https://www.yacreader.com/  Megaupdate!
February 16, 24    Hi there,

All apps have been updated! Check all the new stuff:

YACReader for desktops 9.14.2

YACReader

    Add setting to disable scroll animations and scroll smoothing, recommended if you are using a touch pad or if you find the mouse wheel behaviour laggy.
    Fix missing translation when opening YACReader from YACReaderLibrary.

YACReaderLibrary

    Fix "Set type" context menu the grid view for folders.
    Add a different versioning strategy for databases. DBs version will change only when the structure changes and not when YACReader version changes.
    Add support for updating libraries automatically with various settings to chose from. During automatic library updates most actions are disabled, you can stop an update by clicking on the busy indicator next to the Libraries title.
    Improve content reloading. Navigation and selection state is no longer reseted after content changes (e.g. library updates, tags edits, etc.).
    The app will try to move comics and folders to the trash bin when deletions are requested, if the file system used doesn't support trash bin the files will be removed permanetly.
    Add menu to choose what columns are displayed in the table comics view (do a right click on the header to show it). The view has new 3 new headers to choose from (Series, Volume and Story arc).
    Migrate `number` and `arcNumber` data types to `TEXT`. This only affects databases created before 9.13 and fixes problems with some formats of numbers (e.g. 1.10).
    Propage update date to all the parent folders.
    Fix crash when resorting comics in reading lists in table view view and the comic flow is hidden.
    Fix cover loading in QML views due to malformed URLs.
    Improve style of the webui status page.
    Fix type not being propagated to new files in a folder.
    Mark the current type in the context menu so the user can know the current type.
    Fix columns in the search results.
    Fix type not being propagated to new folders from their parents.
    Fix default type set to folders in the root folder when they are added.
    Improve and fix comic file size format.

YACReaderLibraryServer

    Add `rescan-xml-info` command.
    Improved API to provide better integration with the clients (Android 1.4.0 and iOS 3.29.0).

All Apps

    New universal builds for macos.
https://www.yacreader.com/downloads   
Download YACReader, the best comic reader


for Windows 11/10  LATEST VERSION: 9.14.2  Download: https://objects.githubusercontent.com/gi...tet-stream    https://www.yacreader.com/features  READ, BROWSE AND MANAGE YOUR COMICS COLLECTION

all you need to enjoy your digital comics    FILE SUPPORT

YACReader supports a wide variety of comic files and image types. rar, zip, cbr, cbz, tar, pdf, 7z and cb7, jpeg, gif, png, tiff and bmp.
Lorem ipusum
CONFIGURE YOUR READING

Image rotation, double page mode, full size view, fullscreen mode, customizable background color, custom page fitting mode, bookmarks, resume reading, eye candy 'go to' and more.
Lorem ipusum
IMAGE IMPROVEMENTS

Bring to life your old comics with the image adjustments available in the reading mode. Use the brightness, contrast and gamma sliders and enjoy the new vibrant colors.

Lorem ipusum
TRACK YOUR READINGS

YACReaderLibrary organizes your comics and keeps track of your reading progress and your collections' status.
Lorem ipusum
TAGS (COMIC VINE)

Download your comics' information from Comic Vine. Title, number, volumen, authors and more.
Lorem ipusum
SEARCH

Find your comics quickly using the built-in search engine. No matter how big is your collection, YACReaderLibrary will find anything instantly.  https://opentip.kaspersky.com/https%3A%2...tab=lookup  Report
Report for domain
https://www.yacreader.com/
Good
Summary
IPv4 count 21
File count —
URL count —
Hits —
Created 31 Mar, 2012
Expires 31 Mar, 2025
Domain yacreader.com
Registration organization —
Registrar name PDR Ltd. d/b/a PublicDomainRegistry.com  Kaspersky Threat Intelligence Portal      YACReader Setup Application Reputation Trusted (Digital Signature) Digital Signature: Luis Ángel San Martín Rodríguez    YACReader 9.14.2.2402143 Open Source is 100% CLEAN, which means it does not contain any form of malware,
including adware, spyware, viruses, trojans and backdoors.  Was 100% Scanned Malware Free & Clean & Safe With Kaspersky Standard 2024        https://www.yacreader.com/  Megaupdate!
February 16, 24    Hi there,

All apps have been updated! Check all the new stuff:

YACReader for desktops 9.14.2

YACReader

    Add setting to disable scroll animations and scroll smoothing, recommended if you are using a touch pad or if you find the mouse wheel behaviour laggy.
    Fix missing translation when opening YACReader from YACReaderLibrary.

YACReaderLibrary

    Fix "Set type" context menu the grid view for folders.
    Add a different versioning strategy for databases. DBs version will change only when the structure changes and not when YACReader version changes.
    Add support for updating libraries automatically with various settings to chose from. During automatic library updates most actions are disabled, you can stop an update by clicking on the busy indicator next to the Libraries title.
    Improve content reloading. Navigation and selection state is no longer reseted after content changes (e.g. library updates, tags edits, etc.).
    The app will try to move comics and folders to the trash bin when deletions are requested, if the file system used doesn't support trash bin the files will be removed permanetly.
    Add menu to choose what columns are displayed in the table comics view (do a right click on the header to show it). The view has new 3 new headers to choose from (Series, Volume and Story arc).
    Migrate `number` and `arcNumber` data types to `TEXT`. This only affects databases created before 9.13 and fixes problems with some formats of numbers (e.g. 1.10).
    Propage update date to all the parent folders.
    Fix crash when resorting comics in reading lists in table view view and the comic flow is hidden.
    Fix cover loading in QML views due to malformed URLs.
    Improve style of the webui status page.
    Fix type not being propagated to new files in a folder.
    Mark the current type in the context menu so the user can know the current type.
    Fix columns in the search results.
    Fix type not being propagated to new folders from their parents.
    Fix default type set to folders in the root folder when they are added.
    Improve and fix comic file size format.

YACReaderLibraryServer

    Add `rescan-xml-info` command.
    Improved API to provide better integration with the clients (Android 1.4.0 and iOS 3.29.0).

All Apps

    New universal builds for macos.
https://www.yacreader.com/downloads   
Download YACReader, the best comic reader

for Windows 11/10  LATEST VERSION: 9.14.2  Download: https://objects.githubusercontent.com/gi...tet-stream

The sequel to the must-have cinematic sound effects library for filmmakers and creators. 400 original high-quality sounds designed to enhance your videos.

Visit:
https://www.filmcrux.com/free-sfx

Coupon:

Spoiler

FREESFX

Falco Animal Rush is a game with truly addictive gameplay!
Click on the screen with the mouse to change the direction of running and press the space key to jump over chasms! The difficulty and size of the level will increase as you progress. The game has an unlimited number of levels! How far can you get?Movement:LMB to turn and Space to jump.

System Requirements:
Windows

Homepage:
https://vls-sergey.itch.io/falco-animal-rush

GP:
https://game.giveawayoftheday.com/falco-animal-rush/

Convert audio files into MP3 format.
SoftOrbits MP3 Converter is an easy-to-use software program that allows users to quickly and easily convert audio files into MP3 format. The program supports a wide range of audio formats, including WAV, WMA, OGG, FLAC, and more. It also supports batch processing, allowing users to convert multiple files at once. The program has an intuitive user interface, making it easy to use for even the most novice of users. Additionally, the program offers a variety of advanced options, such as adjusting the bitrate, sample rate, and other audio settings. With SoftOrbits MP3 Converter, users can quickly and easily convert their audio files into the MP3 format. 

System Requirements:
Windows 7/ 8/ 10/ 11

Homepage:
https://www.softorbits.net/mp3-converter/

Licence details:
6 months

GP:
https://www.giveawayoftheday.com/softorb...converter/

Register:
https://www.softorbits.net/actions/getfr...44&a_aid=1

Terms and conditions:
Please note that the software you download and install during the Giveaway period comes with the following important limitations:
1) No free technical support
2) No free upgrades to future versions
3) Strictly non-commercial usage

A puzzle game that will immerse you in a world of scary stories.
Take on the challenge and try to solve 10 levels, each of which consists of 20 elements. You have to put all the pictures in the correct order to open the button to go to the next level. Be careful, these puzzles are not so easy to solve! Show your skills and complete all the levels of this medium difficulty game. 

System Requirements:
Windows

Homepage:
https://readel.itch.io/dark-illusion-2024

GP:
https://game.giveawayoftheday.com/dark-illusion/

The AI program for enormously improving video quality, Audials Vision 2024, can be won exclusively from us.

Despite all the criticism, artificial intelligence still has enormous advantages. It is particularly useful in video editing and can quickly and easily raise the quality of films and videos to an unimagined level. Audials Vision 2024 has a whole host of professional AI models on board that can easily turn a blurry and poorly resolved video or film into a 4K recording. Audials Vision 2024 is suitable for your own works and also for downloaded media from, for example, YouTube, Netflix, Amazon Prime Video, Apple TV+ and the like. With a little luck, you can win the full version of Audials Vision 2024 exclusively from us.

Fortunately, our partner Audials has once again provided us with 5 licenses for a full version of Audials Vision 2024, which we are happy to give away. To take part, please only use the raffle form provided below and please only take part once, otherwise no participation is possible.

Enter Here:
https://www.ahadesign.eu/news/3476-exlus...-2024.html

(The competition starts now and runs until Saturday, February 24th, 2024. Thank you to everyone who took part and of course we wish everyone good luck.)

An exciting game in which you can show your drifting skills.
Falco Drift Racing is an exciting game in which you can show your drifting skills. Collect points for each successful turn, as well as for driving in a drift position.You will need to stay on the road, otherwise, you lose. How long can you hold out? 

System Requirements:
Windows

Homepage:
https://vls-sergey.itch.io/falcodriftracing

GP:
https://game.giveawayoftheday.com/falco-drift-racing/

https://www.ashampoo.com/en-us/photos    Ashampoo® Photos⁠
Your photos, your system: Intuitive photo management with Ashampoo Photos
100% free
for you!
https://cdn1.ashampoo.net/downloader/101..._36586.exe       
Your photos, your system: Intuitive photo management with Ashampoo Photos

Experience compelling photo management that is not only free but also comes with smart features! Ashampoo Photos offers total visual clarity for comprehensive photo collections, flexible tagging, and an intuitive search that quickly spots that one photo among thousands. Enjoy stellar performance across all of your devices, no matter the size of your collection! Safely edit metadata and benefit from auto-generated smart albums!

    Neatly manages photos from multiple devices, file locations, and cloud services
    Auto-generated and updated smart albums based on ratings, tags, locations, etc.
    Supported formats: JPEG, PNG, RAW (CR2 & RAF, no cloud support)
    Intuitive search engine (rating, tags, location, time, etc.)
    Read & Write metadata with optional XMP support
    Compatible with system-default Apple & Android photo apps
    Cloud support: OneDrive & Dropbox
    Runs on Windows, Android, iOS* & macOS*
    Publicly accessible feedback forum for ideas and feature requests

*under development
Powerful and secure

With Ashampoo Photos, strong performance and security go hand in hand. Even huge photo libraries can't slow it down! At the same time, the metadata of your photos is handled with the utmost care and any unknown tags are fully preserved. And if you prefer to play it safe, you'll love the built-in XMP support that lets you store your modifications in separate files without touching the original data.
Tame the photo chaos

You've been shooting and collecting photos for years and now they're spread across multiple devices and cloud services? Time for some consolidating! Quickly add and edit meta tags and ratings to sort through your photos by relevance. No matter where they are stored, Ashampoo Photos will find your photos and group them together meaningfully, whether family celebration or professional project. Say goodbye to chaos and hello to cohesive fully transparent photo libraries!
Smart and flexible

We preserve your original file structure and augment it with a new layer of visual clarity! The key? Auto-generated smart albums for extra convenience and comfort! And then there's the powerful built-in search to filter photos by location, meta tag, or time.

With Ashampoo Photos, there's no lengthy file shuffling or importing involved. Your files stay where they are. This also means any file changes made with other tools will automatically be visible in our program. And thanks to built-in XMP support, aka sidecar files, exchanging metadata with RAW photo editors is a breeze.
Always where the action is

How about an app that seamlessly works across all your Windows, Android, iOS* and macOS* devices? No matter the device, Ashampoo Photos will be there for you. The program supports a wide range of media sources, including local folders and cloud service providers, like OneDrive or Dropbox.

Ashampoo Photos is constantly evolving and we want to make sure your opinion is heard! Join our active community and contribute and discuss your ideas and feedback directly with our developers!
https://opentip.kaspersky.com/https%3A%2...tab=lookup      Report
Report for web address
https://www.ashampoo.com/en-us/photos
Good
Overview
IPv4 count ≈ 898
Files count —
Created 27 Jul, 1999 17:00
Expires 27 Jul, 2024 18:00
Domain ashampoo.com
Registration organization Ashampoo GmbH & Co. KG
Registrar name Amazon Registrar, Inc.  Kaspersky Threat Intelligence Portal    Ashampoo Photos Application Reputation  Trusted (Kaspersky Security Network ) Digital Signature: Ashampoo GmbH & Co. KG  Ashampoo Photos 24.6.167 Freeware  is 100% CLEAN, which means it does not contain any form of malware,
including adware, spyware, viruses, trojans and backdoors.  Was 100% Scanned Malware Free & Clean & Safe With Kaspersky Standard 2024

https://www.ashampoo.com/en-us/connect    Ashampoo® Connect⁠
The whole world of software in a single platform
100% free
for you!
https://cdn1.ashampoo.net/ashampoo/0401/...219_sm.exe      Experience the future of Ashampoo today!  Connect is your digital hub to everything Ashampoo! Imagine a service that unlocks and updates all of your software and provides the shortest route to technical support. That's what Connect is all about–and more! You also get instant access to your license keys, free Ashampoo software and the best prices on the market, always. News, blog articles and videos are now just a few clicks away–for free, now and forever!  Connect for Windows feature highlights

    Free software and exclusive deals
    Nearly all Ashampoo and partner software, apps and tools
    Personal software library
    Install software from your library on any Windows device
    Comfortable software downloads and installs through download manager
    Access to feedback system to actively shape Connect development
Now also on iOS and Android!

We want Ashampoo Connect to be a safe haven for your software on every platform. That's why Connect is now also available on iOS and Android! So grab your cellphone and check it out. Need more information first? See the list below and find out what Connect can do for you today–and what the future has in store for you!
Connect for iOS / Android feature highlights

    Nearly all Ashampoo and partner software, apps and tools
    View license information for personal software
    Direct line to our support team for your feedback and suggestions
    Daily deals with exclusive prices
    Access to feedback system to actively shape Connect development
Because every great idea is built on trust

We're working hard to bring the full feature set of Connect to all platforms, but some features may currently be unavailable. Since the software updates automatically, you'll always have the latest version. You're welcome to try out Connect today!
Upcoming Connect for Windows features

    Ever-expanding product range with Ashampoo and partner titles
    Launch your software from Connect client
    Fully-automated software updates
    More user interface languages
    Upgrade support for your software
    Support for Mac software
    Information and entertainment sections

Use "Feedback" to tell us your wishes and suggestions    About Ashampoo
Users
20+ million
Downloads
500.000+ per month
World-wide
In over 160 countries
Experience
Over 24 years
https://opentip.kaspersky.com/https%3A%2...tab=lookup      Report
Report for web address
https://www.ashampoo.com/en-us/connect
Good
Overview
IPv4 count ≈ 898
Files count —
Created 27 Jul, 1999 17:00
Expires 27 Jul, 2024  18:00
Domain ashampoo.com
Registration organization Ashampoo GmbH & Co. KG
Registrar name Amazon Registrar, Inc.    Ashampoo Connect Setup Application Reputation  Trusted ( Kaspersky Security Network ) Digital Signature: Ashampoo GmbH & Co. KG Sign Date: 2024-02-12 8:53 AM  Ashampoo Connect 1.8.219 Freeware is 100% CLEAN, which means it does not contain any form of malware,
including adware, spyware, viruses, trojans and backdoors.  Was 100% Scanned Malware Free & Clean & Safe With Kaspersky Standard 2024

Download and convert YouTube videos to MP3, allowing you to enjoy your favourite audio content offline.

SoftOrbits MP3 Downloader for YouTube is an utility designed to facilitate the download of YouTube videos, converting them into MP3 files effortlessly. This versatile tool allows users to select the desired download quality, whether it be MP3 or MP4. Featuring batch download support, SoftOrbits MP3 Downloader enables users to download multiple videos simultaneously.

Key Features:

Download Entire Albums:
SoftOrbits MP3 Downloader excels at downloading complete albums with just a few clicks. The integrated album search streamlines the process, enabling users to swiftly find and download entire albums by entering the album title or artist.

Save to Your List of Favorites:
Simplifying organization, the tool includes an “Add to Favorites” feature. Users can effortlessly compile a list of their preferred songs and videos by clicking the designated button, accessible at any time through the “Favorites” tab in the right menu.

How to Get the Free MP3 from YouTube:
For song discovery, users can type the artist, song, or album name in the app or browse by genre.

SoftOrbits MP3 Downloader is a reliable tool for downloading and organizing favorite songs and videos. Its user-friendly interface, support for high-quality MP3 files, and adherence to legal standards make it a safe and effective choice for enhancing your media collection. Give it a try and experience seamless offline enjoyment of your preferred content.

GP:
https://sharewareonsale.com/s/free-youtu...0-discount

Download:
https://downloads.sharewareonsale.com/fi...loader.exe

SharewareOnSale exclusive license key:

Spoiler

YTD1-RFZMT-KWTAA-WULPK

• This is a 1-computer lifetime license, for noncommercial use
  
• No free updates; if you update the giveaway, it may become unregistered
  
• No free tech support
  
• You must redeem the license key before this offer has ended
  
• May not be resold
  

• Developed by SoftOrbits
  
• Version is v1.6
  
• Download size is 94.2 MB
  
• Supports Windows 7, 8/8.1, 10, and 11 (32-bit and 64-bit)
  

Falco Solitaire (Kings) is a classic card game.Goal: Move all the cards to the foundations (4 foundation on the right side of the screen)

Foundations:
* Should be built from Ace to King(by cards sharing the same suit).
* Top cards can be moved back.

Piles (7 piles at the top):
* Can be built from ace to 2 in alternating order.
* Any card from the pile can be moved. But you need to think how to move them carefuly.
* An empty pile can be filled with a King.

Deck:
Click to get a new card on the table.

System Requirements:
Windows

Homepage:
https://vls-sergey.itch.io/falco-solitaire

GP:
https://game.giveawayoftheday.com/falco-solitaire/

https://securelist.com/coyote-multi-stag...an/111846/  Coyote: A multi-stage banking Trojan abusing the Squirrel installer

Malware descriptions

08 Feb 2024  5 minute read   

Authors

    GReAT

The developers of banking Trojan malware are constantly looking for inventive ways to distribute theirs implants and infect victims. In a recent investigation, we encountered a new malware that specifically targets users of more than 60 banking institutions, mainly from Brazil. What caught our attention was the sophisticated infection chain that makes use of various advanced technologies, setting it apart from known banking Trojan infections.

This malware utilizes the Squirrel installer for distribution, leveraging NodeJS and a relatively new multiplatform programming language called Nim as a loader to complete its infection. We have named this newly discovered Trojan “Coyote” due to the role of coyotes as natural predators of squirrels. The Nim language defines itself as a “statically typed compiled systems programming language that combines successful concepts from mature languages like Python, Ada and Modula”. The adoption of less popular/cross-platform languages by cybercriminals is something we identified as a trend in our Crimeware and financial cyberthreats for 2024.

In this article, we will delve into the workings of the infection chain and explore the capabilities of this Trojan.
Forget old Delphi and MSI

In the banking Trojan landscape, the use of the Delphi language or MSI installers is a recurring trend among malware creators. It’s a well-known fact in the cybersecurity community that this method serves as a widely used initial infection vector.

Coyote does things a little differently. Instead of going down the usual route with MSI installers, it opted for a relatively new tool for installing and updating Windows desktop applications: Squirrel. As the authors explain, “Squirrel uses NuGet packages to create installation and update packages, which means that you probably already know most of what you need to create an installer.”
Coyote infection chain

Coyote infection chain

By using this tool, Coyote hides its initial stage loader by presenting it as an update packager.
Malicious Squirrel installer contents

Malicious Squirrel installer contents
The Node.js loader script

When Squirrel is executed, it eventually runs a NodeJS application compiled with Electron. This application executes obfuscated JavaScript code (preload.js), whose primary function is to copy all executables found in a local folder named temp to the user’s captures folder inside the Videos folder. It then runs a signed application from that directory.
NodeJS project structure

NodeJS project structure

Several executables have been identified in use, including those associated with Chrome and OBS Studio. The banker is loaded through DLL sideloading of a dependency of these executables. In all cases analyzed by our team, DLL sideloading occurs in the libcef.dll library.
The Nim loader

An intriguing element of the infection chain is the use of Nim, a relatively new programming language, to load the final stage. The loader’s objective is to unpack a .NET executable and execute it in memory using the CLR. This implies that the loader aims to load the executable and execute it within its process, reminiscent of how Donut operates.
Unpacked .Net executable

Unpacked .Net executable

It’s worth noting that the same entry point, obs-browser-page.exe, is utilized for every machine reboot, serving as a means of persistence.
Last but not least, the Coyote banking Trojan

After all these steps, the Trojan is successfully executed. Coyote does not implement any code obfuscation and only uses string obfuscation with AES encryption.
Encrypted string table building

Encrypted string table building

To retrieve a specific string, it calls a decryption method with the string index as a parameter. The decryption method works by creating a table of base64-encoded data. The first 16 bytes of each decoded data item serve as the IV (Initial Vector), while the rest is the encrypted data later used in the AES decryption routine.
Encrypted data structure

Encrypted data structure

The key is randomly generated by each executable, and the AES decryption algorithm uses the official .Net encryption interfaces. With this approach, for each string access that Coyote needs, it searches inside the table and decrypts each string with a custom IV.
Persistence and goals

Coyote achieves persistence by abusing Windows logon scripts; it first checks if HKCU\Environment\UserInitMprLogonScript exists, and if so, it inserts the registry value as the full path to the signed application, in this case, obs-browser-page.exe.

The Coyote Trojan’s objective is consistent with typical banking Trojan behavior. It monitors all open applications on the victim’s system and waits for the specific banking application or website to be accessed.
Application monitoring routine

Application monitoring routine

In our analysis we identified at least 61 related applications, all originating from Brazil. This strongly suggests that Coyote is indeed a Brazilian banking Trojan, exhibiting behavior similar to that previously reported in our Tetrade blog post.
C2 communication and control

When any banking-related application is executed and utilized, the Coyote banker contacts the C2 with this information. The C2 then responds with various actions on the machine, ranging from keylogging to taking screenshots. Communication with the attacker server will be explained in the following sections.

The Trojan establishes communication with its command and control server using SSL channels with a mutual authentication scheme. This implies that the Trojan possesses a certificate from the attacker-controlled server and uses it during the connection process.

The certificate is stored as a resource in an encrypted format that is decrypted by the X509 library from .Net. Once the malware verifies that the connection is indeed with the attacker, it proceeds to send the information collected from the infected machine and banking applications to the server. The information transmitted includes:

    Machine name
    Randomly generated GUID
    Banking application being used

With this information, the attacker sends a response packet that contains specific actions. To process these actions, the attacker transmits a string with a random delimiter. Each position of the string is then converted to a list, with the first entry representing the command type.

To determine the desired command, it checks the length of the string in the first parameter, which is a random string. In other words, the only difference between commands is the size of the string.

The most important available commands are:
Length Description
12 Take a screenshot
14 Show an overlay window of a fake banking app
15 Show a Window that is in the foreground
17 Kill a process
18 Show a full-screen overlay
21 Shut down the machine
27 Block machine with a fake banking image displaying: “Working on updates…”
31 Enable a keylogger
32 Move mouse cursor to specific X, Y position

The Trojan can also request specific bank card passwords and create a phishing overlay to capture user credentials.
Conclusion

Coyote marks a notable change in Brazilian banking Trojans. Unlike its counterparts, which often use older languages like Delphi, the developers behind Coyote are skilled in modern technologies such as Node.js, .NET, and advanced packaging techniques.

The addition of Nim as a loader adds complexity to the Trojan’s design. This evolution highlights the increasing sophistication within the threat landscape and shows how threat actors are adapting and using the latest languages and tools in their malicious campaigns.

Our telemetry data reveals that up to 90% of infections originated from Brazil. All Kaspersky products detect the threat as HEUR:Trojan-Banker.MSIL.Coyote.gen.

A more detailed analysis of the latest Coyote versions is available to customers of our private Threat Intelligence Reports. For more information, please contact crimewareintel@kaspersky.com.
Reference IoCs (indicators of compromise)

Host-based (MD5 hash)
03 eacccb664d517772a33255dff96020
071b6efd6d3ace1ad23ee0d6d3eead76
276f14d432601003b6bf0caa8cd82fec
5134e6925ff1397fdda0f3b48afec87b
bf9c9cc94056bcdae6e579e724e8dbbd

C2 domain list
atendesolucao[.]com
servicoasso[.]com
dowfinanceiro[.]com
centralsolucao[.]com
traktinves[.]com
diadaacaodegraca[.]com
segurancasys[.]com

    Brazil
    Financial malware
    Malware Descriptions
    Malware Technologies
    Trojan Banker

Coyote: A multi-stage banking Trojan abusing the Squirrel installer

Take the helm of a mighty battleship and sink enemy vessels!
Take the helm of a mighty battleship and sink enemy vessels with a click of your mouse in Pearl Harbor: Fire on the Water! Accuracy and timing will be your only allies as you patrol the dangerous waters near Pearl Harbor in a boat armed to the teeth with torpedoes, lasers and nukes! Do battle in broad daylight or at night, master 10 types of missions, and build a reputation as the terror of the seas. Stunning water and battle effects will keep you glued to the screen as you guard 13 locations, man five unique ships and turn nearly two dozen enemy craft into Swiss cheese. 

System Requirements:
Windows XP/ Vista/ 7/ 8; CPU: 2.5 GHz; RAM: 1024 MB; DirectX: 9; Hard Drive: 431 MB

Homepage:
https://www.bigfishgames.com/us/en/games...pc&lang=en

GP:
https://game.giveawayoftheday.com/pearl-...e-water-2/

1001 Jigsaw is the perfect gift for fans of classic jigsaws! 
It's sure to go down a treat with anyone who has felt a pleasant morning wind or a warm evening breeze, tried grandma's homemade pie or exotic fruits in another country, played with a pet or seen a dolphin for the first time. Our Earth is vast and great. To learn more about it, you can choose a multitude of various methods or just play 1001 Jigsaw: Earth Chronicles 5

Seven themed jigsaw collections await you: wild animals, mysterious underwater lands, birds from all over the world, outstanding flora, beautiful views, gifts of nature, and the lives of the peoples of the world. All this awaits you in 1001 Jigsaw: Earth Chronicles 5. 

Set a difficulty level to suit you in each jigsaw: number of pieces, spinning, and deformation. Save your progress at any time! Convenient controls with a multitude of hints and tools help make the gameplay more comfortable. Make the game more exciting by completing special quests to earn trophies! 

1001 Jigsaw - your own encyclopedia of the most beautiful corners of the planet Earth! Do the puzzles and enjoy the views of our beautiful world.It's time to know your planet better, to see all it's beauty in full-color and solve all of the mysteries. Explore our incredible world with the 1001 Jigsaw Planet Earth 5.

- 1001 high quality unique images
- well designed game-play: useful hints, sort tool and magnifying glass.
- optional game difficulty control makes your gameplay infinite
- custom styles of pieces with rotation
- save game progress and continue to collect the puzzle at any time
- tasks and colorful trophies for those who love excitement
- pleasant and relaxing music 

System Requirements:
Windows XP/ Vista/ 7/ 8/ 10; CPU: x86, 800 MHz; RAM: 2 GB; DirectX: 8.1 or later

Homepage:
https://store.steampowered.com/app/16649...onicles_5/

GP:
https://game.giveawayoftheday.com/1001-j...onicles-5/

https://adguard.com/en/blog/notification...-mysk.html        TikTok, Meta, X, and others exploit push notifications on iOS to collect data about users
February 9, 2024 6 min read

Apple has long said that fingerprinting — tracking a user through the hardware and software features of their device — is not allowed. But apparently some popular apps have found a backdoor that they are exploiting in plain sight.

Privacy researcher Tommy Mysk has discovered that a number of popular iOS apps are using a push notification feature, first introduced in 2016, to send detailed data about the user’s device to their companies’ servers.

Mysk explained that he noticed this disturbing and seemingly persistent pattern when he examined several social media apps, including TikTok, Facebook, FB Messenger, Instagram, Threads, and X. All of these apps took advantage of the feature that allowed them to customize their push notifications even when not running.

This feature is not intrinsically malicious and serves an important purpose. For example, it can be useful for apps that need to decode the notification payload or download additional content to best present the notification to the user. When an app receives a push notification, iOS signals the app to wake up and run for a short time. During this time, the app can do whatever the developer wants, including tweaking the push notification’s appearance in some way. The latter would be the original purpose of the feature, but the problem is that the app may also be collecting data or sending information about the user during that time.

Mysk has observed that the apps he has studied have learned to take full advantage of this limited run time to collect data from the device and send that data to remote servers. The researcher calls the ability to run code in the background “a gold mine for data-hungry apps.”

So how does it all work, according to Mysk?

    The app developer comes up with a code they want the app to run in the background
    The developer sends a push notification to the user of the app. The push can be about anything, from a news update, a live sports score to a new friend request
    The user’s device receives the push notification, but does not show it on the screen yet. iOS recognizes that the push notification is from the social app and wakes it up in the background. The app is now running, but the user can’t see it or interact with it
    The app runs the code that the developer has prepared in the background. And while it may be innocuous, for example, be used to add more information, such as images, to the notification, it can also be used to harvest data from the user’s device and send that data to the developer’s servers

This scheme can provide developers with a unique combination of the software and hardware characteristics of the user’s device.

    Many apps are using this feature as an opportunity to send detailed device information while running quietly in the background. This includes: system uptime, locale, keyboard language, available memory, battery status, device model, display brightness, to mention a few.

This data can subsequently be used to track the user across applications, Mysk points out.
What data is being collected?

In the video describing the examples of such trickery, Mysk shows the types of data that can be collected by social media companies through the push notification loophole. The collection is done either through the company’s own services or with the help of third-party tools, such as Google’s analytics tools — Google Analytics and Firebase.

TikTok

With TikTok, for example, the app sends the iPhone’s boot time to the remote servers every time it receives a push notification.

TikTok sends a lot of data to external servers

That means that TikTok knows exactly when the user last restarted their iPhone. If collected over a period of time, the boot time can tell how often the user reboots their iPhone, which can indicate how much they use it or how stable it is. It can be also used to identify the user’s device or track their activity.

When the Facebook app sends a push notification to the same device, Facebook receives the same data about the user’s iPhone last boot time.

Facebook

As the researcher notes, this may facilitate tracking the user across different apps. That is because the boot time can be used as a unique identifier for the user’s device. If the same device has multiple apps that collect and send the boot time to the same or different servers, these servers can compare the boot time data and link it to the same device. This way, they can track the user’s behavior and preferences across different apps, even if the user does not use the same account or login information for each app. All of this makes the exploitation of the push notification feature by social media companies a legitimate privacy threat.

Moreover, Mysk notes that some apps, for example Facebook and TikTok, also send data when clearing their notifications in Notification Center, which is an iOS feature that provides an overview of alerts from applications.

For example, when a user clears a Facebook notification, the app sends a request with detailed information, including the information about available memory, the last app event, such as liking a post, the time since last app event, the actor ID, that identifies the user’s account on Facebook, the preferred content size, the timestamp (i.e. the exact date and time) when the notification was cleared, the connection type, and so forth.

When a user clear a Facebook notification, the app sends detailed information about the user to the external servers

Twitter (X) handles the collection of the user’s information more or less the same way as Facebook and TikTok do.

X/Twitter

All three companies are using Firebase, a service offered by Google, Mysk notes, adding that “the frequency at which many apps send device information after being triggered by a notification is mind-blowing.”
New Apple rule for devs: what will they change?

Mysk pins a lot of hopes on the new rules for developers that Apple has put in place and that will come into effect this spring. As it unveiled the rules, Apple announced that developers would need to explain why their apps have to use certain APIs (Application Programming Interfaces), which are methods for different apps to communicate and share data.

The developers will have to explain why they need to access device information not only for their own code, but also for third-party SDKs (software development kits) that they add to their apps. Both apps and third-party SDKs will need to write one or more “approved reasons” for why they need to access device information through specific APIs in separate documents called “privacy manifest files.” These reasons should be “consistent with the app’s functionality.” We wrote a detailed review of Apple’s new requirement for developers in August — check it out here.

But the question is, will it stop companies from harvesting data from apps through the push notification backdoor? In theory, it should, but only if Apple seriously enforces these rules and monitors developers’ compliance. Which is by no means guaranteed.

We believe that the new rules will improve the situation, but by how much? It is a difficult question with many variables. Developers will have to take the new rules into account, so there’s a chance they’ll try to follow them in good faith. However, those who are hell-bent on continuing to collect this data will likely choose to take risks. And then it’ll be up to Apple and its reviewers to catch these apps in the act.

In any case, we hope Apple takes a proactive and transparent approach to privacy enforcement, or users’ data will continue to be at risk.      https://safeweb.norton.com/report?url=ht...sk.html%20      Report

adguard.com

URL Analysed: https://adguard.com/en/blog/notification...n-mysk.htm...


Norton Rating

Safe

Norton Safe Web has analyzed adguard.com for safety and security problems.

Try on the role of a shooter who opposes the whole world. 
You will be attacked by hordes of enemies, from whom you will have to shoot using different weapons. The grenade launcher will reduce the number of your enemies quite quickly with its rockets. The machine gun is always full of cartridges. Although the shotgun does a lot of damage, it takes a long time to reload. There are different types of enemies, some have a large supply of health, some throw boxes, others create small copies of themselves upon death. Be careful and you will win!

-Dynamic gameplay
-Many enemies
-Interesting gameplay

System Requirements:
Windows

Homepage:
https://giveaway4.itch.io/gunner-john

GP:
https://game.giveawayoftheday.com/gunner-john/

BitLocker encryption broken in 43 seconds with sub-$10 Raspberry Pi Pico — key can be sniffed when using an external TPM
News
By Aaron Klotz published 2 days ago
BitLocker's reliance on a TPM for security is its own downfall in this specific exploit.

Bitlocker is one of the most easily accessible encryption solutions available today, being a built-in feature of Windows 10 Pro and Windows 11 Pro that's designed to secure your data from prying eyes. However, YouTuber stacksmashing demonstrated a colossal security flaw with Bitlocker that allowed him to bypass Windows Bitlocker in less than a minute with a cheap sub-$10 Raspberry Pi Pico, thus gaining access to the encryption keys that can unlock protected data. After creating the device, the exploit only took 43 seconds to steal the master key.



Article:-
https://www.tomshardware.com/pc-componen...ry-pi-pico

KeepSolid Passwarden

Password managers make it easy and convenient to use dozens of unique random passwords without getting overwhelmed. They help protect your passwords and streamline their management.This helps combat the biggest cybersecurity threat from using the same password over and over again simply out of convenience.

Passwarden is an easy and safe password manager. Store your passwords and other important data protected by encryption. The program will easily transfer your external data, keep your data safe online, synced between devices and simplify your online routine. You can easily sign in to all your accounts in one click. 

Single sign-on (SSO) : Only one password to remember
Secure storage for any sensitive info
Generator of complex & unique passwords
Unlimited devices per one account
Security Dashboard
Two-factor authentication
Secure data sharing 
Cross-platform 
Duress mode 
Extra layers of security
Data backup on cloud servers



Company Website

www.keepsolid.com

Homepage:

https://www.keepsolid.com/passwarden/

Downloads:

https://www.keepsolid.com/passwarden/downloads

Pricing:

https://www.keepsolid.com/passwarden/pricing



Supported Platforms:



Protect your information with a Master password

The program requires a dedicated password - a Master password. This password reliably protects your in-app data and takes a fundamental role in encryption and synchronization processes. Make sure to create a strong Master password, as from now on, it is the only password you will have to remember.



Never forget and lose your passwords again

Tired of forgetting your logins, account credentials, and passwords? Worried about available account recovery options? The reliable Windows 10 password manager is at your disposal! Save your sensitive information to the Passwarden storage, always have all passwords and login credentials at your arm’s reach, and never be forced to restore your account!



Speed up login process with Windows password manager app

Thanks to the Autofill feature, you don't have to print complex combinations of random characters that are highly confusing to type and hard to remember. As a result, you can negate any typing errors when filling out sign-in forms with the Autofill option. To top it off, this feature protects you from keyloggers and phishing websites. Make your online routine easier and safer with our best Windows password manager app.



Make the password creation process a breeze

The full-featured Windows 10 password manager provides the ability to create random passwords directly in the application. Furthermore, you can customize password length and decide whether to use digits, upper case letters, and special symbols. Get started with Passwarden right now and generate strong passwords in a matter of seconds!



Features That Make Passwarden the Best Password Manager

Security

Safety and security above all else

Passwarden is here to remember everything for you and keep your data safe from any third parties

Security Dashboard

If you read the news about password leakage and feel anxious about it, check out this feature. It will let you know whether you need to change your password. Keep getting up-to-date information about the security of your credentials.



Duress mode

If you’re ever forced to open Passwarden under duress, enter a dedicated password to hide previously designated important data, passwords and private and sensitive information. 

Password sharing

If you ever want to share your passwords with others, Passwarden is a safe and secure alternative to sending them via messengers or emails. 

Data Bullet-proof encryption

When it comes to sensitive info like your passwords, security is a key. To this end, Passwarden employs client-side data encryption using AES-256 and ЕС р-384 protocols. These protocols render your personal information and passwords unreadable to any third parties, be it hackers or even KeepSolid employees.
These encryption protocols will ensure that your passwords and personal information stay out of harm's way at all times. More info about encryption HERE

Two-factor authentication

Add another layer of security to your passwords and information. A one-time passcode will be sent to your indicated email address to ensure that only you can access your account. For extra protection, we also utilize Authenticator App OTP codes.



Master password

A Master password is a specialized password that is required to log in to your Passwarden profile. All your sensitive data is securely locked behind this password. As well, this password plays a crucial role in data encryption and decryption processes. Even Passwarden employees can’t access your Master password or any data in your Passwarden storage.

Zero-Knowledge Architecture

Passwarden implements end-to-end encryption that guarantees complete invulnerability to all the data kept in Vaults. No one except the owner of the Master Password can get access to the encrypted information stored in Passwarden. Even if third parties succeed to intercept the traffic that goes from your device, they will receive only a bunch of encoded symbols.

VPN with a password manager

KeepSolid allows you to combine the benefits of password managers and VPNs for an ultimate security combo. Get our MonoDefense security bundle and protect all aspects of your cyberlife. 

The safest password manager

Passwarden grants a variety of benefits to its users. No wonder, considering that it was developed by cybersecurity experts, with years of experience and millions of satisfied customers.

Convenience

1 account for all devices

Pay for a single subscription and use our password manager on any amount of supported devices and browsers. No need to pay extra for additional devices or worry you may run out of slots.

Data import

It’s super-easy to transfer data from external sources to Passwarden with the Migration feature. For instance, you can export passwords from Chrome and to our password manager

Multi-platform software

Passwarden is available on a multitude of devices. You can use this password manager on iOS, Android, macOS, Windows, Chrome, Edge, Opera, Firefox, and as a web app.

Offline mode

Need your credentials or password, but the internet went down? No problems! You can access Passwarden even without an active internet connection.

Free subscription

You can use our password manager for free with some minor feature limitations. Using a free plan, you are not able to share items and vaults, can’t create and manage Family, and are limited to one device only.

Cross-device synchronization

Open your data Vaults and access your passwords and stored information whenever and wherever you need. All the changes will be automatically synced between other devices

Universal KeepSolid ID

Use a single KeepSolid ID to access any and all KeepSolid products in one click. Get access to the KeepSolid User Office and manage all your subscriptions from there.

Random strong passwords

Streamline the process of creating strong passwords. With a single click of a button, Passwarden will generate a random strong password for you and save it for later use.

Other types of data

Besides just your passwords, Passwarden can store and protect all sorts of other data, including personal information, login credentials, payment info, licenses, etc.

Password autofill

Manually entering long, complex, and random passwords every time can be quite a hassle. Benefit from the Passwarden’s Autofill feature to avoid such nuisance and have our app do all the work for you

Family password management

Protect those that are the most important to you. With the Passwarden Family plan, you’ll be able to extend the benefits of our password manager to your whole family - most securely and conveniently.

All-around password manager

Passwarden weaves together a modern, intuitive interface and a universal approach to your protection. The password manager’s features streamline password creation, management, sharing, and protection.

Summary:

Download the best Windows password manager, easily import information from other sources, generate strong and unique passwords in a matter of seconds, and reliably secure all the data within Passwarden – password manager for PC!

Developer:

KeepSolid Inc. is a security expert with 9-year experience and services, used by 35+ million customers worldwide. This vast expertise helped us develop Passwarden password manager, the solution that meets the highest industry standards and safety regulations.

Important Links:

Features:
https://www.keepsolid.com/passwarden/features

Teams:
https://www.keepsolid.com/passwarden/pas...-for-teams

Family:
https://www.keepsolid.com/passwarden/family

Twitter:
https://twitter.com/keepsolidinc

YouTube:
https://www.youtube.com/c/KeepsolidInc

Telegram:
https://t.me/keepsolid

Pricing
https://www.keepsolid.com/passwarden/pricing

Downloads:
https://www.keepsolid.com/passwarden/downloads/windows

Help/Support/Manuals/Extra:
https://www.keepsolid.com/passwarden/help

About:
https://www.keepsolid.com/passwarden/hel..._use-cases

VPN Unlimited

The VPN technology keeps hackers and identity thieves at bay and unblocks restricted web content in your country by connecting to worldwide servers. VPN Unlimited is a simple and powerful VPN solution that will let you secure your online activities, Wi-Fi connections and bypass ISP restrictions. VPN Unlimited is as a very capable VPN, with  main focus yo unblock multiple streaming sites. P2P is supported, though only at five locations(opens in new tab): Canada, France, Luxembourg, Romania and the US (California).

Protocol support includes OpenVPN, IKEv2 and the speedy WireGuard. There's a further protocol bonus which redirects traffic through the TCP 443 and UDP 33434 ports. This will make it more difficult to detect and block.





Features and Benefits

Total Security

Whatever data you send (personal passwords or credit cards data), whatever WiFi you use, you are 100% secure. We encrypt your personal data protecting it from prying third-parties and hackers

Absolute Privacy

Stay anonymous and untracked on any website from any location. We protect your privacy changing your physical location (IP address). So websites, hackers, and advertisers can’t track you.

Part of cybersecurity bundle

VPN Unlimited is a part of the MonoDefense® security bundle. This bundle combines several credible apps that offer you all-around protection, an improved online experience, and sensitive data safety.

Unlimited devices

Pay for 1 get 4 for FREE! Or even more - with one subscription, you can use our VPN on unlimited devices. You can use any device (desktop, tablets, mobile phones) and any platform (macOS, iOS, Android, Windows, Linux.)



Uncompromising speed

Thanks to our technologies you can be sure you won’t slow down. KeepSolid Wise improves user experience and internet speed. Plus our super fast VPN servers all over the world ensure the best connections speed.

Additional services

For the most demanding users, we offer special extras, such as a Lifetime VPN subscription, Personal Server & Personal IP options, and even the ability to set a VPN on your WiFi Router.

You can use it in China. Its stealth protocols allow you to bypass China’s Great Firewall.

AES-256: Top-tier security features. The software comes with AES-256 encryption, WireGuard, and its own Stealth protocol. It encrypts our web traffic using the industry standard of AES-256



No-Log Policy

This feature stands for the absolute anonymity of users and not saving any of their private details and online-activity data. By choosing a VPN app with such a policy, you ensure that no one (including your no-log VPN provider) encroaches on your online privacy. The app do not log the following information that transfers the network during your VPN session: Browsing history, Connection times, Metadata, Downloads, Server usage, Data content, IP address

3000+ high-speed servers across 80+ locations all over the world

Choose a preferred location to get an optimal performance and access to geo-restricted content with KeepSolid VPN Unlimited

https://www.vpnunlimited.com/help/specia...-locations



Protect All Your Devices:

Whatever device you have, VPN Unlimited supports them all! It’s available for macOS, Windows, Linux, Android, iOS, Windows Phone, and also comes as a browser extension for Chrome, Opera, and Firefox.
To top it off, you can set it up on your router, NAS and streaming devices, and much more. Protect your entire online life with KeepSolid VPN Unlimited!

Homepage:

https://www.vpnunlimited.com

Downloads:

https://www.vpnunlimited.com/downloads/

Pricing:



Benefits from using VPN Unlimited to access video streaming content:



Access HBO Now, Max, and Go from anywhere in the world
Unblock the US Hulu with KeepSolid VPN Unlimited
Enjoy BBC iPlayer outside the UK
Watch ESPN+ sports streaming online anywhere
Unblock US CBS All Access with VPN Unlimited
Watch RaiPlay from any spot in the world
Unblock Disney Plus with KeepSolid VPN Unlimited
Stream Channel 4 from abroad with VPN Unlimited
Watch Amazon Prime Video outside the US
Access Sony Crackle with KeepSolid VPN Unlimited

VPN Protocol:



KeepSolid VPN Unlimited Extras: 4 Additional Offers for Advanced VPN Protection:

KeepSolid VPN Unlimited provides our users with complete online security. In case if the basic functionality of our software is not enough for you and you‘d like to enhance your online experience, we offer you extra 4 security features of VPN.



Personal VPN Server to Increase VPN Connection Speed

Skyrocket the level of your internet protection thanks to a powerful personal VPN server and its uncompromised performance, you get the strongest internet protection from any cyber threats
Unprecedented connection speed: Since there are no other users on your personal VPN server, you surf the web with the most blazing fast bandwidth and connection speed
Break-free from internet censorship: Choose the server location that satisfies your content appetite best and get the same online access as the residents of this country
Best VPN server for Gaming: Reduce the lags, enhance your gaming experience, and access your gaming accounts wherever you are

Lifetime VPN Subscription for Never-Ending Protection

Pay once, enjoy forever: no recurring payments at all.
Get unlimited protection and freedom: Along with unlimited duration of your VPN subscription, you get unlimited traffic and bandwidth. 
Lifetime VPN for all your devices: You can use on up to 5 devices at once, or even extend this number if required. 



Personal Static IP:

Clean personal IP address: used only by you, your browsing history and online activity is under your control
Boosted online security: Easily assign your personal IP address to your online banking, log in to your account with the dedicated IP, and enhance its online protection
Extended access to any wished content: you won’t be blocked on any websites because of the other users

Additional Devices to Protect All Your Devices:

Enjoy additional slots: If you are out of the basic 5 free slots, you can easily extend your limit and protect all your devices with KeepSolid VPN Unlimited
Select the desired amount of additional devices
Choose the most perfect duration of your plan: there are monthly, yearly, and lifetime types of subscription, so you could select the one that fits your needs best

Unlimited VPN Protection for Teams:

Advanced VPN Unlimited technology: you and your team will get personal VPN servers and clean IP addresses for unmatched security
Easy team management thanks to the easy-to-use interface to manage your teams and control the number of devices you use

I would like to thank KeepSolid Team for this EXCLUSIVE RARE Giveaway

We have XXX annual license codes valid for XXX

Giveaway duration: 4 weeks

Rules:

You must be registered in Promo2day, Giveaway is open for all users
Reply here about your current VPN Solution and why you want to use Unlimited VPN
Share on social media or other websites
PM me within 3 days of winners announcement

Good Luck for All!

Advance through levels, avoiding traps and obstacles!

Falco Ball Adventures is an exciting platform game in which you have to advance through levels, avoiding traps and obstacles! To control you need to use the arrow keys and the Space key. Can you complete all the levels in the game Falco Ball Adventures?

System Requirements:
Windows

Publisher:
vls-sergey

Homepage:
https://vls-sergey.itch.io/falco-ball-adventures

File Size:
241 MB

Price:
The game is available for $5.00,

GP:
https://game.giveawayoftheday.com/falco-...dventures/