Fake websites of authoritative and popular companies claiming to be genuine sites make users believe that the site belongs to that specific company and is safe to use.
Besides this, hackers can more easily lure victims into entering sensitive information or downloading malware by mimicking popular and reputable brands.
Cybersecurity researchers at Rapid 7 identified a fresh malvertising campaign that deceives users into downloading malicious installers pretending to be well-known utilities, such as Google Chrome and Microsoft Teams.
These installers deliver a backdoor named “Oyster” or “Broomstick.” Following its establishment, hands-on keyboard activity involves system enumeration and deployment of other malicious payloads.
When they looked for the software on the Web, users downloaded Microsoft Teams installers from typosquatted websites in three instances.
These were rogue sites posing as authentic Microsoft ones and led trustful users to download malware instead of genuine software applications.
Fake Website
For one, “micrsoft-teams-download[.]com” sent binary MSTeamsSetup_c_l_.exe signed with a certificate issued for Shanxi Yanghua HOME Furnishings Ltd, likely used maliciously to look like a legitimate entity on VirusTotal.
In May 2024, legitimate software was impersonated by multiple installers, one of which employed a Microsoft Teams setup file with a revoked certificate.
The Rapid 7 report states that the Oyster (aka Broomstick, CleanUpLoader) malware family was first distributed via this installer in September 2023.
System data is collected while hardcoded C2s are contacted, consequently making it possible to execute remote code. The recent sample drops CleanUp30.dll, which creates a scheduled task that allows the virus to be launched every 3 hours when it runs itself again.
The C2 domains get decoded using a byte mapping algorithm, and fingerprint machines are infected, which helps send back such information to the C2 infrastructure.
Here below, we have mentioned all the functions that are used to fingerprint the infected machine:-
DsRoleGetPrimaryDomainInformation
GetUserNameW
NetUserGetInfo
GetComputerNameW
RtlGetVersion
While enumerating host information, the data is stored in JSON fields from decoded strings.
The fingerprint is encoded by reversing and byte mapping the string before sending via HTTP POST to whereverhomebe[.]com/, supfoundrysettlers[.]us/, and retdirectyourman[.]eu/.
CleanUp30.dll uses Boost.Beast for HTTP/WebSocket C2 communication. After executing CleanUp30.dll, a PowerShell script spawned, creating a startup shortcut DiskCleanUp.lnk to run CleanUp.dll via rundll32.exe.
This executed the k1.ps1, main.dll, and getresult.exe payloads.
FreeWebinar! 3 Security Trends to Maximize MSP Growth -> Register For Free
AT&T, one of the largest mobile carriers in the United States, has announced a price hike for its legacy unlimited plans. This change is set to take effect in August 2024. According to Android Authority, customers on single service lines will see a monthly price increase of $10. Meanwhile, those with multiple lines under their plan will experience a steeper increase of $20 per month.
AT&T is following in the footsteps of T-Mobile and Verizon
This move by AT&T follows similar actions by its competitors, T-Mobile and Verizon, who have also raised the prices of their plans recently. T-Mobile, for instance, increased the prices of their legacy plans by as much as $5 per line per month just a few weeks ago.
The specific AT&T plans affected by this price hike include a wide range of unlimited offerings. These are Unlimited & More Premium, Unlimited Choice Enhanced, Unlimited & More, Unlimited Choice II, Unlimited Plus, Unlimited Choice, Unlimited Plan, Unlimited Plus Enhanced, Unlimited Value Plan, and AT&T Unlimited Plan (with TV).
The mobile carrier is doing what it can to mitigate the backlash from customers
To mitigate potential backlash from loyal customers, AT&T is encouraging users to transition from older plans to newer ones in their catalog. Historically, price increases have often led to dissatisfaction and complaints from customers.
The carrier is increasing high-speed data and hotspot allowances for the affected plans. For instance, the AT&T Unlimited Choice, Choice II, and Choice Enhanced plans will now include 75GB of high-speed data and 30GB of hotspot data. For those opting for AT&T Unlimited Plus, Plus Enhanced, Unlimited & More Premium, and AT&T Unlimited (with TV), the plans will now offer 100GB of high-speed data and 60GB of hotspot data.
However, Android Authority reports that AT&T customers now face three primary options in response to this price change. They can choose to keep their current plan and accept the higher prices, switch to one of AT&T’s newer plans, or contact customer care to cancel their service entirely.
We’ve already compared the very best of OnePlus and Samsung for 2024. In this article, we’ll compare the OnePlus 12 vs Samsung Galaxy S24+. So not exactly the top-end Samsung model, but very close to it. The Galaxy S24+ is also a large member of Samsung’s flagship series, but a step below the ‘Ultra’ variant. Both of these phones are large and powerful, though, so it should be an interesting comparison.
As per usual, we’ll first list their specifications and take it from there. We will check out their designs, displays, performance, battery life, camera performance, and audio output. If you’re still on the fence about getting one of these two phones, this comparison will hopefully be of some help to you. Let’s get down to it, shall we?
Both the OnePlus 12 and Galaxy S24+ are made out of metal and glass. They both use aluminum for their frame and use Corning’s protection on the back. The one on the Galaxy S24+ is newer, though. The Galaxy S24+ is slightly more curved on the corners, while both phone have all their physical buttons on the right side. The alert slider is located on the left-hand side of the OnePlus 12, though.
You will notice that the OnePlus 12 has a curved display, while the one on the Galaxy S24+ is flat. Both phones have a centered display camera hole and very thin bezels around the display. If we flip them around, you’ll see two completely different camera setups. The OnePlus 12 has a circular camera island with four cutouts in there, three of which are for the cameras. The Galaxy S24+ has three vertically aligned cutouts in the top-left corner, and they’re all reserved for the phone’s cameras.
The sides of the Galaxy S24+ are flat, while that’s not the case with the OnePlus 12. OnePlus’ smartphone is the taller of the two, but it also has a larger display, so that’s expected. The two phones are basically the same in terms of width, while the OnePlus 12 is a bit thicker and heavier. It’s around 24 grams heavier. Both devices offer an IP rating for water and dust resistance. The OnePlus 12 comes with an IP65 rating, while the Galaxy S24+ offers an IP68 rating. Both of them are comfortable in the hand, but very slippery. They do have an entirely different in-hand feel, though.
OnePlus 12 vs Samsung Galaxy S24+: Display
There is a 6.82-inch QHD+ (3168 x 1440) LTPO AMOLED display included on the OnePlus 12. That display is flat, and it has an adaptive refresh rate of up to 120Hz. Dolby Vision is supported, and the same goes for HDR10+ content. This display has a theoretical top brightness of 4,500 nits, but you’ll never be able to go that high. The screen-to-body ratio is around 90%, while the Gorilla Glass Victus 2 protects this panel.
Samsung Galaxy S24+
The Galaxy S24+, on the other hand, includes a 6.7-inch QHD+ (3120 x 1440) Dynamic LTPO AMOLED 2X display. That panel is flat, and it has an adaptive refresh rate of up to 120Hz. HDR10+ is supported here, and the display’s top brightness is 2,600 nits. The display aspect ratio is 19.5:9, while the screen-to-body ratio is at around 91%. The Gorilla Glass Victus 2 protects this display.
Both of these displays are great, to say the least. They’re vivid, have great viewing angles, and deep blacks. They have good touch response and good protection. Both displays are also extremely sharp and do get more than bright enough in all conditions. You can easily use either of the two displays in direct sunlight. We’d give an edge to the OnePlus 12 in such conditions, but both are excellent. You can’t really go wrong with either of these two. Just note that the OnePlus has a higher PWM dimming, so if you’re sensitive to OLED displays… that’s the one that may suit you better.
OnePlus 12 vs Samsung Galaxy S24+: Performance
The Snapdragon 8 Gen 3 fuels the OnePlus 12. OnePlus also included up to 16GB of RAM inside the device, along with UFS 4.0 flash storage. The Galaxy S24+, on the flip side, comes with 12GB of LPDDR5X RAM and UFS 4.0 flash storage. The phone is fueled by the Snapdragon 8 Gen 3 for Galaxy processor. It’s basically the same chip, but it has higher clock speeds. In some markets, like in Europe, for example, the Exynos 2400 is included. Do note that we used the Snapdragon model of the phone, so can’t really comment on the Exynos variant.
Both phones offer outstanding performance in basically every way. That’s expected out of them, as they’re equipped with the latest hardware. Both phones will fly through anything you throw at them, without a doubt. They can multitask like nobody’s business, open apps really fast, consume multimedia, are great for browsing, you can process images and video with ease, and so on.
If you’re wondering about gaming, neither phone has a problem with that, quite the contrary. They can both run games with ease, though one thing worth noting is that the OnePlus 12 has better cooling. If you’re planning to play a ton of graphically-intensive titles, that phone may be the better option. On top of that it offers much faster charging, so it will allow you to recharge the device after a gaming session. More on that later. Both phones do offer great performance in basically every way, so no worries.
OnePlus 12 vs Samsung Galaxy S24+: Battery
There is a 5,400mAh battery included inside the OnePlus 12. The Galaxy S24+, on the other hand, has a 4,900mAh battery on the inside. Both phones offer good battery performance, but the OnePlus 12 trumps the Galaxy S24+, easily. The OnePlus 12 was able to last longer for us, basically every time, even though the battery life on the Galaxy S24+ is really good. OnePlus’ flagship simply offers more longevity.
The Galaxy S24+ battery life has changed since launch, it’s not as good. It’s not much worse, but it’s not as good as it initially was, at least for us. Getting 7 hours of screen-on-time is still possible, fi you’re not playing games or anything of the sort. The OnePlus 12 does offer over 20% better battery life in our experience, even over 30% better, I’d say. That phone simply goes the distance when battery life is concerned. Your mileage may vary, though, of course. You’ll be using your phones differently, with different apps, and different signal strengths.
When it comes to charging, the OnePlus 12 is simply the better option. It supports 100W wired (80W in the US) charging, along with 50W wireless charging, and 10W reverse wireless charging. A charger is also included in the box. The Galaxy S24+ supports 45W wired, 15W wireless, and 4.5W reverse wireless charging. The Galaxy S24+ will charge considerably slower, and it doesn’t even come with a charger.
OnePlus 12 vs Samsung Galaxy S24+: Cameras
Both of these phones have three cameras on the back. The OnePlus 12 includes a 50-megapixel main camera, a 48-megapixel ultrawide unit (114-degree FoV), and a 64-megapixel periscope telephoto camera (3x optical zoom). The Galaxy S24+, on the flip side, has a 50-megapixel main camera, a 12-megapixel ultrawide unit (120-degree FoV), and a 10-megapixel telephoto camera (3x optical zoom).
OnePlus 12
While both of these smartphones are capable of capturing good photos, the OnePlus 12 does have the edge. We preferred the vast majority of its images here. The Galaxy S24+ photos can end up looking a bit too processed compared to the ones the OnePlus 12 provides. OnePlus’ flagship provides contrasty shots, and the colors are almost always on point… Hasselblad definitely played a role there. Even when it comes to low-light shots, the OnePlus 12 usually tends to balance them out a bit better.
When the ultrawide and telephoto cameras are concerned, the difference is even more noticeable. The units on the Galaxy S24+ cannot compete in terms of details, and the image quality in general tends to be better from the OnePlus 12. That handset has better camera hardware in that aspect, and it also includes a periscope telephoto camera, which the Galaxy S24+ doesn’t have.
Audio
Both of these phones do come with a set of stereo speakers. Those speakers are really good on both ends, but the ones on the Galaxy S24+ are a bit louder. Still, the difference is not that big, and both sets do provide pleasant sound.
Neither of these two phones includes an audio jack. You can use their Type-C ports if you’d like to connect your wired headphones, though. Alternatively, the OnePlus 12 offers Bluetooth 5.4, while the Galaxy S24+ supports Bluetooth 5.3.
The US Federal Trade Commission (FTC) has officially referred a complaint against TikTok to the US Department of Justice. The complaint could eventually pan out to become a full-fledged governmental probe. The FTC had been investigating the way TikTok handles user data, particularly concerning children.
Why is the FTC seeking the US Justice Department’s intervention?
The FTC has been investigating TikTok, and its parent company ByteDance Inc., for well over a year. The federal agency was looking at several potential violations of US laws by the Chinese company.
Besides the myriad allegations, the FTC suspects ByteDance violates federal laws that protect children on the internet. Additionally, investigations intend to uncover if ByteDance violated laws that bar companies from using “unfair or deceptive” business practices.
It appears the FTC believes its investigation of TikTok’s business practices merits the involvement of the Department of Justice. By referring the case to the DoJ, the FTC has reportedly implied that it could be ready for a full-blown governmental inquiry.
Needless to say, this would be a long-drawn legal battle for ByteDance. Moreover, it could mean American lawmakers may force ByteDance to significantly dilute its ownership stakes in TikTok, effectively breaking up a very profitable company.
1. Today @FTC referred its case against TikTok to the Civil Division at @TheJusticeDept.
Our investigation found reason to believe that TikTok is violating or about to violate the FTC Act and the Children’s Online Privacy Protection Act (COPPA). https://t.co/fhYmUDStiF
In a detailed statement, the FTC has stated that its investigation has, “found reason to believe that TikTok is violating or about to violate the FTC Act and the Children’s Online Privacy Protection Act.”
FTC’s announcing its intention to refer a complaint to the DoJ is surprising because the agency usually refrains from confirming its next move. However, the agency made an exception because the investigation and its outcome are, “in the public interest.” As expected, TikTok has issued a public statement on X (formerly Twitter) expressing its disappointment. The announcement could be one of the biggest blows to ByteDance after the company forked out $5.7 million to settle FTC allegations back in 2019. Incidentally, this was the largest civil penalty the FTC ever obtained in a children’s privacy case.
Our statement on today’s FTC announcement:
We’ve been working with the FTC for more than a year to address its concerns. We’re disappointed the agency is pursuing litigation instead of continuing to work with us on a reasonable solution. We strongly disagree with the FTC’s…
Currently, the default power that Android detects as “fast charging” is 7.5W. This figure is far behind the big advances in modern industry. However, that could change with Android 15, raising the threshold to 20W.
The Android market is full of options with support for high-power fast charging. Commercially, you can find devices with up to 240W fast charging. Meanwhile, brands like Redmi and Realme are even working on reaching 300W. On the other hand, the Android fast charging detection system has not changed at the same rate.
Android 15 would finally tweak the 7.5W fast charging threshold
Android (AOSP) recognizes “fast charging” when your device receives 7.5W of power. That said, each manufacturer is completely free to tweak these values to adjust them to their own fast-charging technologies. However, Google Pixels use the default values set in the AOSP code. This can make it a little difficult for Pixel users to determine if their chargers are working correctly. After all, your lock screen will show a “Fast charging” message even though your device is receiving less than 8W.
It’s noteworthy that Google Pixel devices have not kept pace with the rest of the industry with respect to charging power. The Pixel 8 Pro, the brand’s most premium mobile, supports a maximum of 30W. So, it is possible that this lack of progress has been carried over to the AOSP code. Anyway, a recent finding suggests that Android 15 would detect “fast charging” starting at 20W.
It would mainly help Google Pixel users
Considering the advances available in the industry, 20W still seems a bit short. However, it makes sense considering that Google Pixel devices are the ones that use AOSP fast charging detection. Other manufacturers probably tweak the values to adapt them to the possibilities of their devices. Nor are major advances expected in terms of fast charging for the Pixels in the short term.
The source found the new 20W value in the latest Android 15 beta. However, it is not implemented yet, so the phones running that version still detect fast charging by receiving only 7.5W. Google is expected to definitively push the new values in the first Android 15 stable update. It is even possible that it will occur in future Android 15 betas.
Although this tweak won’t change your life, it will make things easier. Now Google Pixel users will actually know if their devices are charging at relatively high power.
Researchers have detected active attacks from TellYouThePass ransomware that exploits the recently reported PHP flaw. The active exploits make it even more urgent for the users to patch their systems at the earliest.
TellYouThePass Ransomware Began Exploiting PHP Flaw In Recent Campaigns
According to a recent blog post from Imperva, threat actors behind the TellYouThePass ransomware have started attacking the recently disclosed and patched PHP vulnerability CVE-2024-4577.
This vulnerability recently came into the limelight after researchers discovered an authentication bypass in a previous patch for a 12-year-old code execution flaw. Following the bug report, the vulnerability received a fix with PHP versions 8.3.8, 8.2.20, and 8.1.29. However, the threat actors quickly exploited the flaw before users could patch it.
According to Imperva, their researchers detected active exploitation of the flaw soon after its disclosure, which they could link back to the TellYouThePass ransomware.
In this campaign, the attackers exploit the vulnerability using the mshta.exe binary to run a malicious HTML application. This malicious file includes a VBScript, which then decodes into a binary that loads into memory during runtime.
Analyzing this binary made the researchers find a .NET variant of the ransomware that exhibits the core functionalities. It communicates via HTTP with its C&C, encrypts the files on the infected machine, and places the ransom note that demands 0.1 BTC as ransom.
Since the beginning of this campaign, the ransomware has infected numerous systems and websites. While the patch has already been deployed, the extensive impact of this campaign on multiple systems and sites demonstrates how fast the attackers are to attack vulnerable targets.
To avoid ransomware attacks and other threats, users must rush to patch their systems for CVE-2024-4577. Moreover, users must ensure equipping their systems with robust antimalware programs, and deploying web application firewalls (WAFs) on their sites to prevent similar threats.
Meta, the company behind Threads, has launched a public API for Threads. The company had confirmed last year that they were working on it. Now, the API is publicly available to all developers after a few months in closed beta with some partners.
The availability of an API is great news for Threads users. Basically, it enables developers to start working on apps or “experiences” around the platform. From cross-platform interactions to dedicated third-party clients, everything is possible. This could be a big boost to platform adoption. After all, many social media users often turn to alternative clients instead of official apps.
Meta launches a public API for Threads
The API for Threads will allow third-party developments or platforms to access key features. The blog post says that, thanks to the API, people can “now publish posts (using third-party services), fetch their own content, and leverage our reply management capabilities to set reply and quote controls, retrieve replies to their posts, hide, unhide or respond to specific replies.”
The post also mentions that the API offers access to key metrics such as “the number of views, likes, replies, reposts, and quotes at media and account level, and the number of followers as well as follower demographics for your account.”
Adam Mosseri, head of Instagram, first talked about the Threads API in October 2023. Since March of this year, the company has been testing it with some third-party developers. Services where the API was being tested include Grabyo, Hootsuite, Social News Desk, Sprinklr, Sprout Social, and Techmeme.
Meta prepared detailed documentation for the use and implementation of the Threads API. To make things even easier, they even offer a sample app that integrates the API to act as a guide. So, now everything depends on the use that the developers give to all the possibilities that it offers.
The Pixel Watch LTE is now effectively free for the Google Fi service users. The company is giving away the $329.99 Wear OS smartwatch via monthly Google Fi bill credits. So, without further ado, let’s tell you how you can grab the first Google watch for free.
Google Fi is offering the full amount of the Pixel Watch to subscribers, making it practically free
To get the Google Watch LTE for free, users can first open the Google Fi app. Then, they can head to the Shop tab and hit the “Devices on us” filter that’s available at the bottom of the page. The price of the watch is $329.99. The amount will be given to the users via 24 monthly credits of $13.75 each.
You will be able to use this amount against your monthly Google Fi service bill. In the offer, the watch is only available in a Matte Black case with the Obsidian Active Band.
It’s worth mentioning that the Google-owned and T-Mobile-operated company is running this offer till June 20, 2024, 9:59 AM PDT only. The offer’s terms of conditions mention that you will need to “Keep the qualifying account active for 24 months”. The offer is not available for the new Google Fi subscribers.
Furthermore, the offer’s conditions read “For individual plans, limit one device promotion per person during the promotion redemption period. For group plans, limit one device promotion per group plan member during the promotion redemption period.”
The two-year-old wearable is still a fine watch for casual wearers
The Pixel Watch LTE is over two years old now. However, it is still a fine device for casual watch users. The wearable sports high-end styling, smooth & fluid software experience, and cellular connectivity. It has a great integration with Fitbit. However, it still lacks in some areas, especially in the battery life segment.
The successor, Pixel Watch 2, saw the light of the day last October with several improvements. This one is available at the starting price of $349.99. Now, we are also getting multiple reports about the upcoming Pixel Watch 3. We recently exclusively brought you the images of the Pixel Watch 3 XL, so make sure to check them out.
On Tuesday, Google released Android 15 Beta 3, which now signals platform stability. This means that all app-facing behaviors, as well as the APIs, are now final. Developers can now publish necessary updates to prevent compatibility issues and take advantage of the latest features.
With the release of Beta 3, we are down to one final beta update (next month), before the final release comes at some point after August.
The stable release of Android 15 can launch at any point after August 1. In previous years, it typically launched in September, though last year, it was pushed back to October. However, back in 2022, Android 13 was released in August. So it could really be anytime after August.
Android 15 Beta 3 brings improved user experience for passkey and Credential Manager
With this beta, Google is allowing users to sign into apps that target Android 15 using a passkey, in a single step. Users will be able to use passkeys with facial recognition, fingerprint, or screen lock. This provides users with a single-step UI experience, making it much more streamlined.
Passkey and other credentials will also now appear as suggestions for autofill in keyboard suggestions or dropdowns. Finally, registered credential providers will no longer have to manage biometric prompts and can leverage the single-tap sign-up and sign-in experience through upcoming APIs in Jetpack.
Google is encouraging app developers to try out the new features and APIs in Android 15, as well as test your current app for compatibility.
If you’re interested in trying out the Android 15 Beta and have a Pixel, you can head over to the Android Beta Program and opt in. You’ll then get an update on your device to download the Android 15 Beta and be on your way. A few other non-Pixel phones are included in the beta, like the OnePlus 12. However, you’ll need to wait for OEMs like OnePlus to release the new beta for compatible phones.
A recent report suggests that Apple has canceled the development of the Vision Pro 2. The first-generation VR/XR headset has run into difficulties on the market. Its high cost is probably the main problem that prevented its success.
According to The Information, Apple has notified at least one of the component suppliers for the Vision Pro that they are no longer working on the next-generation model. But the company still would not have ruled out the development of a cheaper model. Previously, it was said that Apple had plans to launch both the Vision Pro 2 and a more affordable Vision headset.
Apple would have canceled the Vision Pro 2 headset
The report indicates that one key component supplier had already reduced production by up to 50%. This would have occurred in May, after Apple predicted that demand would be lower than initially projected. This year, Apple Vision Pro production is below 500k units. There also do not seem to be plans to increase these figures much in the coming months (at least until August).
That said, although development of the Vision Pro 2 may have been cancelled, the source adds that Apple does not rule out resuming it in the future. In fact, a report from April suggested that the next generation would arrive in 2026. However, currently, the company seems focused on a more affordable Vision product.
A cheaper Vision product would be priority now
The price of the more affordable Vision device would be similar to that of the highest-end iPhones. So, you can expect a price of around $1,500–$1,600. However, its development is not an easy task either. Apple would be struggling with significantly reducing the price of the device while maintaining the user experience they are looking for.
The Cupertino giant would want to keep the same screen as the current Vision Pro. Meanwhile, they would apply cust-cutting in sections such as the cameras (less units), smaller speakers, and the headband manufacturing.
Apple reportedly started working on the cheaper Vision headset in 2022. The original plan involved a launch by the end of 2024. However, problems finding the ideal balance between cost-cutting and user experience would have delayed the project. The report states that the company did not yet have a prototype at the beginning of this year. So, the launch would not happen until at least the end of 2025.
For reference, the Apple Vision Pro launched for $3,499. Therefore, it does not seem like an easy task to reduce it by half (at least) without significantly impacting the experience. Still, launching a cheaper Vision headset could be the smartest move if Apple wants to set its “spatial computing” as a standard for the future.
