Cartoonize review

The first major update for Windows 11, 22000.65 has brought some bug fixes and some new features. The previous update was just a bunch of small fixes but this time Microsoft has brought much more with this one.

Bug and security fixes:

• Patch for the PrintNightmare vulnerability.
• Taskbar icons not displaying after you rotate the screen back and forth.
• Date and time not following format settings.
• Contrast issues with File Explorer title bar
• Search dropping the first keystroke when you press the Windows key and type
• Blurry windows in ALT + Tab

Besides bug and security fixed newest update has also brought us some functional changes:

• The start menu can no longer be moved from center
• A search box appears at the top of the Start menu.
• Taskbar appears on secondary monitors.
• The refresh option appears on the jump list when you right-click the desktop. It was on the "Show more options" list before.
• New look for certain dialog boxes such as "battery low" or "display change"
• New snap layouts for portrait mode screens.
• Option to troubleshoot sound problems when you right-click the volume icon.
• Power mode settings on Power & battery settings menu.
• Right-clicking .ps1 files offers a "Run with PowerShell" option.
• New GIFs in the emoji panel in China

Honestly, I really like a search box on top of the start menu but really dislike the option to move it to left, I am sure that there are a lot of users who would feel more like at home if they could still move and set Windows to function and work how they want. It is very strange to me that Windows 10 was made to be so user-focused and been able to be user specific and Windows 1 takes most of these things away. I am not sure why Microsoft is going this way but I cannot really see how moving the taskbar on left is a programming issue or why it is wrong for example.

If you got an error message saying, “Folder Redirection Failed, Failed to build the list of regular subfolders, Access is Denied” after you configured a new Group Policy Object or GPO which redirects User folders to a new network share or when you click on Reset default location under the Windows File Explorer or Folder Options, then you’ve come to the right place as this post will show you how to resolve this kind of error on your Windows 10 computer. Follow the given options below carefully to fix the “Folder Redirection Failed” error.

Option 1 – Take Ownership of the folder

If you are not able to access the folder could be one of the reasons why you’re getting the “Folder Redirection Failed” error and so you need to take ownership of the folder to resolve the problem. Before you proceed, make sure that your account is an admin account.

• First, locate the concerned folder and right-click on it then select Properties.
• Next, click on the Edit button in the Properties window and click OK to confirm if you got a User Account Control elevation request.
• After that, select user/group from the permission windows or click on the Add button to add another user or group. It would be best if you add “Everyone” to give permission.
• Then check “Full Control” under the “Allow” column to assign full access rights control permissions.
• Now edit the permission to Full Control for “Everyone”.
• Click OK to save the changes made and then exit.

Option 2 – Try to add Authenticated Users or Domain Computers

Make sure that the Folder Redirection group policy removal option is set to “Redirect the folder back to the user profile location when the policy is removed” when using the Folder Redirection. After that, you have to add Authenticated Users group with the “Read” permissions on the Group Policy Objects or GPOs. And if the Domain computers are part of the group of “Authenticated Users”. Note that by default, the “Authenticated Users” have these permissions on any new Group Policy Objects or GPOs. Once again, you have to add just “Read” permissions and not “Apply Group Policy” for “Authenticated Users”. Furthermore, to fix the “Failed to build the list of regular subfolders” errors, here are some options that could help.

Option a – Try to clear disk space

You might have to check if your disk is running out of space because if it is, then it will fail to create a list abruptly. And so you need to free up some disk space. You can either check on the files manually especially if you tend to keep your files at random places in your disk drive.

Option b – Find the Target route

You need to find the target route of the folder and then restore it if you are getting the “Failed to build the list of regular subdirectories” when you try to relocate the folder to the original location.

Option c – Try to change Ownership/Reset Defaults for all the User folders

If the “Failed to build the list of regular subdirectories” error pops up when you are trying to move a large number of files from one location to another, then you need to change the ownership of the folders as pointed out earlier.

What is Error 3?

This is a type of Google Chrome update error code. It indicates a failure to communicate with Google update. The error code is displayed in the following format:

‘Update server not available (error: 3)’

Solution

Error Causes

Error 3 may be triggered by several reasons. These include:

• You are running Vista/ 7 and you have configured Google Chrome to run as an administrator
• Google Update is not registered properly
• Registry issues

Further Information and Manual Repair

Here are some of the best and effective DIY methods to resolve error 3 on your PC without any professional help. You don’t need to be a technical whiz to try these methods.

Method 1

If the reason for the error cause is related to Google Chrome configured as administrator on your PC, then simply run it as a normal user. This is a common issue with Google Chrome auto-updating mechanism.

Method 2

If the problem still persists, then it is advisable to try re-installing Google Chrome. To do this, first, uninstall Google Chrome. Go to the start menu, control panel, and then program and features. Choose Add and Remove Programs and uninstall Google Chrome. To activate changes, reboot your system. Now reinstall Google Chrome by downloading it from Google Chrome’s official website.

Method 3

If error 3 is triggered because Google Chrome is not registered properly, then try this method to fix the issue.

1. First, verify that GoogleUpdate.exe exists in the location specified in the Windows Registry Editor. For this, go to the Start Menu and then type Regedit in the search bar.
2. Now click OK. The registry editor will appear. Now in the tree view on the left, navigate to the following directory:
3. HKEY_CLASSES_ROOTCLSID{2F0E2680-9FF5-43C0-B76E-114A56E93598}LocalServer32
4. Make sure the default value corresponds to the location of your GoogleUpdate.exe or GoogleUpdateOnDemand.exe file. Also, verify that these files are located in the given path.
5. For instance, if they are located in different locations, then right-click the default value and select Modify.
6. Enter the correct file path and use double quotation marks for example "C:\Documents and Settings%USERNAME%Local SettingsApplication DataGoogleUpdateGoogleUpdate.exe(or GoogleUpdateOnDemand.exe)"

Method 4

Error 3 may also pop up because of registry issues. These issues occur when the registry gets overloaded with obsolete and unnecessary files like cookies, internet history, bad entries, and junk files. In such an event, it is advisable to download Restoro This is a user-friendly and cutting-edge PC Fixer embedded with a registry cleaner. The registry cleaner removes all the obsolete files instantly and repairs the damaged registry thereby resolving all errors including error 3. Click here to download Restoro and resolve error 3.

You probably heard about switches for LAN but not a lot of people heard about KVM switches. So what exactly is KVM switch?

If we look at the name, it is a shortcut for Keyboard, Video & Mouse and the original idea was to have multiple computers but one keyboard, mouse, and monitor. These peripherals would be connected to the KVM switch and other computers could all use one set of these on the fly when needed.

The technology behind the switch is a little interesting since it will actively fake signals to other computers that are not using peripherals. Once they are switched to them the transition is smooth and not noticeable. In old days these switches were more important than today since on every mouse or keyboard disconnection you had to reboot the computer, and although today that is not the case CPU will still detect disconnection and on the next connection it will run through the ID of the device and try to use the existing driver and if peripheral was connected in other USB port, it will install the same driver but connect it to the new USB port.

This type of reconnection can slow down work and place unnecessary load on the CPU so that is why KVM will fake connection in order to make switching externals on the computer smooth and in nick of a time.

Modern KVM switch

These days modern KVM switches will offer you more options than just being able to switch between keyboard, mouse, and monitor. Modern switches now offer Lan, audio, and many more various options.

There are also different kinds of switches offering you only one option, like for example just a Video switch that will let you use one monitor on three computers and many more other specialized options.

Software switches

So far we talked about Hardware switches, a real device being able to take peripherals into it and switch computers on the fly. On the other line, we have software switch solutions that will have specific software installed on all computers and have it run at all times, and switching between them will be through specific software.

There are two very good and main advantages of using software solutions instead of a hardware one. First, of course, is the price, since the most popular Synergy is an open-source solution, completely free of charge. The second big advantage is that software switch is not limited to how many computers can you use. Hardware switches tend to go to a large number like 16 but if you have a large cluster of computers over a LAN, let's say 30 then the box solution might be difficult.

On the other hand software solution will switch only keyboard and mouse since each other computer will have to have some screen on it in order to work. Both solutions have their strong advantages and disadvantages and it is up to you to choose one that best suits you.

Conclusion

If you are multitasking with a lot of computers or just need your peripherals from time to time to connect to another machine then the KVM switch is something that you might find the use of. Just be aware that if you go for some cheap switch you might experience some lag on your peripherals, but if that is not a concern you can get hardware one for as low as $50 USD.

As you know, Windows Updates are essential for your operating system as it keeps it protected from potential threats, fixes bugs and improves your experience in using Windows 10. However, there are instances when Windows Updates also cause errors and one of them is the Windows Update Error 0x8024000B. One of the causes of this particular Windows Update error is that Windows was not able to read the Update Manifest file which is needed to install the Windows Updates. This means that the operation was canceled by either the service or the user. On the other hand, this error could also occur if you are not able to filter the results. When you encounter this error, you will see an error message that says, “WU_E_CALL_CANCELLED: Operation was canceled”. This indicates that the operation was canceled by the operating system itself. To resolve the Windows Update Error 0x8024000B, here are some suggestions you need to check out.

Option 1 – Try to run the Cleanup (Decline) Superseded updates PowerShell script

The first thing you can do to fix the Windows Update Error 0x8024000B is to run the Cleanup (Decline) Superseded updates PowerShell script. This is actually an easy fix since all you have to do is download and run it from the Microsoft Technet site. Once you’re done downloading and running the file, restart your computer and see if the error is fixed or not.

Option 2 – Try to rename the Spupdsvc.exe file

If the first option didn’t work, you can try renaming the Spupdsvc.exe file which is one of the reasons why you’re getting the Windows Update Error 0x8024000B.

• First, tap the Win + R keys to launch the Run utility.
• Next, type the following command and hit Enter to execute it in cmd:

 /c ren %systemroot%System32Spupdsvc.exe Spupdsvc.old

• The command you entered will rename the troublesome “Spupdsvc(.)exe” file to “Spupdsvc(.)old”.
• Now restart your computer after the command has been executed.

Option 3 – Try to restart various Windows Update-related services and components

You could also try to restart some Windows Update-related services to resolve the Windows Update error. Refer to the following steps to do so:

• Tap the Win + X key combination and select Command Prompt (Admin) to open Command Prompt with admin privileges.
• After opening Command Prompt, copy and paste each one of the commands listed below one by one and tap Enter right after you enter each command.
  • net stop wuauserv
  • net stop bits
  • net stop appidsvc
  • ren %systemroot%SoftwareDistribution SoftwareDistribution.bak
  • ren %systemroot%system32catroot2 catroot2.bak
• Once you’ve entered all the commands given above, they will stop all the Windows Update services that are running on your computer as well as clear the SoftwareDistribution folder, and reset the Catroot2 folder. Now you have to start all these Windows Update services you’ve just stopped by executing the following commands:
  • net start wuauserv
  • net start bits
  • net start appidsvc
  • net start cryptsvc
• After that, restart your computer and try to run the setup again, and see if the error is now fixed.

Option 4 – Try to run the Windows Update Troubleshooter

You should also try to run the built-in Windows Update troubleshooter as it could help you resolve the Windows Update Error 0x8024000B. To run it refer to these steps:

• Go to Settings and then click on Windows Update from the given menu.
• Next, click on the Troubleshoot option and select Windows Update from the given options to run the Windows Update troubleshooter.
• After that, follow the next on-screen instructions and wait until the process is completed, and check if the Windows Update Error 0x8024000B is fixed or not.

MSASCui.exe is a digitally signed file from Microsoft located in folder C:\Program Files\Windows Defender. It is a component of Microsoft Windows Defender Antispyware. This file is responsible for performing spyware scans. It is already installed in Windows Vista operating system. MSASCui.exe becomes an error code when it is found in another path. It is categorized as a Windows runtime error.

Solution

Error Causes

The cause of MSASCui.exe error is triggered by:

• Corrupt or damaged registry entries
• Virus Infection

The potential risks of MSASCui.exe error are:

• Slow PC performance
• Data loss

When this file becomes an error, it will display messages like:

“This application has failed to start to run on Windows because MSASCUI.exe cannot be found.” “Windows Defender cannot work properly and protect the Windows system effectively”

The message will keep popping up on your computer screen time and again.

Further Information and Manual Repair

When you experience an MSASCui.exe error on your PC, it is advisable to fix and repair it immediately before it causes serious damages to your system. Here are some DIY quick solutions to repair MSASCui.exe error:

Solution 1:

If the speed of your PC reduces significantly and you also see MSASCui.exe error message pop on your screen, then in this case it is advisable to uninstall the Windows Defender program from your PC. To do so, follow these instructions:

• First, open the Windows Task Manager by pressing the “Ctrl, “Alt” and “Delete” keys on the keyboard.
• Now click the ‘Processes’ tab. This will show the currently running processes on your system.
• Scroll down and click on “MSASCui.exe” and then end the process. This will stop the program from running on your PC.
• After this go to the start menu and double click on ‘My Computer’ and click on the C drive.
• Choose the option ‘Program Files’ and then click on the ‘Windows Defender’ folder.
• Now to delete this folder, right-click and select ‘delete’. This will uninstall the program, fix the MSASCui.exe error, and also improve the performance of your PC.

Solution 2:

If you find the MSASCui.exe file located in some other path, then this is an indication of a virus. In this case, it is recommended to run an antivirus program on your PC to scan and delete all viruses. If you don’t have an antivirus program already installed on your system, then you should download it. Once antivirus software is downloaded, simply run it to scan viruses and then click on delete to remove all the viruses on your system. This will help you resolve the MSASCui.exe error caused by malware on your PC right away.

Razer had some strange dives into stuff not really aimed at gamers and the gaming community overall like its Zephir smart mask and now it is venturing into the area of smartwatches teaming up with Fossil. I am not clear if this initiative was set in motion by Razer or Fossil and I really do not know why limited production numbers. Officially named RAZER X FOSSIL GEN 6 SMARTWATCH, this watch comes with the official following text on Razer's page:

Way more. Way faster. Way ahead of the game. Get time on your side with the limited-edition Razer X Fossil Gen 6 Smartwatch—only 1,337 pieces worldwide. Designed for the next generation of gamers, supercharge your style with customizable straps, dials, Razer Chroma™ RGB effects, and more.

Now, I am a fan of Razer and I like their products, mostly keyboards and mouse altho chair is also very good and in top of the product line in that field but I can not really stand behind this product and decision, and the only reason why I can not stand behind it is this 1337 (leet, or elite) a limited number of available pieces that is nothing more than a gimmick to sell watches at a higher price. Watch itself is not really bad, as a matter of fact, it has some solid hardware statistics.

Technical characteristics

Featuring a 1.28-inch AMOLED Display with 3 unique Razer watch faces (Analog, Text, Chroma*), 4 customizable Razer Chroma™ RGB effects, and 2 custom-designed, interchangeable straps, this Razer's baby is packing 44mm, Stainless Steel case with 22mm, straps. It runs on Wear OS by Google as an operating system of a choice and under software, it is packing Qualcomm Snapdragon Wear 4100+ CPU paired with 1GB of RAM and 8GB Storage. The display is running at 416x416 resolution with 326ppi. Watch input is with 2 configurable Push buttons, One rotating Home button, touchscreen, and voice. It has in it a loudspeaker, microphone, and vibration. Connection is via Bluetooth 5.0, GPS, NFC SE, and Wi-Fi. The battery can in their word work for 24 Hr + multi-day Extended Mode **Varies based on usage and after updates install**. USB data cable with magnetic dock snaps to split rings on the watch case back and spins 360 degrees for ease of use. Approximately half an hour to reach 80%. Sensors included in the watch itself are: Accelerometer, Altimeter, Ambient Light, Compass, Gyroscope, Off-body IR, PPG Heart Rate, SPO2. Smartwatch is water-resistant up to 3 ATM & it comes with preloaded apps like: Agenda, Alarm, Battery-Optimized Activity Mode, Calendar, Cardio Level Tracking, Cardiogram, Contacts, Enhanced Phone Dialer App, Google Assistant, Google Fit (Workout, Heart Rate, Goals, Breathe), Google Maps, Google Pay™, Google Play Store, Nike Run Club, Noonlight, Smart Battery Modes, Spotify, Stopwatch, Timer, Translate, Wellness Apps with Sleep Tracking.

Conclusion

Watch is Dropping on 01.10.22, 8 AM PST which is 4 days from now and altho it is an interesting device with solid hardware I can not stand behind it due to its limited edition numbers and with $329 price tag. With the same amount of money, you can get yourself Samsung or Apple watch with more features packing. But of course, that is just my personal preference and if you want to own this limited edition Razer smartwatch, go for it.

Although there are several Windows 10 devices that are touchscreen-based, the mouse still remains to be an important part of usage for many users especially the ones who do some hardcore work on their Windows 10 computers or laptops. If you’re one of the users who often edit images or videos either for fun or work, using Touch is difficult as it’s a bit hard to drag on the screen so nothing really beats the mouse. However, as awesome as the mouse is, there are times when you encounter issues while using it. One of these issues is when your mouse pointer lags or freezes so in this post, you can try out a few tips that can help you resolve the issue.

Option 1 – Clean both the mouse and the mousepad

It might sound silly but it is a fact that either the mouse or the mouse pad themselves is the problem. Even though mouse balls are long gone, the laser lights that replaced them are not immune to some dirt which is why you need to clean the bottom of the mouse and then clean the mouse pad afterward.

Option 2 – Try changing the USB port

This is another basic thing you can do to resolve the problem since there are instances when USB ports where either your mouse is connected have gone rogue so you need to try switching to a different port and then see if the problem’s fixed or not.

Option 3 – Switch back to the default settings of the mouse

Switching your mouse back to its default setting is always a good idea since you are dealing with a pointer issue. To go back to the default settings of the mouse, here’s what you have to do:

• Click on Mouse and Touchpad.
• Next, click on Additional Mouse Settings located in the right pane.
• After that, click on the “Use Default” option under the Pointer tab.
• Then click on Apply and OK to save the changes made.

Option 4 – Try disabling Smooth Scrolling

You have to slow down both the horizontal and the vertical scrolling of the mouse in the settings which are called “Smooth scrolling”. This will help if you think that the websites you are visiting scroll up and down way too fast.

Option 5 – Try to update or rollback mouse drivers

If the first few options didn’t work for you, then it’s time to either update or roll back the mouse drivers. It is most likely that after you updated your Windows computer that your driver also needs a refresh. On the other hand, if you have just updated the mouse driver then you need to roll back the driver. Whichever applies to you, refer to the steps below. The problem may be caused by a corrupted or outdated driver. So you have to update or reinstall the mouse driver. How? Follow these steps:

• Open the Devices Manager from the Win X Menu.
• Then locate the Mouse and other pointing devices and right-click on the mouse driver to open the Properties.
• After that, switch to the Driver tab and click on the Uninstall Device button.
• Follow the screen option to completely uninstall it.
• Finally, disconnect the mouse and plug it back in to reinstall the mouse driver.

Note: You can install a dedicated driver on your computer in case you have it or you could also look for it directly from the website of the manufacturer.

Option 6 – Try to check if your laptop is turning off the mouse

In case you don’t know, the power management can turn off the devices that are not in use to save battery power if you use a laptop. And this can also happen on USB-based devices like the mouse. Thus, you need to verify if your laptop is turning off the mouse.

• Go to Device Manager > Universal serial bus controllers > USB Root Hub > Power Management.
• After opening Power Management, uncheck the “Allow the computer to turn off this device to save power” option.
• If you have lots of USB Root hubs, you can try changing each one of them and see if it works or not.

Option 7 – Try updating the Graphics Drivers

• Tap the Win + R keys to launch Run.
• Type in devmgmt.msc into the box and tap Enter or click OK to open the Device Manager.
• After that, a list of device drivers will be displayed. If you see a red or yellow sign that shows up against the driver, right-click on the driver’s name and select “Update Driver Software” or “Uninstall”. And if you find any “Unknown device”, you need to update it as well.
• Select the “Search automatically for updated driver software” option and then follow the instructions to complete the process.
• Restart your PC.

Note: You also have the option to go directly to the website of your graphics card manufacturer and check if there’s a new update – if there is, download it.

Option 8 – Try setting the No Delay option for Touchpad

If you are using a laptop that’s touchscreen-based, you can try setting the delay to zero in the settings. To do so, simply go to Settings > Devices > Mouse and Touchpad. From there, you can set the delay before clicks to “No Delay”.

As we near the end of 2022 we look at the current best antivirus software for popular platforms, why they are the best, and why you should get them.

Avira, a great free Antivirus

Avira has been around a long time with its free antivirus version of the larger protection suite. It had its ups and downs but the latest versions are really great. With high-speed scans and low system impact, Avira antivirus is really one of the best free antivirus software currently on the market.

The software itself has also received UI & UX updates making it straightforward and easy to use. The virus scanning engine is the same as in paid version that ranks among the top engines in the world for this type of work. The package also gives you some great browser protection and a good firewall as well, there is really no excuse to skip on this if you want a free solution.

The only thing that we would say is not so great in Avira is reporting some false positives, sometimes even for MS updates, it is rare but it can happen.

Malwarebytes, a powerful Windows antivirus

Malwarebytes Premium is easy to use, simple antivirus solution that shies away from complicated UI, and simply put, it just works. Its scanning engine is well-known and places among the top and best in the world often finding some malware that other can miss.

Another great thing is its integration with Windows itself, it is one of the rare applications that can and will work incredibly well beside your typical Windows protection tools so you can have both of them running at the same time.

Installation and running are really simple and every typical PC user will find it as easy as walking in the park. On the other hand, sadly system impact is a little high and it will have issues running on lower-end systems due to its memory requirements.

Intego MAC Internet Security X9, the best Mac antivirus

Gone are the days when MAC had no virus issues, since MAC rose in popularity among the users, also rose the number of viruses and malware. The system itself has some great protection built it inside but for more security and better control of it, you will need a third-party dedicated solution.

Intego was made by Mac antivirus experts who have been building this kind of software last 25 years. The interface is easy to use and premade presets are really helpful, but the security suite can also be customized to fit your needs and desires.

Since this is only available as a security suite, you are getting a firewall and some other security tools along with your antivirus that will run as a part of it.

The bad side is that scans can sometimes run slow, most of the time they are OK in terms of speed but occasionally they can switch to slower speeds and impact scanning time to some annoying times. Also, there is no webcam protection nor VPN service included where others on this list have them.

Bitdefender mobile security: best Android protection

While protection is not only needed for your gaming or workstation, software suites that are dealing with mobile and tablet security exist. The best of them is the Bitdefender antivirus mobile suite. Low on system resources and low on performance impact with the really great virus detection rate Bitdefender is at the top of suites for your phone.

Consistent high virus detection packed with low battery impact is great but the suite comes with tons of other tools as well like browser security tools, email protection, and real-time link and notification protection.

The application will always scan each file and newly installed application in the background and alert and cut off any found threat. App itself is easy to install and use and most of the time it will do everything in the background for you but offer you customization if you need it.

The package also includes VPN and application lock that will let you protect the critical applications from being accessed as well as an online account scanner. Anti-theft and anti-loss tools, which allow you to find, remotely lock or wipe a stolen or lost device, add yet another layer of protection.

One thing that is missing from this great package is fraudulent call protection. Newer Android phones have this feature inside but it would be nice if Bitdefender had it as well.

Bitdefender, the best antivirus software

Now that we have covered specific cases of each platform, there is one player that has all of them covered and with a quality product, that player is BitDefender and it is great. Personally, this is my protection suite of choice and as I type this it is running in the background.

Bitdefender has it all, low system impact, as a matter of fact, it is one, if not, the lowest performance impact engine on the market currently and that is packed with a great and highly consistent virus & malware detection suite. Along with real-time malware protection, browser security, and anti-spam tools, you also get anti-phishing defenses, ransomware protection, and a strong firewall.

Bitdefender scores are very high in both the zero-day threat and real-world protection tests at AV-Test, an established organization that tests antivirus software. Despite being tested against tens of thousands of well-known and widespread malware threats, the software consistently achieves a 100% blocking rate.

The suite also comes with a restricted free VPN and with parental controls as well. Webcam and microphone protection are also included in the suite and on top of all, it has great pricing plans and constant discounts.

BitDefender is really a great package and it might sound too good, but after years and years of personally using it I have not had single malware or virus issue, the only thing that I would put as a negative is that system is severely slowed down when system scans are performed so be sure to run or schedule them when you are not using your computer. This, of course, can put some people off and I will admit it is a serious drawback but for me, the security of my workstation is more important than leaving the computer for 20 or so minutes in order to perform a full scan of the system.

New malware with extensive spyware capabilities steals data from infected Android devices and is designed to automatically trigger whenever new info is read to be exfiltrated. The spyware can only be installed as a 'System Update' app available via third-party Android app stores as it was never available on Google's Play Store. This drastically limits the number of devices it can infect, given that most experienced users will most likely avoid installing it in the first place. The malware also lacks a method to infect other Android devices on its own, adding to its limited spreading capabilities. However, when it comes to stealing your data, this remote access trojan (RAT) can collect and exfiltrate an extensive array of information to its command-and-control server. Zimperium researchers who spotted it observed it while "stealing data, messages, images and taking control of Android phones."

What happens when malicious software is installed

"Once in control, hackers can record audio and phone calls, take photos, review browser history, access WhatsApp messages, and more," they added. Zimperium said its extensive range of data theft capabilities includes:

• Stealing instant messenger messages;
• Stealing instant messenger database files (if the root is available);
• Inspecting the default browser's bookmarks and searches;
• Inspecting the bookmark and search history from Google Chrome, Mozilla Firefox, and Samsung Internet Browser;
• Searching for files with specific extensions (including .pdf, .doc, .docx, and .xls, .xlsx);
• Inspecting the clipboard data;
• Inspecting the content of the notifications;
• Recording audio;
• Recording phone calls;
• Periodically take pictures (either through the front or back cameras);
• Listing of the installed applications;
• Stealing images and videos;
• Monitoring the GPS location;
• Stealing SMS messages;
• Stealing phone contacts;
• Stealing call logs;
• Exfiltrating device information (e.g., installed applications, device name, storage stats).

How does it work?

Once installed on an Android device, the malware will send several pieces of info to its Firebase command-and-control (C2) server, including storage stats, the internet connection type, and the presence of various apps such as WhatsApp. The spyware harvests data directly if it has root access or will use Accessibility Services after tricking the victims into enabling the feature on the compromised device. It will also scan the external storage for any stored or cached data, harvest it, and deliver it to the C2 servers when the user connects to a Wi-Fi network. Unlike other malware designed to steal data, this one will get triggered using Android's contentObserver and Broadcast receivers only when some conditions are met, like the addition of a new contact, new text messages, or new apps being installed. "Commands received through the Firebase messaging service initiate actions such as recording of audio from the microphone and exfiltration of data such as SMS messages," Zimperium said. "The Firebase communication is only used to issue the commands, and a dedicated C&C server is used to collect the stolen data by using a POST request."

Camouflage

The malware will also display fake "Searching for the update.." system update notifications when it receives new commands from its masters to camouflage its malicious activity. The spyware also conceals its presence on infected Android devices by hiding the icon from the drawer/menu. To further evade detection, it will only steal thumbnails of videos and images it finds, thus reducing the victims' bandwidth consumption to avoid drawing their attention to the background data exfiltration activity. Unlike other malware that harvests data in bulk, this one will also make sure that it exfiltrates only the most recent data, collecting location data created and photos taken within the last few minutes. If you would like to read more helpful articles and tips about various software and hardware visit errortools.com daily.