Arc browser’s Windows launch targeted by Google ads malvertising

Cybercriminals placed ads that appeared to link to the official Arc website but redirected users to malicious, typo-squatted domains.

These sites provided trojanized installers that infected users with malware, including a final payload identified as 'JRWeb.exe.' The malware used MEGA's API for command and control, stealing user data.

The infection method also involves injecting Python code into msbuild.exe, which queries an external site to retrieve commands for execution.

🔗 BleepingComputer
🧑‍💻 @agamtechtricks

LAVA Mobile's source code and database has been leaked!

Someone anonymous has leaked LAVA Mobile's source code and database, which includes:
- A device and vendor tree of hammerhead (Nexus 5)
- Source code of apps
- Framework repositories
- LAVA BPMS (which looks like their admin site, and the database includes the details of employees and distributors, some internal excel files, etc.)
- and more

We do not know who has leaked this, and the person who shared this leak with us is not interested to share this with anyone.

The images of the folder names have been attached.

This really looks like some precious internal data, which should never have been leaked. Looks like LAVA has some really bad privacy measures to protect their data, and the database is not encrypted as well.

ℹ️ Credits for sharing this leak to us: @w0lfrm

🧑‍💻 @agamtechtricks

Google Play Store begins highlighting apps that let you delete your account

Google Play Store has begun surfacing the “Account deletion available” badge in the Data Safety section within the App listings.

Since December 2023, Google has been pushing developers to include information about app account deletion in their store listings. Developers can request an extension until May 31, 2024, after which non-compliant apps may face "additional enforcement actions" in the future, such as removal from the Google Play Store.

🔗 AndroidAuthority
🧑‍💻 @agamtechtricks

Microsoft has released a Microsoft Copilot Beta bot on Telegram

This bot is verified and currently in beta.

To use it, you need to send your number linked to your Telegram account. According to the bot, it requires the number for a quick one-time verification and doesn't store your number.

The usage limit of the bot is: 30 turns per day

The bot shows message suggestions and responses as well. However, it does not support Image Generation yet.

Don't want to share your number with the bot? Check this guide

🌐 @CopilotOfficialBot
🔗 Microsoft

🧑‍💻 @agamtechtricks