VirusTotal AI code Analysis Expanded to Spot Malicious Files

andreasc
-
0
VirusTotal AI code Analysis Expanded to Spot Malicious Files
[ad_1]
VirusTotal AI code Analysis

In April 2023, Google announced VirusTotal Code Insight to improve the capacity of its malware detection and analysis platform. This week, Google released an enhanced version of VirusTotal Code Insight, including support for more scripting languages.

Code Insight is an AI-based code analysis feature powered by the Google Cloud Security AI Workbench that uses the Sec-PaLM large language model (LLM) tailored for security use cases.

“Code Insight has broadened its support for script formats, moving beyond PowerShell to offer analysis for various scripting languages,” VirusTotal founder Bernardo Quintero said.

Updates to VT Code Insight

Code Insight, which was once limited to analyzing a subset of PowerShell files, can currently detect malicious Batch (BAT), Command Prompt (CMD), Shell (SH), and VBScript (VBS) scripts.

The maximum file size limit for files handled by Code Insight has been doubled, allowing for an analysis of larger files.

Further, the model provides more brief and concentrated high-level explanations, emphasizing code behavior.

The user interface has been modified to display only the initial sentences of the report by default, with the option for users to expand the report as needed, preventing lengthy reports from overpowering the default view.

ESXiArgs sample analysis by VirusTotal Code Insight

The functionality is currently in active development and should be regarded as beta. In the upcoming months, VirusTotal intends to enhance it by supporting more file formats, bigger file sizes, and the analysis of executable file types like.exe.

For example, the team intends to provide the study with more context by granting the AI access to “any metadata related to the URLs and files linked in the code snippet.”

Security researchers and other users can utilize Code Insight to analyze the behavior of scripts, making it an intriguing feature. Its use will increase when the service is expanded to support more file types, particularly executable files.

Struggling to Apply The Security Patch in Your System? – 
Try All-in-One Patch Manager Plus

EHA

[ad_2]
Source link

Google may let you use your Pixel phone as a dashcam

andreasc
-
0
Google may let you use your Pixel phone as a dashcam
[ad_1]

Smartphones have already replaced tons of devices in our lives like our clocks, video game consoles, cameras, microphones, Etc. Well, according to an APK deep dive by 9To5Google, it seems like Google wants your Pixel phone to replace your dashcam as well.

Since this was an APK Deep dive, you’ll want to take this news with a grain of salt. Essentially, early code for a feature was hidden within the current version of an app. Since it’s hidden within the app, Google can silently take it away if need be. So, there’s a chance that we may never see this feature.

Google might let you use your Pixel phone as a dashcam

Sometimes, you want to keep a record of what you witnessed while driving. Maybe you see an accident, or you yourself were in an accident. Having video proof of what happened during a traffic incident can turn the tide in a legal battle.

So, having one is important, but they can be rather expensive. However, if you have a Pixel device, then you might be in luck. According to 9To5Google, Google may have accidentally launched a dog food version of the personal safety app. Basically, it’s a version of the app that’s used for internal testing amongst the developers.

This version has the version number 2023.04.27.532191641.8-dogfood, and it wasn’t really meant for public use. However, they were able to crack into the app and discover some strings for and enable this potential feature.

The function is pretty self-explanatory. If you have the proper rig, you can attach your device to your dashboard and consistently record video of the traffic ahead of you.

Functions

The app is built to be very conservative with your storage. On average, the recorded video is about 30MB per minute, and the recordings are deleted three days after being recorded. However, you can save those recordings to preserve them.

Using a feature like this could definitely drain your battery, but the app lets you lock your screen while using it. If you need to have your screen on for apps like Google Maps, you can move the personal safety app to the background and use other apps over it.

Along with recording video, the dashcam can also record audio. Aside from that, you’ll be able to launch the dashcam using a home screen shortcut. There’s also a set-it-and-forget-it mentality behind this feature, as you can set the dashcam to start immediately when connected to certain Bluetooth devices.

At this point, there’s no telling if Google will actually launch this feature. We will have to wait and see. The next feature drop for Pixel phones isn’t too far away, so there’s a chance that we might see that feature drop then.


[ad_2]
Source link

New Galaxy Buds 2 Pro update enhances Ambient Sound

andreasc
-
0
New Galaxy Buds 2 Pro update enhances Ambient Sound
[ad_1]

Samsung has announced a new update for the Galaxy Buds 2 Pro. Scheduled to roll out in the coming weeks, it will bring enhancements to the Ambient Sound feature. The company plans to add new customization and fine-tuning options that will be particularly beneficial to people who are hard of hearing.

The Galaxy Buds 2 Pro are Samsung’s latest TWS earbuds, and one of the best out there currently. The company launched this pair in August last year alongside the Galaxy Watch 5 series and new foldables. These buds came with three levels of customization for the Ambient Sound feature out of the box. Depending on your need and preference, you could customize the feature to let in an optimal amount of surrounding sound when listening to music or other audio content.

The upcoming update will add two more levels of Ambient Sound customization, giving you a total of five options. The additional levels will allow people with hearing loss to better communicate with their surrounding by letting in more surround sound.

A clinical trial by the University of Iowa’s Hearing Aid and Aging Research Laboratory concluded that the Galaxy Buds 2 Pro “significantly improved speech perception in those with mild-to-moderate hearing loss”. A similar trial conducted by Samsung Medical Center concluded the same.

Following this addition, Galaxy Buds 2 Pro users will have more options when fine-tuning their left and right audio preferences. That’s thanks to Samsung letting you customize the Ambient Sound volume for each bud separately. You can also define the Ambient Sound tone by selecting one of the five stages ranging from Soft to Clear. The Galaxy Buds 2 Pro has an adaptive ambient sound feature as well.

This update for the Galaxy Buds 2 Pro will arrive soon

Samsung announced the latest update for the Galaxy Buds 2 Pro to mark the occasion of Global Accessibility Awareness Day 2023, which falls on Thursday, May 18 (observed on the third Thursday of May every year since 2012).

It is an awareness day focusing on digital access and inclusion for people with disabilities or impairments. In its press release, the company said that the new features will help those who are hard of hearing “better enjoy the sounds of the world around them.”

As said earlier, this update will roll out to Galaxy Buds 2 Pro users globally in the coming weeks. Once the update is available for you, the Galaxy Wearable app on your connected smartphone will send a notification prompting you to download it. Install the update to access the new features, which will be available in the Laboratory menu under Earbuds settings.

Note that updates are usually released in batches and may take a while to reach everyone around the world. We will let you know if Samsung pushes this update to other Galaxy Buds models.

Samsung Galaxy Buds 2 Pro new update Ambient Sound


[ad_2]
Source link

TikTok creators will soon dip their toes into a $6 million fund, awarding AR effects

andreasc
-
0
TikTok creators will soon dip their toes into a $6 million fund, awarding AR effects
[ad_1]

Back in February, TikTok announced its new Creativity Program, aimed at motivating creators to… well, create. The thing was in beta back then, and the first incentive ironically tried to encourage creators to make longer videos (while other platforms have been trying to copy TikTok’s short format for years).

Now there’s yet another way for TikTok creators to try and pay the rent, and it’s called Effect Creator Rewards. Basically, if you create an effect that makes it into half a million unique videos, you get some cash from a huge $6 million dollar pool.“The $6 million dollar fund, available to creators in select regions, will offer payments to creators based on the community’s engagement with their effects. At launch, for every effect that’s used in 500K unique videos within 90 days of being published, a creator will collect $700 USD. For every 100K videos published thereafter within the same 90 days, creators will collect an additional $140,” explained the company in a blog post.
Looking at the paragraph above, it’s clear that this $6 million fund will be distributed very carefully, and you can’t expect to buy that dream Malibu house while making TikTok effects. Nevertheless, it’s another instrument encouraging TikTok creators to get serious on the platform. The new program is available through Creativity Beta and currently live in the US, France and Brazil.

Two months ago, at the beginning of March, TikTok launched another incentive called Series, enabling creators to offer premium content to fans for a fee. All these efforts came after many popular TikTokers voiced their concern with the income they’re making from the platform. What do you think about it? Are we going to get rich by flooding TikTok with effects?


[ad_2]
Source link

APT Hackers Using Custom Backdoor to Attack Government Orgs

andreasc
-
0
APT Hackers Using Custom Backdoor to Attack Government Orgs
[ad_1]
Lancefly APT Hackers

The cybersecurity researchers at Symantec Threat Labs recently discovered APT hacking group has been utilizing the specialized ‘Merdoor’ backdoor malware to conduct precise and prolonged attacks on the following sectors in South and Southeast Asia since 2018:-

  • Government
  • Aviation
  • Telecommunication

While apart from this, since 2018, Lancefly has been using the Merdoor backdoor malware in specific attacks.

Symantec researchers have observed the usage of this backdoor malware in multiple campaigns, spanning from 2020 to the first quarter of 2023, with the primary aim of spying and gathering intelligence reports.

Lancefly APT Hackers Attack Chain

Although Symantec has not identified the precise initial infection method employed by Lancefly, evidence suggests that the group has utilized techniques such as phishing emails, SSH credential brute forcing, and exploiting vulnerabilities in public-facing servers to gain unauthorized access.

The attackers inject the Merdoor backdoor through DLL side-loading into legitimate Windows processes, such as “perfhost.exe” or “svchost.exe,” to help the malware evade detection once it gains a foothold on the target system.

The Merdoor dropper contains three files, and it is a self-extracting RAR (SFX):-

  • A legitimate and signed binary vulnerable to DLL search-order hijacking
  • A malicious loader (Merdoor loader)
  • An encrypted file (.pak) containing the final payload (Merdoor backdoor)

The Merdoor dropper, upon execution, extracts embedded files and leverages older versions of five legitimate applications to facilitate DLL sideloading for loading the Merdoor loader.

After installing itself as a service that persists between reboots, the Merdoor backdoor establishes communication with the C2 server via several supported protocols. It awaits further instructions, enabling Lancefly to maintain access and a foothold on the victim’s system.

Here below, we have mentioned all the supported communication protocols:-

Merdoor functions as a backdoor that can receive commands through local ports and records keystrokes to gather potentially useful information.

To swiftly execute scheduled tasks on remote systems through SMB, Lancefly utilizes Impacket’s ‘Atexec’ feature. At the same time, it does so as a means to propagate through the network or eliminate output files generated by previous commands.

The attackers employ memory dumping, stealing registry hives, and encrypting files with a disguised WinRAR tool, followed by likely exfiltration using Merdoor to steal credentials and extract sensitive data.

Attack Chain Tools and TTPs

Here below, we have mentioned all the attack chain tools and TTPs:-

  • Impacket Atexec
  • Suspicious SMB activity
  • WinRAR
  • LSSAS Dumper
  • NBTScan
  • Blackloader
  • Prcloader

ZXShell Rootkit

Lancefly attacks incorporate an upgraded ZXShell rootkit, leveraging its advanced capabilities through the “FormDII.dll” loader, which enables the deployment of tailored payloads, execution of shellcode, termination of processes, and additional functionalities based on the host’s system architecture.

EHA

Lancefly uses a shared codebase for their tools, as evidenced by the common code between the rootkit’s installation and updating utility and the Merdoor loader, with the former also capable of:-

  • Creating services
  • Modifying the registry
  • Compressing its executable to evade detection

Possible Links

Although the ZXShell rootkit has been used by multiple Chinese APT groups, including APT17 and APT41, the connection to Lancefly is tenuous due to the rootkit’s public availability for years.

The rootkit loader name “formdll.dll” used by Lancefly has been observed in a previous APT27 campaign, but it remains uncertain if this choice intentionally confuses analysts and hinders attribution efforts.

The utilization of commonly employed PlugX and ShadowPad remote access trojans (RATs), shared by multiple Chinese APT groups, provides additional support for the proposition that Lancefly has Chinese origins.

Struggling to Apply The Security Patch in Your System? – 
Try All-in-One Patch Manager Plus


[ad_2]
Source link

OnePlus V Fold & OPPO Find N3 to feature the same design

andreasc
-
0
OnePlus V Fold & OPPO Find N3 to feature the same design
[ad_1]

According to a new report, the OnePlus V Fold and OPPO Find N3 will feature the same design. This information comes from 91mobiles, in collaboration with Yogesh Brar. One thing to note is that this tipster has a mixed track record, so take this info with a grain of salt.

The OnePlus V Fold & OPPO Find N3 tipped to feature the same design

Having said that, the OnePlus V Fold will become the company’s first foldable smartphone. OnePlus trademarked both the OnePlus V Fold and OnePlus V Flip names earlier this year. The ‘Flip’ name is presumably reserved for its clamshell foldable.

The tipster also says that the two devices will have the same cameras as the OPPO Find X6. That device includes a 50-megapixel main camera (Sony’s IMX890 sensor), a 48-megapixel ultrawide unit (Sony’s IMX581 sensor), and a 32-megapixel periscope camera. Hasselblad will also be a part of the picture.

Now, the OPPO Find N and Find N2 are quite compact when folded, and they unfold to a 7.1-inch form factor. Those two devices were rather unique in the book-style foldable market, though unfortunately neither made its way to global markets.

The OPPO Find N3 will be larger than its predecessors, based on rumors

The OPPO Find N3 is rumored to be larger, for better or worse. It’ll lose some of its appeal because of that, but that’s what the rumors are claiming. The same goes for the OnePlus V Fold, of course, if they end up being the same design-wise.

The rumors claim that the two devices will feature an 8-inch 120HZ display when they unfold. 20 and 32-megapixel selfie cameras were also mentioned in previous rumors. The same goes for a 4,805mAh battery.

If these rumors end up being true, the OPPO Find N3 and OnePlus V Fold could end up featuring the Google Pixel Fold-like form factor. If OPPO doesn’t change things around entirely, and doesn’t go for a vertically-oriented foldable, like the Galaxy Z Fold 4. We’ll see.

The OnePlus V Fold is expected to launch in Q3 this year, while the OPPO Find N3 will likely arrive in Q4.


[ad_2]
Source link

Top 5 best UK mobile blogs and websites

andreasc
-
0
Top 5 best UK mobile blogs and websites
[ad_1]

It’s not deniable that over the last decade, advancements in mobile technology have revolutionized how we interact socially, professionally and personally.

Perhaps, it will be difficult to keep up with the newest advancements and trends in the mobile industry due to the constant stream of new mobile devices and accessories. This is why both dedicated techies and occasional users should bookmark some of the best mobile-friendly websites and blogs.

Well, the following article goes over the finest five UK-based mobile blogs and websites, including reviews of new devices, news and in-depth analysis and opinion from industry professionals. So, let’s keep going!

UK mobile blogs image 839489384

NextGenPhone

First and foremost, if you’re looking for the latest news on mobile devices and technology developments, look no further than NextGenPhone, a top mobile technology website situated in the UK.

Smartphones, tablets, wearables and mobile accessories are just some of the subjects covered in the site’s wide variety of useful and entertaining articles.

Moreover, NextGenPhone’s team of experienced writers and professionals in the mobile sector provides the readers with the opportunity to catch up on the latest developments in the field. So, whether you’re a die-hard gadget geek or a first-time user, you’ll find plenty of useful information and tools here to help you find what you need.

ExpertReviews

Our next listed tech website is ExpertReviews – a UK-based tech website that focuses on reviewing and recommending consumer products such as mobile devices, computers and home appliances. They have a team full of experienced researchers and authors. To help customers in making informed purchases, they provide critical evaluations and in-depth explanations of the newest items. In addition, ExpertReviews has a vibrant user community that offers insightful criticism and debate on cutting-edge products.

MobileNews CWP

If you’re looking for the most up-to-date information about the mobile sector in the UK, check out MobileNews CWP. The site provides an all-encompassing perspective on the industry thanks to its expert team of writers and professionals, who cover everything from the newest smartphone launches to industry trends and market analyses.

MobileNews CWP also features exclusive interviews with prominent figures in the mobile phone industry, giving its readers access to new thoughts and viewpoints on the most recent innovations in the industry.

In addition to providing users with up-to-date news, the site also provides them with helpful how-to tips and reviews. Therefore, MobileNews CWP is the best place for everyone interested in the mobile phone industry to learn about the most recent developments.

MightyGadget

MightyGadget is a website founded in the United Kingdom that provides a unique perspective on the latest gadgets in consumer electronics. The site offers in-depth reviews and news on smartphones, laptops, and smartwatches and home appliances with an emphasis on comprehensive and technical analysis.

When compared to other sites, MightyGadget goes above and beyond to inform its viewers about emerging technology and specialised items. Expert authors and specialists in the industry often offer in-depth guides and advice on the site to help readers in making smart decisions.

GadgetsBoy

Last but not the least, GadgetsBoy is a technology blog that covers the most recent developments in consumer electronics, gadgets and other emerging technologies. The site’s creator is an enthusiastic technologist with plenty of experience in the industry and he uses his expertise to write insightful articles and reviews for his visitors.

GadgetsBoy provides a unique and interesting take on the current technological trends by covering a broad variety of issues, from smartphones and laptops to gaming and smart home technologies. All in all, GadgetsBoy is a go-to source for anybody who is interested in being abreast of the most recent technological news and advancements.

Conclusion

The mobile technology market in the United Kingdom is one of the most competitive and inventive in the world. Almost every day, new devices and accessories are introduced to the consumer market.

The good news is that customers have access to a multitude of materials that may assist them in being updated and informed about the most recent advancements in the industry. If you’re interested in keeping up with the rapidly developing field of mobile technology, the top five best UK mobile blogs and websites are excellent resources for you. So, be sure to check them out and keep yourself updated!


[ad_2]
Source link

Google Calendar and Microsoft Outlook finally play nice with each other

andreasc
-
0
Google Calendar and Microsoft Outlook finally play nice with each other
[ad_1]

Google is now rolling out a new update that’s supposed to make Calendar work smoother with Microsoft’s Outlook app. Those who missed appointments because the interoperability between the two apps was less than optimal, will be pleased to know that the latest update addresses many of these issues.

The recent improvements to “Calendar Interoperability” should solve any problems related to scheduling time and collaborative management for both calendar apps. Here is what’s in the newest Google Calendar update:

  • Microsoft Outlook users who also have a Google Calendar with the same email address can receive Google Calendar invitations and RSVPs in Outlook.
  • A default meeting reminder will be generated in Microsoft Outlook if the invitation was created in Google Calendar to help make sure guests using Outlook do not miss events.
  • Non-Google Calendar recurring events will be more systematically and accurately updated in Google Calendar.

The update is available to all Google Workspace customers, as well as legacy G Suite Basic and Business users. Those with personal Google Accounts are getting the updated version of Google Calendar too.As far as availability goes, there will be no rollout since these improvements are already live and available for everyone. If you’re an admin, you won’t have to do anything, as these update will be automatically deployed.

[ad_2]
Source link

ChatGPT Chief Testifies on AI risks To US Congress

andreasc
-
0
ChatGPT Chief Testifies on AI risks To US Congress
[ad_1]
ChatGPT Chief Testifies AI risks

To mitigate the threats posed by increasingly potent AI systems, government action will be essential, according to the CEO of the artificial intelligence company that produces ChatGPT.

The success of OpenAI’s chatbot, ChatGPT, provoked worries and an AI arms race among legislators during a Parliamentary session.

“As this technology advances, we understand that people are anxious about how it could change the way we live. We are too,” OpenAI CEO Sam Altman said at a Senate hearing.

For the most potent AI systems, Altman suggested the establishment of a U.S. or global agency with the capacity to “take that license away and ensure compliance with safety standards.”

Raised Concerns About The Next Generation

Concerns about the coming years of “generative AI” tools’ potential to deceive people, distribute false information, violate copyright laws, and displace some jobs have grown out of what began as an educator’s panic about ChatGPT’s usage to cheat on homework assignments.

The societal concerns that brought Altman and other tech CEOs to the White House earlier this month have prompted U.S. agencies to promise to crack down on harmful AI products that violate current civil rights and consumer protection laws.

Despite this fact, there is no immediate indication that Congress will draught comprehensive new AI rules, as European lawmakers are doing.

Sen. Richard Blumenthal, a Democrat from Connecticut and chair of the Senate Judiciary Committee’s subcommittee on privacy, technology, and the law, began the hearing with a recorded speech that appeared to be him but was a voice clone that had been trained on the Blumenthal’s floor speeches and was reading ChatGPT-written opening remarks.

The result was impressive, and he continued, “What if I had asked it, and what if it had provided, an endorsement of Ukraine surrendering or (Russian President) Vladimir Putin’s leadership?”

Except for stating that the sector may “significantly harm the world” and that “if this technology goes wrong, it can go quite wrong,” Altman largely avoided giving specifics.

Both Gary Marcus, a former NYU professor who criticized the AI hype, and Christina Montgomery, vice president and director of privacy at IBM, testify. 

Montgomery underlined the importance of striking a balance between innovation and ethical behavior and cautioned against fast AI development. Altman and Montgomery recognized that AI could both create and destroy jobs.

Recently, Altman demonstrated ChatGPT’s capabilities to Parliament politicians, and all attendees acknowledged the need for AI regulation. Altman has stated his commitment to the responsible development of AI while acknowledging its risks.

Elon Musk and others, however, call for a temporary halt to developing potent AI systems because of the grave societal concerns involved.

EHA

Government Involvement Is Crucial To Regulate AI

The fact that the committee hearing on AI in government took place simultaneously with the Parliamentary hearing shows how important AI is becoming to legislators. 

The government’s emphasis on ethical AI development is evident in Altman’s encounters with senior officials, including Deputy Prime Minister Kamala Harris and Prime Minister Joe Biden. Altman favors caution and greater safety precautions, but he doubts the efficacy of the open letter calling for a suspension of training as the best course of action.

Altman’s evidence emphasized the urgent need for government engagement to regulate AI, recognizing its transformative potential while emphasizing the significance of responsible development. The conversations highlight the numerous difficulties associated with AI and the ongoing attempts to balance innovation and risk reduction.

According to Montgomery, “We think that AI should be regulated at the point of risk, essentially,” by creating guidelines that control the application of particular uses of AI as opposed to the technology itself.


[ad_2]
Source link

Android TV users can now watch live TV

andreasc
-
0
Android TV users can now watch live TV
[ad_1]

Android TV users are getting a special treat from Google today with the arrival of live TV. As part of a new feature added to the Android TV platform called the Live Lab, users can watch a wide array of content from a collection of free channels.

As of right now this is a feature that only users in the US are getting access to. Google doesn’t mention when or if it will expand out to other regions, unfortunately. If you happen to use an Android TV device or have a TV with Android TV as the platform, and you’re in the US, you may start seeing the Live Lab today. Google does state though that this will be rolling out to users in the US over the next few weeks. So there is a good chance that most users won’t be able to access the free live TV yet.

You may also notice that some live TV content has been mixed into your recommendations. This is by design and is based on things like your favorite teams, channels, and shows.

Live TV on Android TV comes from multiple providers

You might be quite surprised at how much free TV there is out there to actually watch. With the Live Lab, users will get access to over 800 channels from Tubi, Plex, Pluto TV, and Haystack.

The channels included span a pretty wide set of broadcast networks. And will include news channels from CBS, NBC, ABC, and FOX. Additionally, Google says the Live Lab also includes global channels. And there’s support for more than 10 different languages including Japanese, Spanish, and Hindi.

The Live Lab also supports saving channels as favorites so you can easily get back to watching what you like most. It’s been a long time coming, but live TV is finally here. Although, Google TV users have been enjoying it since 2021.


[ad_2]
Source link
1...1,2531,2541,255...1,480Page 1,254 of 1,480