A new info-stealing malware is running active campaigns against Windows users, according to the researchers. Identified as Statc stealer, the malware can pilfer various types of sensitive information, including browser details and stored data.
Statc Stealer Threatens Windows Systems
In a recent report, researchers from Zscaler ThreatLabz have shared insights about a newly detected malware targeting Windows systems.
As elaborated, the malware, identified as Statc stealer, constitutes a new family of malware exhibiting diversified evasive and data-stealing capabilities.
Specifically, Statc is a C++ malware with effective detection capabilities for reverse engineering and sandbox environments. The malware spreads via malvertising, often mimicking legit advertisements to trick users. Clicking on an ad downloads the malware dropper on the device, where it further downloads a decoy PDF installer and another binary file that downloads the Statc payload via PowerShell script.
Once established on the device, Statc begins performing data-stealing activities, pilfering browser details and stored data from the browsers, including login credentials and crypto wallets, transmitting all stolen data to its C&C server.
If the user stored personal details in the browser for auto-filling forms, then the user also risks identity theft due to this activity. The malware can target various popular Windows browsers, such as Google Chrome, Mozilla Firefox, Microsoft Edge, Opera, Brave, and Yandex.
Alongside browser data, the malware also exploits Windows Process Monitor (ProcMon) component to steal other information, such as Anydesk and Telegram data.
After stealing the desired information, it stores the data as text files in the Temp folder, from where it transmits to the C&C after encryption.
Besides data stealing, Statc malware also exhibits evasive capabilities to bypass security controls.
While the malware presently targets Windows systems only, it remains unclear if the attackers plan to enhance Statc’s capabilities to target other systems as well.
As always, the key to evading Statc and similar malware infections is to avoid clicking on irrelevant links, advertisements, and unsolicited messages. Moreover, users must equip all their devices with robust anti-malware programs.
Fake Chrome Browser Update Scam: Trellix exposes a scheme using fake Chrome browser updates to sneak NetSupport Manager onto victim computers, granting cybercriminals control and data access.
Possible SocGholish Link: While resembling SocGholish, differences in tools raise doubt about a direct connection, highlighting evolving tactics.
Compromised Sites as Launchpads: Compromised websites act as launchpads for the attack, affecting diverse sectors, including government and finance.
Deceptive Path to RAT: Victims fall for the fake update, unknowingly downloading a malicious JavaScript file, “Browser_portable.js,” which activates NetSupport Manager.
Urgent Need for Vigilance: Trellix’s discovery underscores the critical importance of global threat intelligence and advanced security solutions in countering evolving cyber threats.
Cybersecurity firm Trellix has identified a new cyber campaign exploiting unsuspecting victims by disguising itself as a legitimate Chrome browser update. The deceptive scheme employs a malicious remote administration tool (RAT) known as NetSupport Manager RAT, allowing threat actors to gain unauthorized access to victims’ computers and seize control.
Moreover, the Trellix Advanced Research Center uncovered striking similarities to a previously reported SocGholish campaign, although a definitive connection remains elusive. Yet, concrete links between the two campaigns remain scarce.
The campaign, which came to light in late June 2023, exploits compromised websites as a platform for delivering the fraudulent Chrome update. Victims are lured into downloading and installing the fake update, unwittingly inviting the NetSupport Manager RAT onto their systems. The malware allows cybercriminals to pilfer sensitive information and manipulate victim computers to their advantage.
The modus operandi of the campaign involves injecting compromised websites with a carefully crafted HTML script tag that retrieves JavaScript content from the attackers’ command and control server.
This technique, seemingly automated, hinges on the unsuspecting victims falling for the fake browser update ruse. The success of the scheme relies heavily on the prevalence of compromised websites.
Trellix researchers found evidence of this campaign infiltrating a Chamber of Commerce website, with traffic from governmental entities, financial institutions, and consulting services. Although the site has since been cleansed of the injected script, it suffered compromise for at least one day.
The deceptive journey commences when victims encounter the injected script on a compromised website, leading them to a fake browser update page. This manipulation, which directs users to unwittingly install the NetSupport RAT, isn’t novel; similar tactics have been documented in past instances like the SocGholish campaign.
However, it’s the tools employed in the present campaign that stand apart from SocGholish. SocGholish exploited PowerShell with WMI capabilities to facilitate RAT download and installation. In contrast, the current campaign utilizes batch files (.BAT), VB scripts, and the Curl tool to carry out its malevolent operations. The use of these distinct tools underscores the evolving strategies of cybercriminals.
Should a victim succumb to the allure of the fake browser update and click on the “Update Chrome” link, a ZIP archive named “UpdateInstall.zip” containing a malevolent JavaScript file, “Browser_portable.js,” is initiated for download. This script serves as a downloader for the ensuing stage of the attack.
Upon extraction of the NetSupport Manager RAT via the downloaded 7-zip utility, execution transpires via a scheduled task, orchestrated by the “2.bat” batch file. Furthermore, this batch file also engenders persistence for the RAT, ensuring automatic execution upon system startup.
The malevolent configuration file (“client32.ini”) for the RAT reveals a gateway address set to 5.252.178.48. At this juncture, with the RAT firmly entrenched within the victim’s system, threat actors possess substantial control, enabling them to execute further malware deployment, data exfiltration, network reconnaissance, and lateral movement.
The infection chain (Screenshot: Trellix)
In conclusion, this campaign serves as a reminder that threat actors consistently exploit successful techniques to advance their malicious agendas. The deployment of familiar lures, such as the phony browser update, underscores the persistent nature of these attacks.
The proliferation of RATs, while not always updated, showcases their enduring utility for cybercriminals. As attackers adopt increasingly sophisticated tactics, the challenge of detection intensifies. The utilization of native Windows scripting languages, like VBScript and Batch script, combined with tools like Curl, exemplifies their adaptability and innovation.
Joseph Tal, Senior Vice President of Trellix’s Advanced Research Center, cautioned that the prevalence of these NetSupport RAT attacks underscores the need for comprehensive global threat intelligence and innovative security solutions.
Commenting on this, Dr Klaus Schenk, senior vice president, Security and Threat Research at Verimatrix told Hackread.com that “The reports of threat actors exploiting fake Chrome browser updates to spread the NetSupport Manager Remote Access Trojan are concerning. While the attack vector of abusing browser updates is common, this particular campaign stands out for its sophistication and targeting. The attribution to the SocGholish group, known for cyber espionage aligned with Russian state interests, makes this a high-priority threat.“
“While the details connecting this attack to SocGholish are inconclusive, the examination by Trellix seems reliable. The threat actors clearly spent time crafting a credible lure using Chrome’s market dominance. I recommend to wait a bit to see if this attacks manifests — but it would be a good idea to prioritise incident response and user education to detect and mitigate this threat,” Tal added.
“Even though users must still click a malicious link, the sophistication of this attack makes it likely to evade defenses. We should continue monitoring for new developments, but organisations should act swiftly to harden systems, update browsers, and inform personnel about this threat,” Tal recommend.
Nevertheless, the continually evolving threat landscape necessitates a proactive and holistic approach to cybersecurity, particularly as more enterprises rely on Chromium-based browsers for their web applications.
Netflix Games is a masterclass in patience and perseverance. The platform was slow to pick up speed with less than 1% of its audience using it. However, it’s been hard at work trying to make it a compelling platform. Now, Netflix announced that Netflix Games are expanding to more platforms. Get ready to play your favorite Stranger Things game with a mouse and keyboard.
In case you don’t know, Netflix has been pushing to have its own gaming platform, and that’s Netflix Games. It’s rather different from other platforms, however. If you have an active Netflix account, then you’ll be able to download a limited list of exclusive games from the Google Play Store or the iOS App Store. So, it’s not really a platform, but the company seems to be leaning in that direction.
The streaming giant even purchased different studios to produce games. If that’s not enough, last year, Netflix partnered with Ubisoft to make an exclusive Assassin’s Creed game.
Now, Netflix Games is expanding to more platforms
For the time being, you can only play Netflix games on your phone or tablet. However, the company wants to change that. Netflix announced today that it’s expanding Netflix Games to more platforms. Along with phones, you’ll be able to play your games on your computer by using your browser. When you do this, you’ll be able to play your games using your mouse and keyboard.
That’s not all, as Netflix really wants this available everywhere. The company also stated that you’ll be able to play on select smart TVs as well. This includes Amazon Smart TVs, Google Chromecast devices, Roku TVs, LG TVs, Samsung TVs, Nvidia Shield TVs, and Walmart ONN TVs. Interestingly, Netflix will let you use your phone as a controller. You can see that in the image below.
So, it seems that Netflix is looking to make it feel like its gaming platform is an actual platform. Only time will tell if this entices more people to jump on.
Apparently, Elon Musk posted a screenshot of his text messages with Mark Zuckerberg over on X this weekend. And the story isn’t what was said during the text exchange, but the fact that Zuck uses an Android. And we can tell this because Musk’s replies to him are in green, indicating SMS instead of iMessage.
It’s a bit odd that so many people on X care that Zuck is even using an Android device. But it’s pretty crazy that so many do care about that. Zuck is a billionaire, much like Musk, but for some reason, the fact he uses an Android device is such a big deal.
Now, the text messages themselves talk about how Musk keeps coming up with excuses for not fighting Zuck. And that he doesn’t want to keep hyping up something that won’t happen. To which Musk mentions “let’s fight in your Octagon” after mentioning he will be in Palo Alto on Monday. Musk still really thinks that he can beat Zuck pretty easily, mainly due to the difference in size.
Zuck using Android is not a huge surprise
There’s two reasons why Zuckerberg using an Android phone is not a huge surprise. Firstly, we know that Instagram’s head, Adam Mosseri uses an Android device. In fact, he talked quite extensively on Threads about switching recently. So seeing Zuckerberg using Android is not a big surprise.
The second reason is, Apple cut Facebook’s ad revenue quite considerably a couple years ago with iOS 14.5. When Apple debuted iOS 14.5 a couple years ago, they debuted a feature where the user could decide if the app follows them or not. Obviously, many selected “Ask not to track” for Facebook. Which caused Facebook to lose billions of dollars per year in ad revenue. And it wouldn’t be to crazy to see Zuck make the switch to Android over spite.
Microsoft Office has come a long way since it was introduced back in 1990, both in terms of functionality and aesthetics. According to a new report from Techradar, Microsoft Office is getting a new look along with a new font.
We don’t have any visuals on this new update at the moment, but the Microsoft 365 Roadmap entry does give us a little bit of information about it. Basically, this new theme will be seen across several Microsoft Office applications and services. The entry listed off Word, Excel, PowerPoint, and Outlook as the platforms getting the new theme.
It noted that these applications will use an updated color palette, and it’s interesting to think about what the company will use. The current color palette is professional and responsibly vibrant. It’s colorful enough to catch the eye, but it’s not over the top. We’re not sure if Microsoft will bring a more colorful palette or if it will go in the opposite direction.
Along with the new color palette, Microsoft also mentioned that there will be a new default font along with this new change. The font is called Aptos, and it’s notable for being pretty easy to read. It’s a san-serif font that’s pretty straightforward in its appearance.
Lastly, this new look will also involve updated default line widths. We don’t know what the company is planning on doing, so We’ll have to wait and see.
Microsoft Office is testing its new look now
as with any sort of major design update, it goes through extensive testing before it makes it to the public. This is the case with this new look for Microsoft Office. We’re not sure if the company is testing it with users or if this is only internal.
In any case, Microsoft mentioned that this updated look will make it to the public sometime in September.
Samsung‘s Galaxy S24 series may feature a two-way satellite communication system. Lee Jong-ho, Minister of Science and ICT (Information and Communications Technology) in South Korea, recently confirmed that the domestic smartphone industry is preparing to commercialize a satellite communication system for 5G mobile devices next year. Since Samsung is the only major smartphone company in South Korea, the Galaxy S24 lineup could debut the technology.
Rumors of Samsung working on bringing satellite connectivity to Galaxy phones have been around since last year. There were hopes that the Korean firm would offer the feature on the Galaxy S23 series. However, it didn’t. The company’s mobile head TM Roh later stated that it’s working on the technology but not yet ready to launch it to the public. Roh said Samsung doesn’t want to bring a gimmicky system with limited functionality. It is building something robust.
The Samsung executive hinted at a nearing launch of the technology. A few weeks after his comments, the company announced a satellite connectivity system that allows direct two-way communication (sending and receiving) between mobile devices via satellite. While the newly launched Galaxy Z Fold 5 and Galaxy Z Flip 5 foldables also missed out on it, the Galaxy S24 series looks likely to feature this next-gen communication technology.
“I cannot say for sure, but I know that the domestic industry is considering commercializing the service next year, expecting that a standard related to satellite communication will be prepared next year,” Lee said in an interview with the South Korean publication Yonhap News Agency [machine translated]. While the government official didn’t name any company, he was responding to a question about when Samsung phones will get satellite connectivity.
Samsung wants to offer a complete satellite communication system on Galaxy devices
The tech industry has been pushing to add satellite connectivity to smartphones for a few years now. Last year, Huawei and Apple introduced the technology with the Mate 50 Pro and iPhone 14 series, respectively. However, the functionality is quite limited. Huawei only allows the sending and receiving of short text messages, while Apple only lets users make emergency rescue requests.
Samsung wants to offer two-way sending and receiving of messages as well as small-sized images. It has teamed up with Virginia-based satellite communication company Iridium Communications to make this happen. The two firms have been working on the tech for about three years now. It appears they are all set to debut the system early next year. The Galaxy S24 series should go official in the first quarter of 2024. You can expect to hear more about Samsung’s satellite communication system ahead of that.
Samsung’s latest and greatest (and largest) tablet is now out and available. The Galaxy Tab S9 Ultra. It’s a pretty great tablet, to be honest, but is it worth spending $1,199 on? That’s the tough question here, because as everyone knows, Android doesn’t have a lot of great tablet apps that are optimized. But Samsung has tried to get around that with DeX, which gives you a nice desktop experience. So it is worth the price? Let’s find out in the full review.
A quick note before we jump into this review. While we are reviewing the Galaxy Tab S9 Ultra here, the majority of this review will be the same for the Galaxy Tab S9 and S9 Plus. The major differences being the display size, and battery life. Since the whole lineup has AMOLED displays, the Snapdragon 8 Gen 2, and at least 8GB of RAM. So keep that in mind.
As was the case with the Galaxy Tab S8 Ultra last year, the Tab S9 Ultra is still incredibly thin. It’s just 5.9mm thick, which is pretty insane, when you think about it. Especially since this is a 14.6-inch tablet. Obviously, you probably are wondering how easy it is to fold in half, and well we’ve got some bad news – we didn’t test that out. But rest assured, JerryRigEverything will likely try this out, after last year’s model did fold in half pretty easily.
Because it is so thin, and yet so large at the same time, it does become tough to hold onto for a long period of time. Your hand will definitely feel a bit of fatigue after some time – for me, it’s after about 20 minutes or so. And because of that, I’ve come to the conclusion that the Ultra model here, is really only great for those that use a tablet on a table. Like as a laptop replacement. Those that just want a tablet to sit on the couch and browse the web and social media, the Ultra isn’t it. The S9 is probably a better option, since it’s only 11-inches.
As for the hardware, it’s basically what you’d expect from Samsung. It’s all aluminum, with a glass section on the back for charging the S Pen – which comes in the box. The S Pen can now be charged in either direction, and you can also attach it to the sides of the tablet too. But will only charge on the back of the tablet.
On the top of the tablet, you’ll find the power button on the left side, and a volume rocker to the right of that. The fingerprint sensor is under-display, and on the right side if you’re holding it in landscape, or on the bottom if you’re holding it in portrait mode. The sensor is decent, but I still despise these under-display sensors. Especially after using the Google Pixel Fold, Galaxy Z Fold 5 and Galaxy Z Flip 5, where they are all in the power button. Why couldn’t we get that on the tablets too?
There is a USB-C port on the right side for charging. There are also some pins on the bottom, that get used with the various Keyboard attachments that Samsung has on sale – like the Book Cover Keyboard and Book Cover Keyboard Slim.
Samsung has also added quad speakers on the Galaxy Tab S9 Ultra, so you have them on the top and bottom on each the left and right side. This makes it tougher to cover up the speakers when playing games or watching videos. And also makes them sound really good. Samsung has included Dolby Atmos here, and for some reason it’s not turned on by default. Turn on Dolby Atmos and these speakers sound so much better. Don’t forget they are tuned by AKG, so that makes sense that they sound incredible.
The hardware is top-notch, and definitely what you would expect from a tablet that costs $1,199 – which is $100 less than the iPad Pro 12.9 actually.
Now, I do wish that the Galaxy Tab S9 Ultra was a bit thicker and had a bit thicker bezels. As it is currently, it’s pretty hard to hold onto. It’s super thin, which makes it pretty hard to hold onto comfortably. The bezels being so thin means that you’re getting accidental touches quite often, which is not a good experience either. Just make the bezels a tiny bit thicker, and also make the tablet a tiny bit thicker overall. Which would make this much bigger tablet a lot easier to use and hold onto. As it is, this is really only good for using in a case on a table or on your lap. Instead of holding it.
Samsung Galaxy Tab S9 Ultra Review: Display
Previously, Samsung kept the AMOLED display for the Ultra model, but this year, all Tab S9 models come with the Dynamic AMOLED 2X display, and it looks incredible. On the Galaxy Tab S9 Ultra, we’re looking at a 14.6-inch Dynamic AMOLED 2X display here. It has a resolution of 2960×1848 pixels, which gives us a 16:10 aspect ratio.
Why is that aspect ratio important? Well, it makes scrolling through the web better, but when you’re watching content in full screen, it means that the notch for the dual-front facing cameras doesn’t cut into the content. Though, it’s still kind of weird that the cameras needed a notch anyways, since it is so tiny.
On this display, I’ve watched a ton of content on YouTube, Peacock, YouTube TV, Hulu, Netflix and more, over the past couple of weeks, and the experience is incredible. And that’s likely the big reason why someone would buy the Galaxy Tab S9 Ultra, due to it’s size. Either for content consumption, or for replacing your laptop. Which, given the price, and buying a keyboard for it, it’s more than a laptop these days. So can it really be a laptop replacement then? We’ll be exploring that in the coming weeks actually.
Samsung Galaxy Tab S9 Ultra Review: Battery life & Charging
Battery life on the Galaxy Tab S9 Ultra can be very subjective, even more-so than on smartphones. Depending on the S Pen features that you turn on, the Galaxy Tab S9 Ultra can go from good battery life, to pretty poor battery life. With Air Commands on, you might get a handful of hours of screen on time, and standby is really not great with Air Commands on.
However, with the features on out-of-the-box, battery life tends to be pretty good. Getting at least 6 hours of screen on time with more than half the battery left. And that’s over the course of a few days. So it’s pretty decent. Standby is also pretty decent, over the course of about 12 hours, it lost only about 1-2%. Which is a whole lot better than a smartphone, though it does have fewer things running in the background, so that makes plenty of sense. But that also means it’s great for using for a few hours then leaving on the side table until the evening to pick up again, you won’t lose a whole lot battery during that time. Something that some tablets can really suffer from.
Now, when it comes to charging, it’s pretty slow. Samsung has 45W charging here – faster than the Galaxy Z Fold 5 and Flip 5 actually. Now when I say that the Galaxy Tab S9 Ultra is slow at charging, you have to remember that this does have a 11,200mAh battery inside. So charging at even 45W, it’s still going to take a few hours to fully charge. In my experience, it was about 2-3 hours to fully charge. Not to bad, especially since you’re not going to charge it every single day, maybe once or twice a week.
Samsung Galaxy Tab S9 Ultra Review: Software
Software on the Galaxy Tab S9 Ultra is a bit of a mixed bag. On the one hand, Samsung has done a great job at making it easier to use a larger screen like this. Giving us features like Pop-up window, split screen, DeX and much more.
But on the other hand, the number of apps that are optimized for tablets is pretty small. Now this is something that will likely change in the future. As Google now has a tablet and a foldable, so they are now more interested in getting more developers to optimize their apps for these larger screens.
Google has said that they are beginning to highlight more tablet-optimized apps on the Play Store. So that should get more developers interested in making apps for tablets and these larger screens.
Having said that, Pop-up window and Split Screen are two really good features to use on this 14.6-inch screen. Pop-Up window allows you to open apps in their individual windows, on the main screen here. This is really good for apps like Instagram, that only works in portrait mode, and looks pretty comical on a 14.6-inch screen in portrait mode. Now you can open up Instagram, Twitter and even Samsung Internet all on the same screen. It makes multi-tasking a bit better.
Split Screen is pretty similar, but they will take up the entire display. What I’ve done a lot is have TikTok on one side and Twitter on the other. So I can doom-scroll on Twitter while watching the latest trends on TikTok at the same time.
Google has also added a nice taskbar, since Android 12L, so when you’re in an app, you’ll see a dock of apps at the bottom, with your most recent apps on the right of that. Of course the app drawer is listed on the left side. This makes it easier to switch apps, without jumping into the Recents menu. This taskbar can be set to hide automatically, or leave open all the time.
Samsung does need to work on preventing accidental touches on the Galaxy Tab S9 Ultra. Because the bezels are so small, your fingers are going to touch the display while you’re holding it. And that means that trying to swipe to go back or tapping on different things on the screen, it might or might not work. I can’t tell you how many times I’ve swiped to go back, and it didn’t work because my other hand was interfering with touching the screen.
DeX is fantastic on a tablet
I’ll be honest, when Samsung first announced DeX many years ago, I thought it was a gimmick. I was thinking, who would want to plug their phone into a monitor, keyboard and mouse and use their phone on a much larger display. I still think that portion is a gimmick, but bringing it to tablets was a stroke of genius.
With DeX on a tablet, you get a nice desktop experience on the Galaxy Tab S9 Ultra. And given how large this display is, that’s a really nice experience. In fact, this tablet is larger than my MacBook Air. In DeX mode, you can open apps in full screen, or in Pop-Up windows. You can have as many as 12 apps open at a time, which doesn’t sound like a lot, but also sounds like a lot. You still get the taskbar at the bottom, like you do on regular Android. But there are a couple of differences here. For example, you get the time and date on the far right side. Tapping on that opens the calendar. Next to that, there’s the WiFi, Bluetooth and Battery icons. If you tap on that, you’ll get your quick settings. Then there’s an icon for notifications, sound and a screenshot button. It looks pretty crammed, especially if you are using the three-button navigation, but it’s actually very useful.
You can also plug in this tablet to a monitor, and get DeX on a larger screen, and you’ll also get more pop up windows you can use. You also have the ability to use this as a second display for your Windows laptop. Now this I was not able to test out, since I use a Mac. But did get to try it out in Korea, and it works as you’d expect. So with the Galaxy Tab S9 Ultra, you can basically carry around a second monitor, for a lot less weight. Making it great for those that do a lot of traveling.
Tablet apps
There are, now, some pretty good tablet apps available for the Galaxy Tab S9 Ultra. Like Good Notes and LumaFusion. Good Notes is a pretty popular notes app that does work well on this large display, and it also works with the S Pen. So you can take handwritten notes. LumaFusion is a video editor that works really well on both macOS and Windows, as well as iOS. And now you can use it on the Galaxy Tab S9 Ultra – it was pre-installed on my review unit. Making this a much more likely laptop replacement.
Other than that, there are some tablet-optimized apps, but not many. Much like with the Galaxy Z Fold 5, Samsung is forcing apps to fill the entire display, and on a display like this, Twitter looks comical. A picture will take up the entire display, which is hilarious. Hopefully we’ll get some more tablet optimized apps for Android tablets in the very near future. But then again, I’m not sure I’d hold my breathe for that.
S Pen makes the experience complete
With Samsung’s tablets, the S Pen is included in the box. Which I think is the right move for Samsung, since it does add so much to the experience. Compared to the iPad, where the Apple Pencil is not included in the box and costs an extra $129. The only real complaint is that the S Pen needs to attach to the back to charge. You can attach it to the sides, but it won’t charge there. Though, it really only needs to charge if you are using the Air Commands feature on the S Pen.
The S Pen on Samsung’s tablets, allow you to do some nice drawing in the PENUP app, or taking notes in apps like Samsung Notes and Good Notes. This year, Good Notes now supports the S Pen for handwriting notes, which I did use quite a bit while reviewing the Galaxy Tab S9 Ultra. Given the much larger screen on the Ultra, it does make it really good for taking notes, as you do have a much larger canvas here.
You can also use the S Pen to navigate through the OS, however the gestures to go home, recents and back, don’t really work with the S Pen. Which is a bit odd, but that might be to keep the S Pen from scratching the bezels of the tablet.
Samsung Galaxy Tab S9 Ultra Review: Camera
On the Galaxy Tab S9 Ultra, there’s four cameras. That’s FOUR cameras on a tablet. Crazy right? Basically, Samsung has given users a 13-megapixel main sensor on the back and a 8-megapixel ultrawide. On the front, there’s two 12-megapixel sensors, with a main and an ultrawide sensor available. Which is where the notch comes from.
The front cameras are likely the ones that you’d use the most. For things like Zoom, Google Duo and other video calling apps. The ultrawide sensor is really great for doing group video calls, as you’re able to fit more people in the frame. Additionally, the cameras are on the long side. Meaning that when you use the tablet in landscape mode, it’s on the top, instead of the side.
The rear cameras are okay, they aren’t perfect, but they’ll get the job done. Just please don’t be those people that use a tablet for taking photos at your kids soccer games. Your phone is going to take better photos, even if the viewfinder is much smaller than this 14.6-inch display.
Should you buy the Samsung Galaxy Tab S9 Ultra?
It’s a hard question, and it’s not Samsung’s fault. I really like this tablet, but the down side is always going to be app support. If you’re someone that uses a tablet for consuming media, or for getting some work done, then the Galaxy Tab S9 Ultra is a good option. But if you want it to browse the web, and check in on social media from the couch, you might want a smaller tablet – like the Galaxy Tab S9.
You should buy the Samsung Galaxy Tab S9 Ultra if:
– You are looking for a lightweight laptop replacement.
– You can get it on sale at a good discount.
– You want a large screen for getting work done, or watching videos.
You should not buy the Samsung Galaxy Tab S9 Ultra if:
– You need tablet-optimized apps.
– You want a tablet to sit on the couch and browse the web and social media.
Xiaomi, the Asian smartphone giant, has implemented measures within its MIUI operating system that flag Telegram as a malicious app.
This move has ignited discussions surrounding both technical and political dimensions, raising questions about user privacy, app censorship, and the potential involvement of the Chinese government.
The introduction of MIUI 13 in 2022 brought with it a new security feature designed to identify and block applications deemed malicious.
This feature, while intended to bolster user security, has not been without controversy.
Critics argue that it might serve as a means for surveillance and censorship.
One of the focal points of criticism revolves around the suspicion that Xiaomi’s security measures could be tied to a veiled collaboration with the Chinese Communist Party (CCP) to monitor user activities and control app accessibility.
This speculation has been exacerbated by MIUI’s history of blocking apps that allow users to modify network settings beyond default configurations.
The case of Telegram being labeled as a dangerous app in China raises questions about the wider implications for free speech and personal privacy.
MIUI’s Approach to Telegram
Reports emerging from Telegram channels suggest that when MIUI identifies Telegram, it issues a warning indicating that the app hasn’t passed Xiaomi’s security review.
MIUI flags Telegram as dangerous
The message highlights potential risks associated with using the app, such as fraudulent deductions or unwarranted consumption.
Users are advised to activate additional security measures to ensure application safety and guard against risky apps.
These warnings reflect the growing concern about app safety in an increasingly interconnected digital landscape.
DocumentFREE Webinar
API Attacks Have Increased by 400% – Understand the Fundamentals of Protecting Your APIs with a Positive Security Model – Register Now for a Free Webinar
Confirmation and Global Concerns
Chinese mobile developer Hikari Calyx confirmed the reports of MIUI flagging Telegram and other apps in China.
The action highlights the ongoing tension between individual freedoms and state control.
While MIUI’s measures might be perceived as enhancing security, they also have the potential to infringe on user autonomy and digital privacy.
The move to label Telegram as “dangerous” underscores China’s broader efforts to exert control over digital communication spaces.
Historical Context and Broader Implications
This incident is not isolated; historically, the Chinese government has imposed restrictions and bans on various global platforms, curbing access and inhibiting free communication.
China’s sophisticated censorship mechanisms have involved limiting access to foreign websites, filtering sensitive keywords, and monitoring internet activities.
In recent years, Chinese alternatives to Western social media platforms have gained prominence.
The attention now directed towards communication apps like Telegram underscores China’s evolving strategies in controlling unmonitored digital communication.
Xiaomi’s decision to flag Telegram as a malicious app within its MIUI system highlights the complex intersection of technological advancements and political agendas.
The evolving MIUI security measures raise questions about individual privacy, state censorship, and control over digital spaces.
As tech enthusiasts continue to monitor this situation, it serves as a reminder of the delicate balance between security and individual freedoms in the digital age.
Cybersecurity researchers uncover cyberattack targeting South African power-generating firm.
Attackers deploy new variant of SystemBC malware, named DroxiDot, with CobaltStrike beacons.
Speculation that attack could be an initial stage of a ransomware attack, occurring in March 2023.
DroxiDot variant is a compact 8kb payload, serves as a system profiler, and sets up SOCKS5 proxies on target computers.
Attacker’s C2 infrastructure linked to energy-oriented domain potentially tied to Russian ransomware group FIN12.
Cybersecurity researchers at Securelist have discovered a cyberattack against a power-generating firm in South Africa. Reportedly, the firm was targeted with a new variant of the SystemBC malware and a yet unidentified hacking group carried out the attack.
It is worth noting that a variant of SystemBC was also identified in the 2021 cyber attack against Colonial Pipeline, a major American oil pipeline system. In the recent attack, however, attackers deployed the proxy-capable backdoor with CobaltStrike beacons.
According to Securelist, the new SystemBC malware variant is dubbed DroxiDat. Attackers used these tools to compromise systems and remotely access the electricity generator. However, researchers speculated that it could be the “initiate stage of a ransomware attack” that took place in the third or fourth week of March 2023.
For your information, SystemBC payload is a “changing, malicious” malware-as-a-service backdoor available on darknet forums since 2018. It is a C/C++-based commodity malware first observed in 2019.
“This platform is made up of three separate parts: on the server side, a C2 web server with admin panel and a C2 proxy listener; on the target side is a backdoor payload,” Securelist’s report revealed.
Compared to previously detected SystemBC variants that were around 15-30kb+, DroxiDot is a compact, 8kb variant that serves as a system profiler, and its main job is to set up SOCKS5 proxies on target computers so that attackers can tunnel malicious traffic.
The malware can also retrieve usernames, IP addresses, and machine names from an active device, encrypts the data, and transfers it to the attacker’s C2 server. This variant doesn’t feature many of SystemBC’s functionalities and acts as a system profiler to exfiltrate information to a remote server.
However, it doesn’t feature download or executing capabilities and can only connect with “remote listeners, pass data back and forth, and modify the system registry.”
This variant, however, allows attackers to simultaneously target multiple devices through automating tasks. If the credentials are legit, they can even deploy ransomware using built-in Windows tools without manually controlling the process.
The attacker’s C2 infrastructure involved an energy-oriented domain “powersupportplancom,” which resolved to a suspicious IP host. Researchers believe this host was previously used in an APT activity to improve the attack’s potential.
Furthermore, researchers discovered that DroxiDot was used in another healthcare-related incident during the same time when it delivered Nokoyawa ransomware.
Regarding the attackers, researchers claim that evidence suggests the involvement of a Russian ransomware group, probably FIN12 (also known as Pistachio Tempest). This group is known for deploying SystemBC with Cobalt Strike Beacons to launch ransomware attacks against healthcare facilities in 2022.
Samsung is pretty well-known for giving its users just about every feature they could want. However, there are even more features on the Galaxy Z Fold 5 that are actually hidden. So in this article, we’re going to go over these features, so you can get the most out of your new foldable from Samsung.
Download Good Lock for the ultimate customization
Good Lock is an app that is limited to Samsung’s own smartphones, and available in the Galaxy Store to download. It’s a must-have for any Galaxy phone owner, and on foldables like the Galaxy Z Fold 5, it really opens a whole new world of possibilities.
Good Lock is the main app, which has a number of sub-apps that you can use to customize your device. Here are some of the more popular ones:
Theme Park: This app will allow you to create a full theme for your phone. Beyond what Material You allows you to do. Adjusting the background of the quick settings, the way the keys on the keyboard look, and even the volume panel.
Pentastic: This is another popular one for the Galaxy Z Fold 5 since it does work with the S Pen. This allows you to change just about everything about the S Pen pointed and Air Command menu. You’ll also be able to create app shortcuts, by holding down the pen button and even double-tapping the display.
LockStar: This one is going to bring infinite changes to your lock screen, which really helps to make this unique to yourself.
NavStar: Not happy with the navigation buttons or gestures that Samsung includes on the Galaxy Z Fold 5? Well with this plug-in app, you can change almost everything. This includes making the navigation hint bar transparent, allowing the back gesture in full screen and much more.
These are just a few of the many different apps available with Good Lock. And the customizations are endless here.
Force apps to transfer from the main to cover display
Using the MultiStar app from the Good Lock application, you are able to force apps to open from the main screen to the cover screen. The other way around works in the main settings for the Galaxy Z Fold 5. But say you have a YouTube Video playing and you want to use the Galaxy Z Fold 5 in tent mode. You need that video to play on the outer display, and this mod lets you do just that.
Go into Good Lock and download, MultiStar. After you download it, go into I Heart Galaxy Foldable. From there, you’ll have find a number of great options available, look for Continue All Apps on front screen and turn that on.
Force portrait apps to work in landscape
The main display on the Galaxy Z Fold 5 is almost a square. Which means that some portrait mode apps won’t work in landscape, even though the resolution isn’t very different. But Samsung has a fix for that as well. You likely won’t need to use this on a lot of apps, but again, one that comes to mind here is Instagram.
You can go into Settings > Advanced Features > Labs > Landscape view for portrait apps, and then select the app you want to work in landscape view. You can turn this on for each individual app. So it’s not a switch for all apps like some other features here. This is a labs feature, so you could run into issues. So it’s important to remember this feature so you can turn it off if need be.
Force all apps to work in split-screen
Let’s face it, some apps are stubborn. One app that comes to mind is Instagram, which doesn’t work on a lot of different display sizes. But, Samsung has a feature to help you with that.
If you head into Settings > Advanced Features > Labs and tap on “Multi window for all apps” this will force every app to work in multi-window or split screen. A lot of apps already work in multi window, but this feature makes sure that every app does so. You might run into issues with some apps having problems in multi window, so keep that in mind here.
Change the refresh rate to get more out of the battery
The Galaxy Z Fold 5 has dual 120Hz displays, which, as you can imagine, does take a toll on the battery. There’s only a 4400mAh capacity battery inside this phone, which isn’t that large, but it does still do quite well and lasts a full day. But if you need a bit more battery, you can switch the screens over to 60Hz.
Just head into Settings > Display > Motion Smoothness, and you can switch from Adaptive to Standard. Adaptive will intelligently adapt your refresh rate from 1Hz up to 120Hz. While Standard will keep it at 60Hz all the time. You might notice a difference with animations and such. But you will likely get a couple extra hours of screen on time with this feature.
