Is it wise to keep old electronics

If you suddenly encounter a PNP_DETECTED_FATAL_ERROR Blue Screen error, then this post can help you out. The PNP_DETECTED_FATAL_ERROR BSOD usually occurs when any new hardware that is mostly the Plug and Play type is attached. In such cases, when the device is plugged, and the driver for that device crashes or isn’t found or is not compatible, you will most likely encounter this particular BSOD error. There are several error codes that come under this category, some of them are 0x000000CA (0x01681690, 0xEA96A7BE, 0x938A81AD, 0xF8362881. This BSOD error can also occur at any time. However, the only constant thing here is when you plug a PNP device like earphones, microphones, USB drives, and many more. The PNP_DETECTED_FATAL_ERROR bug check has a value of 0x000000CA which indicates that the Plug and Play Manager encountered some severe error which is most likely have something to do with a problematic Plug and Play driver. To fix this error, here are some possible solutions that could help.

Option 1 – Run the Blue Screen Troubleshooter

The Blue Screen troubleshooter is a built-in tool in Windows 10 that helps users in fixing BSOD errors like PNP_DETECTED_FATAL_ERROR Blue Screen error. It can be found on the Settings Troubleshooters page. To use it, refer to these steps:

• Tap the Win + I keys to open the Settings panel.
• Then go to Update & Security > Troubleshoot.
• From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.

Option 2 – Try disabling or removing newly installed hardware

In this option, you will have to disable or remove the hardware you’ve just installed recently since external devices could be the one that’s causing the Blue Screen of Death error to appear. To do that, just disconnect any external device that’s connected to your computer physically and then check if it fixes the PNP_DETECTED_FATAL_ERROR Blue Screen error.

Option 3 – Try disabling BIOS Memory options namely Caching Shadowing

Disabling the BIOS Memory options such as Caching and Shadowing can help you in fixing the PNP_DETECTED_FATAL_ERROR Blue Screen error. All you have to do is enter the BIOS first and then use the Arrow and Enter keys to select your choices. And if you can’t seem to find it, look for specific instructions from your OEM or you could also look out for instructions from the manufacturer of your motherboard.

Option 4 – Try to run the CHKDSK utility

Running the CHKDSK utility might also help you resolve the PNP_DETECTED_FATAL_ERROR Blue Screen error. If your hard drive has issues with integrity, the update will really fail as the system will think that it’s not healthy and that’s where the CHKDSK utility comes in. The CHKDSK utility repairs hard drive errors that might be causing the problem.

• Open Command Prompt with admin privileges.
• After opening Command Prompt, execute the following command and hit Enter:

chkdsk /f /r

• Wait for the process to be completed and then restart your computer.

Option 5 – Try to uninstall programs you’ve installed recently

Chances are, some programs that you just installed might be the one that’s causing the BSOD error. Thus, you need to uninstall the program to resolve the problem.

• In the search box, type in “control” and then click on Control Panel (desktop app) among the search results.
• After that, select Programs and Features from the list which will give you a list of all the programs installed on your computer.
• From there, look for the concerned program and select it and then uninstall it.

Option 6 – Update the Device drivers

• Tap the Win + R keys to launch Run.
• Type in devmgmt.msc into the box and tap Enter or click OK to open the Device Manager.
• After that, a list of device drivers will be displayed. Look for the device driver you and then select either “Update driver” or “Uninstall device”. And if you find any “Unknown device”, you need to update it as well.
• Select the “Search automatically for updated driver software” option and then follow the instructions to complete the process.
• If you have chosen to uninstall the driver, follow the screen options to complete the process and then restart your PC.
• Connect the device and Scan for hardware changes – you can see this option under Device Manager > Action.

Option 7 – Perform a System Restore

Performing System Restore might help you in fixing the PNP_DETECTED_FATAL_ERROR Blue Screen error. You can do this option either by booting into Safe Mode or in System Restore. If you are already in the Advanced Startup Options, just directly select System Restore and proceed with the next steps. And if you have just booted your PC into Safe Mode, refer to the steps below.

• Tap the Win + R keys to open the Run dialog box.
• After that, type in “sysdm.cpl” in the field and tap Enter.
• Next, go to the System Protection tab then click the System Restore button. This will open a new window where you have to select your preferred System Restore point.
• After that, follow the on-screen instructions to finish the process and then restart your computer and check if the problem is fixed or not.

If you encounter the “We couldn’t install some updates because the PC was turned off” while trying to run Windows Update on your Windows 10 computer, then read on as this post will give you a couple of suggestions you can use as a reference to fix this error. Make sure to follow the options given below carefully.

Option 1 – Perform basic computer troubleshooting

If you get the “We couldn’t install some updates because the PC was turned off” error on your laptop, then it’s recommended that you connect your laptop to a power source and then try clicking the Update button again. In addition, you also have to make sure that your computer stays awake until the Windows Update process is completed. This will ensure that your computer does not go into an idle state and interfere with the process.

Option 2 – Try deleting the files from the SoftwareDistribution folder and resetting the Catroot2 folder

The downloaded Windows Updates are placed in a folder called “SoftwareDistribution”. The files downloaded in this folder are automatically deleted once the installation is completed. However, if the files are not clean up or if the installation is still pending, you can delete all the files in this folder after you pause the Windows Update service. For complete instructions, refer to the steps below.

• Open the WinX Menu.
• From there, open Command Prompt as admin.
• Then type in the following command – don’t forget to hit Enter right after typing each one of them.

net stop wuauserv net start cryptSvc net start bits net start msiserver

• After entering these commands, it will stop the Windows Update Service, Background Intelligent Transfer Service (BITS), Cryptographic and the MSI Installer
• Next, go to the C:/Windows/SoftwareDistribution folder and get rid of all the folders and files thereby tapping the Ctrl + A keys to select them all and then click on Delete. Note that if the files are in use, you won’t be able to delete them.

After resetting the SoftwareDistribution folder, you need to reset the Catroot2 folder to restart the services you just stopped. To do that, follow these steps:

• Type each one of the following commands.

net start wuauserv net start cryptSvc net start bits net start msiserver

• After that, exit Command Prompt and restart your computer and then try to run Windows Update once more.

Option 3 – Try restarting the Windows Update Services

• Open the Services Manager.
• From there, make sure that you set the following services and Startup types:
  • Background Intelligent Transfer Service: Manual
  • Cryptographic Service: Automatic
  • Windows Update Service: Manual (Triggered)

Option 4 – Try to run the Windows Update Troubleshooter

Running the built-in Windows Update troubleshooter could also help you resolve the “We couldn’t install some updates because the PC was turned off” error. To run it, go to Settings and then select Troubleshoot from the options. From there, click on Windows Update and then click the “Run the troubleshooter” button. After that, follow the next on-screen instructions and you should be good to go.

Option 5 – Try to install the Windows Updates manually

As mentioned, the error might be because Windows missed installing a particular update which is why you are not able to proceed with the current update. So to resolve the issue, you need to install the update that wasn’t installed by downloading it from the Microsoft Update Catalog website. You also have to make sure that you didn’t turn off the Windows update or have it delayed.

Option 6 – Run Microsoft’s online troubleshooter

Running Microsoft’s online troubleshooter might also help you fix the Windows update error. This online troubleshooter is known to help in fixing Windows Update errors, it scans your computer for issues that might be causing the problem and then fixes them automatically.

If you are using a multi-monitor, then you might find it quite useful. It helps many users with their work and brings more productivity. And over the past few years, Windows has managed to offer one of the excellent multi-monitor features where users can plug in an additional monitor and access their work or use their computer seamlessly on both displays. This is really handy, especially for users who are graphic designers, gamers, and other professionals who have to use a larger screen for their work. One of the biggest inconveniences for users who use multi-monitor is that the Taskbar is switched on, on both displays, by default. This default arrangement is most likely to cause clutter on the second display. So if you are one of these users who find such a thing annoying, then you will find this post useful for you as we will walk you through how you can move the Taskbar to a second monitor. To get started, follow the instructions laid out below. Step 1: The first thing you have to do is right-click on the Taskbar. Step 2: Next, uncheck the “Lock the taskbar” option. Step 3: After that, click and hold the taskbar and drag it to the second monitor. Step 4: Once done, click the mouse button on the place where you want to place the taskbar. Step 5: Now right-click on the “Lock the taskbar” option to lock the taskbar. Once you’re done carrying out the steps given above, there are Advanced Options you can explore. This array of advanced options are offered by Windows 10 to fine-tune the multi-monitor experience of users. For instance, you have the option to choose to show the taskbar on an active screen only or combine the buttons on other taskbars. It would be better if you try out different variations and stick with the best one. In addition, you could also move the taskbar from one display to another.

We have gathered and want to share with you all of the Windows 11 wallpapers if you would like to place them on your desktop now and now wait for the official W11 release. Hope that you will like some of them and I hope to see you again on errortools.com Download Windows 11 Wallpapers here!

And here is the preview of them

There are times when you suddenly encounter a Blue Screen error like DRIVER_POWER_STATE_FAILURE error when resuming from Sleep or right after you shut down or restart as well as switch from Hibernate mode. This kind of Blue Screen error is due to some issue with the driver state. Moreover, the bug check “0x0000009F” in the error also indicates that a driver is in an inconsistent or invalid power state. The DRIVER POWER STATE FAILURE Blue Screen error usually occurs during events that involve power state transitions like shutting down, moving in or out of standby mode, or hibernate mode. To resolve this error, you can check out the suggestions given below.

Option 1 – Update the Device drivers

The device driver installed in your computer might be incompatible with your operating system which is the reason why the DRIVER POWER STATE FAILURE Blue Screen error occurs. To fix that, you have to update your device drivers.

• Reboot your computer into Safe Mode with networking support.
• Tap the Win + R keys on your keyboard to open the Run dialog box.
• After that, type “msc” in the field and hit Enter or click OK to open the Device Manager.
• After opening the Device Manager, update all the outdated Device drivers on your computer.
• Next, right-click on all the driver entries that are appropriately labeled, and then click the Update driver option.
• Now restart your PC and check if the BSOD error is fixed or not.

Option 2 – Uninstall any faulty device drivers

• Tap the Win + R keys on your keyboard to open the Run dialog box.
• After that, type “msc” in the field and hit Enter or click OK to open the Device Manager.
• From there, look for any device driver which has a yellow exclamation mark which indicates that something is wrong with them.
• And then right-click on each one of them and click on Uninstall.
• Once you’re done uninstalling the faulty drivers, restart your computer and allow your computer to reinstall the drivers you just uninstalled.

Option 3 – Run the Blue Screen Troubleshooter

The Blue Screen troubleshooter is a built-in tool in Windows 10 that helps users in fixing BSOD errors like rtwlane.sys Blue Screen error. It can be found on the Settings Troubleshooters page. To use it, refer to these steps:

• Tap the Win + I keys to open the Settings panel.
• Then go to Update & Security > Troubleshoot.
• From there, look for the option called “Blue Screen” on your right-hand side and then click the “Run the troubleshooter” button to run the Blue Screen Troubleshooter and then follow the next on-screen options. Note that you might have to boot your PC into Safe Mode.

Option 4 – Try to remove external hardware

If there is any external hardware plugged into your computer especially the new ones, you can try removing it and then check if the Blue Screen error persists. If the problem gets solved, you might want to update the driver of that particular hardware. On the other hand, if you’re still getting the error, then proceed to the next given options below.

Option 5 – Try resetting Windows 10

To fix this BSOD error, you can try resetting Windows 10. Doing so won’t get rid of any file in your system – instead of erasing all your media files and documents, this reset option resets all the system settings and files.

Option 6 – Try running the System File Checker Scan

The SFC or System File Checker scan could detect and automatically repair damaged system files that could be causing the DRIVER POWER STATE FAILURE Blue Screen error. SFC is a built-in command utility that helps in restoring corrupted files as well as missing files. It replaces bad and corrupted system files to good system files. To run the SFC command, follow the steps given below.

• Tap Win + R to launch Run.
• Type in cmd in the field and tap Enter.
• After opening Command Prompt, type in sfc /scannow

The command will start a system scan which will take a few whiles before it finishes. Once it’s done, you could get the following results:

1. Windows Resource Protection did not find any integrity violations.
2. Windows Resource Protection found corrupt files and successfully repaired them.
3. Windows Resource Protection found corrupt files but was unable to fix some of them.

If you have encountered the “YOU ARE NOT AUTHORIZED TO ACCESS THIS WEB PAGE AS PER THE DOT COMPLIANCE” error while trying to visit a website using either Firefox or Chrome browser, then read on as this post will guide you on how you can fix this error. Apart from this error message, you might also see an alternative message that says, “Web Page Blocked! The page you have requested has been blocked because the URL is banned as per the Government Rules”. When you get any of the aforementioned error messages when visiting a website, this means that it has been marked. It is mostly recommended to not access the site as it might be blocked for some illegal reason. However, if you are certain that the website is legitimate and safe and you believe that it has been blocked by accident, then you can check out the given methods in this post to unblock and access the blocked or restricted website. There isn’t actually a straightforward way to remove the restriction on the website or the DOT compliance. And it won’t matter what browser you use as you will still get the same error. Thus, the best way to go about this issue is for you to bypass the ISP restriction. But before you proceed, keep in mind that the ISPs (Internet Service Providers) can block any website when a request goes through their servers.

Option 1 – Try changing the DNS

If the request to access the website does not go through the ISP’s DNS server, you might have a chance in accessing it by changing your DNS settings. You can try using the Google Public DNS.

• Tap the Win + R keys to open the Run dialog box.
• Then type “inetcpl.cpl” in the field and hit Enter to pull up the Internet Properties.
• After that, go to the Connections tab and select the LAN settings.
• From there. Uncheck the “Use a Proxy Server” option for your LAN and then make sure that the “Automatically detect settings” option is checked.
• Now click the OK and the Apply buttons.
• Restart your PC.

Note: If you are using a third-party proxy service, you have to disable it.

Option 2 – Try to install a Proxy Extension

You could also try installing a Proxy extension or Proxy software as it could also help you access the website you are trying to open as it allows you to access the blocked websites by routing the request through their server. Aside from that, it can also hide it from ISPs to make them look like the content is coming from the proxy servers.

Option 3 – Try using a VPN connection

There are instances when the network that your computer is logged on might have blocked your access to the website you are trying to open and so to fix it, you can try to use a VPN connection. There is a lot of free VPN software out there but just make sure that you install a trusted one. Once you’ve connected using VPN, try to open the website again and see if you can now access it.

Option 4 – Check the Windows Host file

You can also try to cross check the Windows Hosts file to find out if the website you are trying to open has been blocked because if it is, then it’s no wonder why you’re getting the ERR CONNECTION TIMED OUT error in Chrome. There are instances when some third party application modifies the file and add some websites to the block lists. So if the website is indeed blocked, you need to remove it from the list.

Option 5 – Try to contact your ISP

If none of the options given above worked, then you can try to contact your ISP as there are times when DOT clears a website, the ISPs are still blocking it. Thus, it’s probably better if you reach out to them and ask them to unblock the website from their end.

If you suddenly find the middle mouse button not working as you use it on your Windows 10 computer, then you’ve come to the right place as this post will provide some suggestions that can help you fix the issue. This kind of problem can affect your experience in using your computer as the middle mouse button helps you in scrolling through long web pages and screens with a lot of data. So if that stops, you will end up using your keyboard instead which is kind of a hassle compared to using the middle mouse button. It is possible that this problem could have something to do with either the hardware or software. To isolate the possibility of a hardware failure, you can try to connect the mouse to a different computer and see if it works just fine there or if it still has the same problem. If the mouse works properly on a different computer, then the issue is software-related. It is possible that a software update, especially gaming software, could have been misconfigured in a way that the middle button does not respond like it’s supposed to. To resolve the problem, you might want to try reinstalling or updating the mouse drivers or run the Hardware and Devices troubleshooter. You can also install OEM-specific mouse drivers or modify some entries in the Windows Registry.

Option 1 – Reinstall or update the Mouse driver

The problem may be caused by a corrupted or an outdated mouse driver. To fix it, you have to update or reinstall the mouse driver. How? Follow these steps:

• Open the Devices Manager from the Win X Menu.
• Then locate the Mouse and other pointing devices and right-click on the mouse driver to open the Properties.
• After that, switch to the Driver tab and click on the Uninstall Device button.
• Follow the screen option to completely uninstall it.
• Finally, disconnect the mouse and plug it back in to reinstall the mouse driver.

Note: You can install a dedicated driver on your computer in case you have it or you could also look for it directly from the website of the manufacturer.

Option 2 – Try running the Hardware Troubleshooter

The next thing you can do to fix the problem is by running the Hardware Troubleshooter. Although it won’t make much of a difference, there’s still a possibility that it could automatically fix the problem with these function keys. To use it, refer to these steps:

• The first thing you need to do is click on Start and then on the gear-like icon to pull up the window for Settings.
• After opening Settings, look for the Update and Security option and select it.
• From there, go to the Troubleshoot option located on the left-hand side of the list.
• Next, select Hardware and Devices from the list and open the Troubleshooter and run it. Once it is doing its job, wait for it to complete the process and then restart the system.
• After the system restarts, check if the problem’s now fixed. If not, refer to the next option given below.

Option 3 – Try to install OEM specific mouse drivers

Aside from updating or reinstalling the mouse drivers, you might also want to try installing OEM-specific mouse drivers. When you install Windows, it will use a generic driver for all its components. The disadvantage of generic drivers for the mouse is that it limits its functionality. In fact, some also configure the middle mouse button to respond to specific action which does not work without the correct drivers. In such cases, you need to visit the website of your computer’s manufacturers to download and install the latest drivers and then open the software and configure it the way it was before. Keep in mind that some OEMs also offer gestures, so you also have to check on that.

Option 4 – Try to modify some entries in the Registry

If a Windows Update is the one that caused the problem, you could correct it by making some modifications in the Registry but before you proceed, make sure that you create a System Restore point first.

• Tap the Win + R keys to open the Run utility.
• Then type “Regedit” in the field and hit Enter to open the Registry Editor.
• Next, navigate to this registry path: HKEY_CURRENT_USERControl PanelDesktop
• After that, double click on the “WheelScrollLines” entry on the right pane to open its Properties.
• Now change its value data to “3” and exit the Registry Editor and then see if the issue with the middle mouse button is fixed or not.

If the Diagnostic Data level in your Windows 10 computer is configured manually to the non-default security setting of zero and you’ve encountered an error code of 0xc0000005, read on as this post will guide you in fixing the problem with the Remote Access Connection Manager Service. In relation to error 0xc0000005, you might also encounter an error in the Application section of Windows Logs in the Event Viewer, along with the Event ID 1000 which would most likely have a reference of “svchost.exe_RasMan” and “rasman.dll”. Before you troubleshoot the problem, keep in mind that the Remote Access Connection Manager or RasMan service is the one that manages dial-up and VPN connections from the computer to the internet as well as other remote networks. Each time you connect, the Services dials the connection or sends out a request for a VPN connection. However, the error 0xc0000005, only occurs when a VPN profile is configured as “Always On VPN or “AOVPN” connection with or without a device tunnel. There are several options you can check out to resolve this error, you can try to install the KB Update 4505903 or fix it via Group Policy. You could also try to enable Telemetry from the Settings app or enable it via Registry Editor. For more information, make sure to check out the provided options below.

Option 1 – Try installing the KB Update 4505903

The first thing you can do to fix the problem is to make sure that you’ve already installed the KB Update 4505903 in your computer. If not, then you have to go to Settings > Update & Security > Windows Update and from there select the Check for updates link. You need to get the standalone package if you are using the Microsoft Update Catalog to update your computer and for that, you have to the website of the Microsoft Update Catalog. On the other hand, if you are using the Windows Server Update Services or WSUS, then you can just manually import the KB Update 4505903 into WSUS.

Option 2 – Try to enable Telemetry in the Group Policy and run the RASMAN service

The next thing you can do to fix the problem is to enable Telemetry via Group Policy and then run the RASMAN service. To do that, follow these steps:

• Tap the Win + R keys to open the Run dialog box and type “gpedit.msc” in the field and hit Enter to open the Group Policy Editor.
• Next, navigate to Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds > Allow Telemetry.
• After that, open the policy and select one of the security levels like Basic, Enhanced, and Full.
• Then click on the Apply and OK buttons to save the changes made and close the Group Policy Editor.
• Once one, open the Run dialog box again and type “services.msc” in the field, and hit Enter to open the Windows Services Manager.
• From there, look for the Remote Access Connection Manager Service and restart it. And then check if it resolved the problem or not...

Option 3 – Try enabling Telemetry via Settings

• Tap the Win + I keys to open the Settings app.
• Next, go to Privacy > Diagnostics and Feedback and select Basic or Enhanced under the Diagnostic data.
• After that, tap the Win + R keys to launch Run and type “services.msc” in the field, and hit Enter to open the Services Manager.
• From there, look for the Remote Access Connection Manager Service and restart it.

Option 4 – Try to enable Telemetry via Registry Editor

• Launch the Run utility and type “regedit” in the field and tap Enter to open the Registry Editor.
• Then navigate to this path: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsDataCollection
• From this path, look for “AllowTelemetry” and double click on it.
• Now enter the values, 1, 2, 3 for Basic, Enhanced, Full, respectively.
• If you can’t find AllowTelemetry, then just create a DWORD (32-bit) and name it “AllowTelemetry” and edit its value.
• Once done, exit the Registry Editor and restart the Remote Access Connection Manager Service from the Services Manager.

The error 0x0000001 also known as APC_INDEX_MISMATCH is one of the fatal errors that users encounter upon starting their computers. This error appears when there is a sequence mismatch in the driver or system file when it is disabling or re-enabling Asynchronous procedure calls. The mismatch happens maybe because of a virus or malware attack, not shutting down your computer properly and incomplete installation of the system files. There are many ways to fix this error. The easiest way is to download a repair utility program. The use of these programs perfectly fits those that are not so technical. All you have to do is download the program and install it on your computer. As soon as it is installed, the program will now scan and diagnose your computer for any errors. After it identifies the errors, it will then repair your PC through either manual or automatic tools. To those who are techie and enjoy the manual resolution, you may take advantage of Microsoft’s analyze debug extension which tells you the cause of the error. After determining the cause then you can now start fixing the error. Check if Hardware is functioning properly. If the cause is due to a hardware malfunction, you will have to make sure that all the pieces you are using are working. All the wires should be attached to their respective ports. Not only that, but you also must make sure that before installing the hardware, it is compatible with the Windows version that is installed into your computer. Use Compatible software. If the problem was caused by software or a driver, you can uninstall and reinstall it. Always make it a rule that whenever you install a program or new software to your computer, make sure it is compatible with your operating system and never skip a step during the installation process. You also have to see to it that the program you are installing does not contain any viruses, malware, or spyware that can be harmful to your computer. Update your Drivers Regularly. In most cases though, the cause of the APC_INDEX_MISMATCH error are outdated device drivers. To resolve this, you will have to go to your Control Panel then look for Device Manager. As soon as you are in the Device Manager window, you can now see the different devices running on your computer. You right-click on each device and check the Properties.  In the Properties window, click on the Driver Tab and look for the date when it was last updated. You can then go to the manufacturer’s website and compare the dates. For a new Windows operating system, you no longer have to go to the manufacturer's website though. All you have to do is click on Update Driver and it will automatically search for updates online. Use a Genuine Operating System. There are also cases where the 0x0000001 error won’t allow you to access your computer. In this case, we have to suspect that the problem could be in your Operating system. To resolve this, you can reinstall your Operating System or update your current operating system. Only use a genuine licensed Windows Operating System because this will not only protect you from Malware and Viruses but it allows you to get all the recent update available from Microsoft. Update your Windows 10 regularly by going to Settings > Windows Update > Check for Updates. You may also turn on the Automatic Update by going to the Advanced options is found on the Windows Update Page. You can always get help online but it really helps to know the basics and determining the root cause of the error.

New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:

• Stealing instant messenger messages;
• Stealing instant messenger database files (if the root is available);
• Inspecting the default browser's bookmarks and searches;
• Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
• Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
• Inspecting the clipboard data;
• Inspecting the content of the notifications;
• Recording audio;
• Recording phone calls;
• Periodically take pictures (either through the front or back cameras);
• Listing of the installed applications;
• Stealing images and videos;
• Monitoring the GPS location;
• Stealing SMS messages;
• Stealing phone contacts;
• Stealing call logs;
• Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.