23 Ultra, Galaxy S23+ and Galaxy S23, as well as the Galaxy Book3 series, now come pre-installed with antivirus protection powered by McAfee. In addition to smartphones, the partnership expands to better protect Samsung tablets and PCs.

“When purchasing the latest Samsung product, the last thing users want to think about is its security,” said Gagan Singh, Chief Operating Officer at McAfee. “Consumers should be able to enjoy what the internet has to offer, from banking to browsing social media, with the benefit of protections against potential risks online. Our almost decade-long partnership with Samsung extends our award-winning online protection to Samsung’s customers and advances our mission to empower consumers to live their lives online with confidence.”

With 537 new and unique threats discovered every minute, according to McAfee Labs, it’s more important than ever that consumers take control of their digital lives. By choosing Samsung devices powered by McAfee’s award-winning antivirus software, consumers are provided easy and straightforward access to robust online protection that will help keep their personal information safe, which can reduce the risk of identity theft.

Galaxy S23 Ultra, Galaxy S23+, Galaxy S23 and the Galaxy Book3 series all now come with McAfee security solutions and are widely available.

About McAfee
McAfee Corp. is a global leader in online protection for consumers. Focused on protecting people, not just devices, McAfee’s consumer solutions adapt to users’ needs in an always online world, empowering them to live securely through integrated, intuitive solutions that protect their families and communities with the right security at the right moment. For more information, please visit https://www.mcafee.com.


Media:
McAfeePR@webershandwick.com

Source: McAfee Corp.

https://www.bleepingcomputer.com/news/se...-software/    Ransomware gangs abuse Process Explorer driver to kill security software
By Sergiu Gatlan
April 19, 2023 01:46 PM      Threat actors use a new hacking tool dubbed AuKill to disable Endpoint Detection & Response (EDR) Software on targets' systems before deploying backdoors and ransomware in Bring Your Own Vulnerable Driver (BYOVD) attacks.

In such attacks, malicious actors drop legitimate drivers signed with a valid certificate and capable of running with kernel privileges on the victims' devices to disable security solutions and take over the system.

This technique is popular among various threat actors, from state-backed hacking groups to financially-motivated ransomware gangs.

The AuKill malware, first spotted by Sophos X-Ops security researchers, drops a vulnerable Windows driver (procexp.sys) next to the one used by Microsoft's Process Explorer v16.32. This is a very popular and legitimate utility that helps collect information on active Windows processes.

To escalate privileges, it first checks if it's already running with SYSTEM privileges, and if not, it impersonates the TrustedInstaller Windows Modules Installer service to escalate to SYSTEM.

To disable security software, AuKill starts several threads to continuously probe and disable security processes and services (and ensure they remain disabled by preventing them from restarting).

So far, multiple AuKill versions have been observed in the wild, some deployed in at least three separate incidents that have led to Medusa Locker and LockBit ransomware infections since the start of the year.

"The tool was used during at least three ransomware incidents since the beginning of 2023 to sabotage the target's protection and deploy the ransomware," Sophos X-Ops said.

"In January and February, attackers deployed Medusa Locker ransomware after using the tool; in February, an attacker used AuKill just prior to deploying Lockbit ransomware."  AuKill is similar to an open-source tool called Backstab, which also uses a Process Explorer driver to disable security solutions running on compromised devices.

Backstab was previously deployed by the LockBit gang in at least one attack observed by Sophos X-Ops while analyzing the cybercrime group's latest malware version, LockBit 3.0 or LockBit Black.

"We have found multiple similarities between the open-source tool Backstab and AuKill," the researchers said.

"Some of these similarities include similar, characteristic debug strings, and nearly identical code flow logic to interact with the driver."

The oldest AuKill sample has a November 2022 compilation timestamp, while the newest was compiled in mid-February when it was also used as part of an attack linked to the LockBit ransomware group.

Win one of the 5 licenses for Ashampoo Photo Commander 17!

Ashampoo Photo Commander 17 is the complete solution to view, edit and organize your photos. Bring order to your collection, optimize any number of photos simultaneously and create stylish calendars, cards, or entire slideshows in no time! Turn any number of unsorted photos into a genuine collection in just a few clicks, whether beginner, enthusiast, or professional!


Homepage:
https://www.ashampoo.com/en-us/photo-commander
File Size:
575 MB

Licence details:
Lifetime

Price:
The program is available for $50.00, but the winners of our contest will get it for free.


Enter Giveaway: https://www.giveawayoftheday.com/ashampo...mander-17/

What's new in Disk SpeedUp 5.0.1.82:
Optimized Disk Defrag: optimized the cleaning algorithm to improve user experience
Minor GUI improvements
Minor bug fixes             
https://www.glarysoft.com/disk-speedup/    Disk SpeedUp
Fast and efficient.

User-Friendly interface and interactive drive map.

Defrag automatically and intelligently.

Run as you scheduled.

Customized presets.

Download Now
5.0.1.82 for Windows | Update: Apr. 17, 2023

Easy to Use
Colorful interface with large, clearly labeled buttons and tabs labeled Defrag Show and Settings, which offers all basic functions, so it is very easy to operate for both novices and pros.

Quick and Smart
It takes just a few seconds to scan your whole disk. In addition, with more advanced settings to meet advanced requests, it is intelligent.

Safe and Secure
It is designed in such a way that defragments and optimizes disk safely, without any damage to your hard drive and the data stored on it.

Download: https://download.glarysoft.com/dssetup.exe     Disk SpeedUp 5.0.1.82  Is  100% Scanned With Bitdefender Total Security No Malware, Viruses, Malvertising, Spyware, Adware, Bundleware, PUPs, Backdoors, Bots, & Botnets, Trojans, Worms, Ransomware, Rootkits, Exploits, & Zero-day Exploits, KeyLoggers, Malicious Cryptominers, and Cryptojacking, Was Found By Bitdefender Safe To Use    Digital Signature:  Glarysoft Ltd