Over 100K+ Compromised ChatGPT Accounts on Dark Web

0
[ad_1]

On illegal Dark Web Markets, more than 101,000 hacked accounts of the OpenAI language model ChatGPT were discovered.

These hacked credentials were found in the logs of information-stealing malware sold on illegal dark web markets.

Reports say in May 2023, there were 26,802 logs accessible that contained hacked ChatGPT accounts.

Info stealers are a sort of malware that gathers information from installed browsers on infected machines, including cookies, browsing history, bank card information, credentials saved in browsers, and other information, before sending it all to the malware operator.

Along with extensive information on the victim’s device, hackers can also gather information from emails and instant messengers.

Cyber intelligence firm, Group-IB says that most ChatGPT credentials for sale over the past year have been listed in the Asia-Pacific region. 

Rise of Compromised ChatGPT Accounts

Many employees are using chatbots to streamline their job, whether it be company communications or software development

ChatGPT, by default, keeps a record of all user inquiries and AI responses.

As a result, unauthorized access to ChatGPT accounts may reveal private or sensitive information that can be used to launch attacks specifically against businesses and their employees.

“Many enterprises are integrating ChatGPT into their operational flow.

Employees enter classified correspondences or use the bot to optimize proprietary code”, said Group-IB’s Dmitry Shestakov.

“Given that ChatGPT’s standard configuration retains all conversations, this could inadvertently offer a trove of sensitive intelligence to threat actors if they obtain account credentials.”

According to the information shared with Cyber Security News, a significant number of logs, including ChatGPT accounts, have been compromised by the infamous Raccoon information stealer.

Compromised ChatGPT accounts
Information stealers frequently exchange logs that include compromised data on dark web marketplaces.

The domain lists discovered in the logs and the information on the hacked host’s IP address are additional details about logs that are accessible on such markets.

Between June 2022 and May 2023, the Asia-Pacific area had the highest percentage (40.5%) of ChatGPT accounts that information stealers compromised.

Victims distribution

Consider disabling the platform’s chat saving option if you use ChatGPT to input sensitive data or delete such chats manually as soon as you’re done using the service.

Even if you do not save discussions to your ChatGPT account, the malware infection might still result in a data leak because many information stealers take screenshots of the compromised machine or carry out keylogging.

For this reason, people handling particularly sensitive data should only use solutions securely constructed locally and housed on their servers rather than entrusting any cloud-based services with it.

Looking For an All-in-One Multi-OS Patch Management Platform – Try Patch Manager Plus


[ad_2]
Source link

Black Cat ransomware group wants $4.5m from Reddit or will leak stolen files

0
[ad_1]

We take a look at news that data stolen from Reddit may be leaked soon unless the site pays a cool $4.5m to keep it offline.

The ramifications of a Reddit breach which occurred back in February are now being felt, with the attackers threatening to leak the stolen data. The February attack, billed as a “sophisticated phishing campaign” by Reddit, involved an attempt to swipe credentials and two-factor authentication tokens.

One employee was tricked into handing over details, and then reported what had happened to Reddit. Its security team locked things down and began investigating.

The employee’s credentials were reportedly used to gain access to “some internal docs, code, as well as some internal dashboards and business systems”, which exposed “limited contact information” for company contacts and employees, and information about advertisers.

Reddit advised users that their passwords were safe, and so there was no need to alter login details. There were also “no signs” that the breach impacted “the parts of our stack that run Reddit and store the majority of our data, or any of your non-public data”. At the time, Reddit received praise for the clarity of the messaging. “This happened, that didn’t, your login is fine” is somewhat unusual in these situations and messaging is often confusing or even simply absent for far too long.

It seems we’re finally about to find out how on the money Reddit’s assessment of the situation was. Bleeping Computer reports that the Black Cat ransomware group is claiming responsibility for the attack. Worse, its threatening to drop roughly 80GB of data online after supposed attempts to claim a ransom of $4.5m were ignored.

Here’s what Black Cat—also known as ALPHV—has to say about this one:

…I am very happy to know that the public will be able to read all about the statistics they track about their users and all the interesting confidential data we took. Did you know they also silently censor users?

Bold claims indeed, but nobody will know for sure how much of the claims is true or simply bluster until and unless the files are leaked. Interestingly, Black Cat is also demanding that Reddit alters its controversial API pricing changes.

Bleeping Computer notes that nothing was encrypted in this attack; it appears that this was “just” about grabbing as much data as possible and using it to extort money from the victim. A double threat ransomware attack without the ransomware, if you will. Even so, this still presents a major headache for Reddit even without having to worry about encrypted devices.

At this point, nobody knows what exactly may leak when the data drop comes (if it ever does). There is no suggestion from the Black Cat group that passwords were grabbed, so that’s one plus point for Reddit users. As for the rest of it, this seems like a mess for the Reddit CEO and team to deal with.

Black Cat is definitely one of the more prominent ransomware players in recent times, with a string of high-impact and notable attacks. Lehigh Valley Health network in Pennsylvania was hit hard in February of this year, with an understandable furore over photos of breast cancer patients. Elsewhere, the dedicated leak site continues to play to its strengths as we can see with the current Reddit story. As you can see from our June Ransomware review, Black Cat is always close to the top of the pile where infections are concerned. Time may be running out for Reddit as far as the above breach goes, but with a little bit of pre-planning your organisation doesn’t have to meet the same fate.

How to avoid ransomware

  • Block common forms of entry. Create a plan for patching vulnerabilities in internet-facing systems quickly; disable or harden remote access like RDP and VPNs; use endpoint security software that can detect exploits and malware used to deliver ransomware.
  • Detect intrusions. Make it harder for intruders to operate inside your organization by segmenting networks and assigning access rights prudently. Use EDR or MDR to detect unusual activity before an attack occurs.
  • Stop malicious encryption. Deploy Endpoint Detection and Response software like Malwarebytes EDR that uses multiple different detection techniques to identify ransomware, and ransomware rollback to restore damaged system files.
  • Create offsite, offline backups. Keep backups offsite and offline, beyond the reach of attackers. Test them regularly to make sure you can restore essential business functions swiftly.
  • Don’t get attacked twice. Once you’ve isolated the outbreak and stopped the first attack, you must remove every trace of the attackers, their malware, their tools, and their methods of entry, to avoid being attacked again.

Malwarebytes EDR and MDR removes all remnants of ransomware and prevents you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.

TRY NOW


[ad_2]
Source link

WhatsApp readies numbered thumbnails for media selections

0
[ad_1]

WhatsApp is readying a nifty new trick that will help you keep better track of your media selections when sharing multiple files at once. Instead of a checkmark indicating selected files, the app will now use numbers (1, 2, 3, …). Selected files are numbered in the order of their selection, giving you a better idea of which files should come next. The new update also slightly increases the exposure of the thumbnail to make it easily noticeable.

Numbered thumbnails will let you keep track of your media selections

WhatsApp is the most widely used messaging app around the world. More than two billion people use the Meta-owned service to communicate with their friends, families, and colleagues globally. The app is already quite feature-rich to make these conversations feel complete. But that doesn’t mean there’s no room for improvement. The company frequently pushes new updates to the app to give users a better messaging experience and more features to enjoy every day.

These numbered thumbnails for selected media files are certainly something that most of us didn’t realize we were missing. WhatsApp currently lets you send up to 100 photos and videos at once, many more than the previous limit of 30 files. When selecting files to share, the app uses checkmarks to indicate your selections. A counter at the top of the screen tells you how many files you have selected, while selected files line up in their order of selection at the bottom.

However, that bottom row only fits a maximum of seven tiny thumbnails. It’s difficult to track the order of your selection if you want to share more files unless you repeatedly swipe through it to check the order of selected files or make a mental note of the sequence. With numbered thumbnails, you now get a much better track of the sequence of your media selections in WhatsApp. This will help you decide which file to pick next when sharing multiple photos and videos.

This feature can be found in the latest beta build

This new feature is currently available to users with WhatsApp beta version 2.23.13.6 for Android. If you are in the beta program and want to try it out, install the latest update for the app. Others will have to wait until WhatsApp brings this update to the stable channel. Interested users can join the beta program from here for early access to this improved media picker. WhatsApp beta also gives you early access to many other upcoming features, including circular video messages and redesigned emoji keyboard.

WhatsApp new media picker numbered thumbnails


[ad_2]
Source link

Smartphone or website for reverse phone number lookup?

0
[ad_1]

Phone number lookup services have been around for quite some time, but it wasn’t until the advent of mobile phones that they really started to become popular. With the introduction of smartphones, these services became even more accessible and convenient. With the ever-growing popularity of smartphones and mobile applications, it’s no surprise that more and more people are turning to their phones for various tasks. But regarding reverse phone number lookup access, which is better to use – a smartphone or a website?

Comparing usage of mobile apps or websites for reverse phone number lookup

When it comes to reverse phone number lookup, both mobile apps and websites have their own advantages. Mobile apps are usually more convenient to use since they can be accessed from anywhere, anytime. Also, if looking for more specific information, such as criminal records or background checks related to a certain phone number, then utilizing free reverse phone lookup with name might be preferable since many such services have access to the relevant databases. They also tend to be faster than websites.

On the other hand, using a website may be the best option if you’re looking for basic information such as name, address, and other contact details associated with a particular phone number. Most websites offer comprehensive databases that provide detailed results in seconds. Ultimately though, both options can provide valuable results depending on what type of data you need from your search. It all boils down to personal preference and how much time and effort you want to put into finding the necessary information about any given phone number.

Considerations for choosing a paid or free phone reverse lookup

When it comes to choosing a phone reverse lookup service, you have the liberty to choose between paid services or free services. Free services may be limited in the amount of information they provide, while paid services typically offer more comprehensive results. To add to that, some free services may require you to sign up for an account before you can access their data. It’s important to read the terms and conditions of any service before signing up. Another factor to consider is the accuracy of the data provided by the service. Paid services often have access to more reliable databases than free services, so it’s important to research and ensure that your chosen service is reputable and trustworthy. Finally, consider how quickly you need access to the information. Some paid services offer faster turnaround times than free ones, so it may be worth investing in a paid service if you need quick results.

How to use different types of mobile reverse phone number lookup usability features

Mobile reverse phone number lookup services are a great way to find out who is calling you, even if the caller’s number is not listed in your contacts. To make the most of these services, it’s essential to understand their different usability features. For instance, some services allow you to search for a person by name or address, while others provide more detailed information, such as background checks and criminal records. Moreover, some services offer caller ID blocking and other privacy features that can help protect your personal information. It’s also important to consider how easy using the service on your mobile device is. Some services may require downloading an app or using a web browser, while others may be accessible directly from your phone’s home screen. Finally, make sure that the service you choose offers customer support in case you have any questions or need help using the service. By understanding these features and taking advantage of them, you can ensure that you get the most out of your mobile reverse phone number lookup experience.

Balancing safety and convenience with phone number lookups

Where phone number lookups are concerned, it’s essential to balance safety and convenience. On the one hand, you want to ensure the service is secure and your personal information is protected. On the other hand, you also want to ensure that looking up a phone number is as easy and straightforward as possible. To achieve this balance, start by ensuring that the service provider you choose has robust security protocols. Look for features such as two-factor authentication or encryption of data stored on their servers. It is also important to ensure that they have a clear privacy policy in place so you know exactly how your data will be used and shared with third parties. Finally, look for services that offer an intuitive user interface so you can quickly find what you’re looking for without going through too many steps or menus. Such precautions followed carefully will ensure that you enjoy both safety and convenience when using phone number lookup services.


[ad_2]
Source link

Meta’s latest project is so dangerous that even it doesn’t want to release it

0
[ad_1]
Welcome to 2023, also known as “The Age of AI”. Well, in all honesty, we’ve been in an age of AI for awhile now, as some of the best phones rock AI-fueled features. What we’re currently defining as “growth” is likely to be just the start of a super-boom, but still: the hype is real.

As it turns out, everyone has an AI project nowadays. ChatGPT showed its superior capabilities to immensely entertain the minds of several generations and it can even boost your productivity if you use it right! And that’s how the fad became fact. 

So it basically took no time at all for Microsoft and Google to rush out AI platforms of their own. Shocking, Samsung won’t be doing that — outside of its internal tool, but that drama was slightly different. But someone is missing.

Where’s Meta in all of this? Well, you asked just in time. The company unveiled its latest AI-fueled project and… refused to release it to the public? Like, not make a profit? 

Huh. Wow.

Okay, before we all continue with this series of shocked gasps, let’s elaborate on what the AI even does. Meta’s take differs from the text-based platforms we’ve become witness to thus far, as “Voicebox” is basically capable of generating speech.

Alright, cool, it does text-to-speech. Where’s the scary part? Well, according to Meta’s own research, the platform vastly outperforms other tools from the category. In fact, it is capable of going beyond what it has been trained to accomplish.

Whew, sounds like Meta saved us from an early AI-pocalypse.

But since it’s really fun to see how that might’ve turned out, let’s check on what Voicebox can do anyway. Currently, it is capable of reproducing accurate text-to-speech replication of a person’s voice in six European languages.

So, this may sound pretty harmless. But then the accuracy, precision and detail with which the AI platform executes the task become apparent. And it starts getting Goosebumps-y.

But still, the real surprise here doesn’t come from the fact that Voicebox is outperforming its programming. This was bound to happen sooner or later and Meta is part of Big Tech, so no shocks there. But the company’s choice to effectively not earn money from this platform is absolutely inspiring.

And while this won’t stop existing voice machines from almost-perfectly creating voice clips that sound eerily similar to prolific public figures and political actors, it still raises our faith in humanity just a bit. Before the eventual AI-pocalypse sequel comes, at least.


[ad_2]
Source link

What you need to know

0
[ad_1]

We take a look at some of the options available for your baby’s monitor setup. Is Wi-Fi or something else the best fit for you and your family?

Do you have an impending new arrival in your family of the small and very noisy variety? If so, you’re probably going to invest in a baby monitor for peace of mind both at night and during the day. But do you know what kind of monitor you’re going to buy? Will it be audio only, or have images? Will it be Wi-Fi, or the non Wi-Fi kind? Did you know there’s a non Wi-Fi kind?

As it happens, you don’t have to buy an internet connected device for one of the most private areas of your home. There’s plenty of cheap Internet of Things (IoT) baby monitors out there with default passwords baked in, insecurely stored data, and an alarming amount of compromise stories in the news. If you wish, you can bypass this problem almost completely and go for a device entirely lacking in internet functionality.

The trade-off in this situation is that the device you buy won’t have as many features as a Wi-Fi product, such as the ability to check in on your baby on an app on your phone if you’ve got a babysitter for the evening. However, if all you really care about is monitoring your baby when you’re not in the same room as them, then you can probably go for something more basic.

Non-internet connected baby monitors come with a standalone screen. These screens connect back to the camera in your child’s room. Instead of Wi-Fi, they use other technologies called Digital Enhanced Cordless Telecommunications (DECT) and Frequency Hopping Spread Spectrum (FHSS).

FHSS is one alternative to smart home networks and IoT devices. It rapidly switches frequency when in operation, which can mean a very low chance of someone trying to compromise the device. This isn’t to say a non Wi-Fi camera is unhackable, but given the short range of transmission for these devices, someone would have to be very close to your home to begin poking around. Much the same can be said with baby monitors that use DECT

An internet-connected baby monitor is more out of your control. Even if you lock things down at your end with secure passwords it could go wrong if the company you use reveals that footage of your child was stored on an open server somewhere.

In fact, the data doesn’t need to be accidentally stored on an open server at all. Sometimes, the people responsible for keeping your information safe have other ideas in mind. Amazon’s Ring was recently fined by the FTC after it was discovered that every employee had previously had access Ring videos, with some abusing that power to look through users’ personal videos. The FTC also highlighted lack of proper security precautions related to warding off attacks, such as credential stuffing.

If you sign up to a home IoT system managed by one organisation, this is what you might be facing from the very entities you’re entrusting with the most personal details of your living space. It’s probably low risk, but it’s a risk all the same. With this in mind, if you want to go down the Wi-Fi route, here are some tips for securing your baby monitor.

Tips for keeping your baby monitor safe

  1. Change your password: Some cheap devices may ship with passwords that cannot be changed, ever. If this is the case, those passwords are almost certainly available online for anyone to see. Avoid those at all costs and get one where you can change the password. Then change the password as soon as you set up your monitor.
  2. Make your password strong: A weak password could let someone into your baby monitor and allow them to view videos, or even speak over the monitor.
  3. Use multi-factor authentication (MFA): Pick a baby monitor that allows you to use multi-factor (or 2-factor) authentication. This means that even if someone manages to guess your password, they won’t be able to get into your account.
  4. Keep your videos stored locally: There are perhaps specific reasons why you may want recordings from your child’s room stored somewhere. If so, go for a product which allows local saving. It’s simply not worth the risk of footage making its way into the cloud, and other people’s hands.
  5. Turn it off: If you don’t need a camera enabled in your baby’s room, then consider powering it down when not needed. The window of opportunity for breaking into a device is made even smaller if nobody can access it, so when your baby is elsewhere just flip that switch.

As with all digital toys, really have a think about what you need in a device. If you don’t need to see your baby over an app when you’re away from home, then maybe there’s no need for an internet enabled monitor. The more connected you make your home, the more potential security risks you introduce.


We don’t just write about threats—we remove them

Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.


[ad_2]
Source link

Galaxy S22, S20 & Fold 2 bag Samsung’s June update in the US

0
[ad_1]

Samsung‘s June 2023 update is available for a bunch of Galaxy devices in the US. The company has released the new security patch for the Galaxy S22 series, Galaxy S20 series, and Galaxy Z Fold 2 stateside. The new SMR (Security Maintenance Release) is also widely rolling out to the Galaxy Note 20 series and the Galaxy S21 FE. These devices have already picked up the June update in global markets.

The June SMR is available for both carrier-locked and unlocked units of the Galaxy S22 series in the US. The update comes with firmware build numbers S90*USQU2CWE7 and S90*U1UEU2CWE8, respectively. The rollout appears to be limited to devices on select networks currently, including T-Mobile, Dish, MetroPCS, US Cellular, Nextech, and Bluegrass Cellular. But a wider release shouldn’t be too far off.

This update doesn’t bring any notable new features to the Galaxy S22, Galaxy S22+, and Galaxy S22 Ultra. Samsung’s official changelog mentions updated Software and Terms & Conditions, some system stability and reliability improvements, and the latest security fixes. The June SMR contains more than 60 vulnerability patches. At least three of those are fixes for critical Android OS issues.

For the Galaxy S20 series, the rollout has begun with unlocked units. Samsung is pushing the June SMR to the 2020 flagships with the build number G98*U1UES5HWE1, SamMobile reports. The update is already available for users on pretty much every network. The devices aren’t getting anything more than this month’s security patches. The company should soon cover carrier-locked variants of the Galaxy S20 trio with the June SMR in the US.

The Galaxy Z Fold 2 is another Samsung device that recently started receiving the June update stateside. Samsung has released the new SMR for both carrier-locked and unlocked units of the foldable. The updated firmware build numbers are F916USQU3JWF1 and F916U1UEU3JWF1, respectively. The device is getting a similar changelog as the Galaxy S22 series, including updates to Software and Terms & Conditions.

The June update is widely available for the Galaxy Note 20 series in the US

The Galaxy Note 20 series was the first to receive Samsung’s June update globally. The rollout began in the US early this month but only for unlocked units. The company has now released the new SMR for carrier-locked variants as well. Users are getting the build number N98*USQU4HWF1. Once again, there appear to be some changes to Samsung’s Software and Terms & Conditions with this update.

Last but not least, the June update is now available for the carrier-locked variants of the Galaxy S21 FE in the US. It follows last week’s release for factory-unlocked units. The new build numbers for this phone are G990USQU7EWE3 and G990U1UES7EWE3, respectively. It’s the same changelog as the Galaxy Note 20, Galaxy S22, and Galaxy Z Fold 2, at least for carrier-locked units. If you’re using a Galaxy smartphone, you can check for new updates from the Settings app.


[ad_2]
Source link

Nokia is set to transform 5G with network slicing

0
[ad_1]

It’s no surprise that the advent of 5G has truly changed the telecommunication landscape, enabling internet speeds that seemed impossible just ten years ago. However, this landscape could change even further, as Nokia recently announced a new feature that would allow Android 14 users to purchase and activate network slices directly from their operators.

What exactly is Network Slicing?

The concept of network slicing involves dividing a physical network infrastructure into multiple virtual networks, thereby enabling customized and optimized services for different applications. For example, one 5G network slice can offer improved network performance and reduced latency for cloud gaming enthusiasts, while another can enable spectators at live sporting events to access video replays and real-time statistics. Additionally, network slicing would help significantly reduce network congestion, a common issue faced by public networks.

Although implementing this feature might seem costly and time-consuming, Nokia has devised a monetization strategy in which wireless providers will offer these specialized 5G network slices to subscribers in specific regions, thus creating new revenue streams and establishing a sustainable business model.

However, it’s important to note that Nokia isn’t the only company that has developed network slicing. This is because Ericsson, Oppo, and Qualcomm have previously tested 5G enterprise network slicing on commercially available smartphones, laying the groundwork for broader adoption of this technology.

Launching with Android 14

Nokia first tested the on-demand network slicing in Finland, where the tests demonstrated seamless compatibility with all 4G and 5G devices. As a result, the company aims to launch the feature with the release of Android 14, providing users with much faster speeds and reliability.

Speaking about the achievements, Ari Kynäslahti, Head of Strategy and Technology at Nokia Mobile Networks, stated, “This trial of the on-demand slicing solution for Android smartphone users is another step towards our goal of supporting new monetization opportunities for our operator partners. Slicing unlocks new 5G business possibilities for mobile operators, allowing them to provide premium services and enhance customer experiences.”


[ad_2]
Source link

Domino’s app has a new feature that will deliver pizza to places without an address

0
[ad_1]

So let’s say you’re at a nondescript park playing in a pick-up softball game and after the game is over, you want to reward your teammates (and maybe the other team) by ordering a few pizza pies. However, there is a little problem. The park you’re at doesn’t have a name and there isn’t an address for it that you know of. Well, if you order your pizza from the Domino’s app, you’re still okay even if you don’t have an address to accompany your order.

That’s because Domino’s Pizza announced today a new feature called Pinpoint Delivery that when selected as a delivery option on the Domino’s app will allow the user to drop a pin on a map. This will allow the world’s largest pizza company to deliver a Pizza to a park (like our example), a baseball field (also part of our example), the beach, a pool, a campfire and other locations. If you don’t mind sharing your pizza with seagulls, this could prove to be a great idea.
Christopher Thomas-Moore, Domino’s senior vice president – chief digital officer, said, “Domino’s is proud to be the first quick-service restaurant brand in the U.S. to deliver food to customers with the drop of a pin. We’re always striving to make customers’ experiences even better and more convenient, and Domino’s Pinpoint Delivery does exactly that.” The Pinpoint Delivery feature allows Domino’s to deliver to “a countless number of dynamically created hyper-local spots without a typical address.”

While using this feature, consumers will still be able to track their order using Domino’s Tracker, see the GPS location of the driver, and have an ESTPA (estimated time of pizza arrival). When the driver arrives at the pickup spot, the customer will receive an alert. After the alert is received, the customer will activate a visual signal on his phone to help the driver spot him.

Domino’s says “Domino’s Pinpoint locations are delivery locations without traditional addresses selected by customers who order online, pre-pay with credit, debit, or Domino’s gift cards, and agree to receive up to five text notifications that provide updates on their order. Customers and delivery experts will meet at specific locations designated in the Domino’s app that may be adjacent to places like parks, baseball fields, and beaches. Message and data rates may apply.”

So the next time you’re lying on a towel at the beach and you get a message from your stomach that it wants you to order a pizza, using the Domino’s app and Pinpoint Delivery can make it happen. You can download the Domino’s app for iOS by tapping on this link, or for your Android phone by clicking on this link.

[ad_2]
Source link