A critical vulnerability has been discovered in several models of D-Link wireless routers, allowing unauthenticated attackers to gain administrative access to the devices.
The CVE-2024-6045 vulnerability has a CVSS score of 8.8, indicating a high severity level.
Attackers behind Spinning YARN launched a new cryptojacking campaign targeting publicly exposed Docker Engine hosts by using new binaries chkstart (remote access with payload execution), exeremo (lateral movement through SSH), and vurld (Go downloader for malware retrieval) and a persistence mechanism that modifies systemd services with ExecStartPost for malicious commands.
It targets Docker API endpoints without authentication and shares TTPs with Spinning YARN, leading to high confidence they are linked, while analysis of individual payloads is crucial to understanding these campaigns’ evolution as they reuse names for updated or replaced payloads.
systemd unit files
The Spinning YARN malware campaign exploits misconfigured Docker, Apache Hadoop, Redis, and Confluence servers, infecting the system by scanning for open port 2375 and then deploying an Alpine Linux container.
The container exploits the Docker host by binding the root directory, giving the attacker full access to the system.
Free Webinar on API vulnerability scanning for OWASP API Top 10 vulnerabilities -> Book Your Spot
The attacker then installs persistence by adding cron jobs that fetch and execute malicious shell scripts. These scripts download additional tools and payloads that ultimately disable security measures, steal information, and potentially install cryptomining software.
Example contents of a modified amazon-ssm-agent.service
The chkstart malware establishes persistence on an Amazon Linux EC2 instance by modifying systemd unit files, searches for systemd services with the “enabled” status, and injects a malicious command (ExecStartPost) to execute a hidden binary named “top” upon their startup.
According to Datadog Security Researchers, it modifies the SSH daemon configuration to accept SSH keys from specific locations, enabling the attacker to add their own key for unauthorized access.
Once persistence is achieved, the “top” binary, revealed to be a custom-built XMRig cryptocurrency miner, utilizes the compromised system’s resources for crypto mining.
Lateral Movement:
Exeremo, a malicious Go binary, extracts usernames, hostnames, SSH keys, and ports from compromised servers’ shell history, SSH configs, and known_hosts files, then uses this information to spread laterally by connecting to other SSH servers and executing a remote shell script (ar.sh) on them.
Exeremo also retrieves and executes another script (s.sh) that installs scanning tools and deploys a custom Docker discovery utility. s.sh disguises a malicious binary (sd) as a common HTTPD process and configures it for persistence using systemd.
systemctl commands
The newly discovered payloads, sd/httpd and fkoths, are both Go ELF binaries. sd/httpd scans for vulnerable Docker Engine hosts and exploits them using the described techniques.
fkoths removes Docker images created during the initial infection and modifies the hosts file to block communication with the Docker registry by demonstrating continued development of the Spinning YARN campaign but doesn’t introduce novel functionalities.
FreeWebinar! 3 Security Trends to Maximize MSP Growth -> Register For Free
June 14, 2024 – On Wednesday June 12, 2024, a well-known dark web data broker and cybercriminal acting under the name “Sp1d3r” offered a significant…
June 13, 2024 – Google revealed that a firmware vulnerability in its Pixel devices has been under limited active exploitation
June 12, 2024 – Adobe announced changes to its ToS which sparked backlash among users, so it posted an explainer to take away the major concerns
June 11, 2024 – Canada’s and UK privacy authorities are going to investigate the data breach at 23andMe to assess what the company could have done better.
June 11, 2024 – Digital sharing is the norm in romantic relationships. But some access could leave partners vulnerable to inconvenience, spying, and abuse.
A 22-year-old British man was apprehended by authorities in Palma de Mallorca, Spain.
The arrest, carried out by the United States Federal Bureau of Investigation (FBI) in collaboration with the Spanish Police, marks a breakthrough in the fight against cybercrime.
According to a recent tweet from vx-underground, a U.K. hacker who was arrested by the FBI and linked to the scattered spider hacking group.
June 14th a 22-year-old British man was arrested in Palma de Mallorca, Spain.
Per the official report: the currently unidentified male is alleged to be behind a series of large-enterprise ‘hacks’ which resulted in the theft of corporate information and allowing an unidentified… pic.twitter.com/jygRdfCUpu
The currently unidentified male is allegedly behind a series of high-profile cyberattacks targeting large enterprises.
Free Webinar on API vulnerability scanning for OWASP API Top 10 vulnerabilities -> Book Your Spot
These attacks reportedly resulted in the theft of sensitive corporate information and facilitated unauthorized access to multi-million-dollar funds.
While specific details about the nature of the cybercrimes remain undisclosed, the suspect is broadly described as a “hacker” who “stole information,” leading to financial gains for his group.
The arrest was executed as the suspect attempted to flee Spain for Italy.
A judge in Los Angeles, California, had issued a warrant for his arrest, underscoring the international scope of the investigation and the coordinated effort between U.S. and Spanish authorities.
Media outlets in Spain captured footage of the arrest, which has since gone viral. The suspect’s face was censored in the footage, maintaining his anonymity.
The arrest of the British hacker is a significant milestone in the ongoing battle against cybercrime.
Authorities are now focused on uncovering the full extent of the suspect’s activities and identifying other Scattered Spider hacking group members.
The case highlights the importance of international cooperation in tackling cyber threats and protecting corporate and financial interests from malicious actors.
As the investigation continues, more details will emerge, shedding light on the methods and motivations behind these sophisticated cyberattacks.
For now, the arrest serves as a reminder of the ever-present threat of cybercrime and the relentless efforts of law enforcement agencies to bring perpetrators to justice.
FreeWebinar! 3 Security Trends to Maximize MSP Growth -> Register For Free
Google Calendar is widely regarded as one of the best calendar apps available, with millions of users relying on it to manage events, meetings, dates, and more. An APK teardown by Android Authority has revealed that Google Calendar is receiving an update that will give users more control over the holidays displayed in the app.
Allowing users to hide holidays may help users reduce visual clutter
Previously, Google Calendar did not allow users to hide individual holidays, offering only the option to display public holidays only. However, the new 2024.23.0-641736842-release for Android introduces a feature called “Hide this Holiday.” This feature will enable users to remove specific holidays from their calendars, significantly reducing visual clutter.
For users seeking to streamline their calendar view, the ability to hide specific holidays is a valuable addition. It allows users to focus only on the events that matter to them.
According to Android Police, the update also includes another feature under Holidays called “Selected Holidays.” While its exact function is not yet clear, it is speculated that this feature will enable users to choose a range of holidays to display. The update is not yet ready for public release. It is expected to launch for both the web and Android versions of Google Calendar.
Google is bringing helpful updates to Calender and other apps in their Workspace
Google consistently updates its stellar calendar app to enhance user experience. These updates aim to improve usability and functionality. Recently, it was discovered that Google Calendar will introduce a “Birthday” chip in the app. This chip is supposed to make it easier to keep track of recurring birthday reminders.
At Google I/O this year, the company also announced the integration of its Gemini chatbot into Google Calendar. The Verge reports that Google demonstrated a new feature where users can take a picture of a list of school events, and Gemini will automatically add them to their personal Google Calendar.
TrendForce has shared a report about the smartphone production in Q1 2024. The report reveals that the production has seen a significant 18.7% year-on-year growth, with a total smartphone shipment of 296 million units. Although, the smartphone production in Q1 2024 was still below the pre-pandemic levels of over 300 million units.
The smartphone production in Q1 2024 has improved by 18.7% YoY
The report also notes that some brands have opted for aggressive production in the first quarter. It has reportedly resulted in elevated channel inventories that need to be adjusted first. According to the report, the production numbers from those brands in the second quarter could see a decline of 5–10% compared to Q1 2024.
In Q1 2024, the global top six smartphone makers by production number were Samsung, Apple, Xiaomi, OPPO, Transsion, and Vivo. Reportedly, these six companies produced 80% of the total smartphones shipped during the period. You can see the ranking based on the number of units produced in the image below.
Credit: TrendForce
Galaxy AI could have helped Samsung to outperform its biggest rival
Samsung produced a total of 59.5 million smartphones in Q1 2024, occupying the first position. The company is followed by Apple, Xiaomi, and Oppo with 47.9 million, 41.1 million, and 33.8 million units of production respectively. Samsung’s addition of Galaxy AI in the S24 series could be one of the key reasons behind the success. Notably, Samsung is continuing to work on adding new features to Galaxy AI, which will reportedly debut with the upcoming Galaxy Z Fold 6.
Coming back to smartphone production in Q1 2024, Apple has faced a decline in sales in the Chinese market. This is expected to be due to the emergence of Huawei and the shift in user preference in the country. This decline has prompted several adjustments within the component supply chain. However, the production plans for processor chips reportedly remain unchanged.
Oppo also includes Realme and OnePlus. Oppo has faced significant competition in its home country from Honor. As a result, Oppo’s YoY growth in the first quarter lagged behind other Android brands. The company aims to maintain its production level from the first quarter.
Transsion, the owner of both Infinix and Tecno, came in the 5th position with 29.8 million units. The company has seen nearly 50% YoY growth into the first quarter of this year. However, TrendForece’s report reveals that the aggressive production in Q1, coupled with the overlapping low-end market competition with Samsung, Xiaomi, and Lenovo has led to inventory accumulation. A 15% decline in Transsion’s production for the second quarter is predicted.
Vivo (which also includes iQOO) came in the sixth or last position with a total of 21.7 million units shipped in the first quarter.
Welcome to another episode of “News You Probably Missed and Shouldn’t Have!” a news roundup, where we dig through the week’s forgotten stories like a raccoon rummaging through your trash. In this roundup, we piece together the quirky, the curious, and the downright strange tidbits that slipped through the cracks. Grab your coffee, sit back, and prepare for a wild ride through the headlines you didn’t know you missed.
Google Pay app bites the dust in the US
Google Pay, aka GPay, has waved goodbye to its US users. The app is no longer available stateside. But fear not, you can still tap to pay with your phone, just minus the familiar GPay logo. Now under the banner of the younger but supposedly more powerful sibling Google Wallet. Maybe the company believes switching from Pay to Wallet branding would make more people finally ditch their physical wallets. Or perhaps it hopes you won’t recognize your phone wallet and accidentally spend less.
Adobe says it doesn’t use its customers’ work to train AI
Adobe messed up and freaked everyone out by making it sound like it was stealing people’s art to train its generative AI tool. Now it is backtracking faster than a teenager caught using their parents’ credit card, saying “Whoa whoa whoa, no thievery here! Your artsy masterpieces are all yours.” Basically, Adobe is trying to be the cool kid at the party again, but everyone remembers that awkward silence it caused earlier.
NewJeans gets a court order to make Google reveal a YouTuber’s identity
K-Pop group NewJeans is throwing some shade… but legally! A mean YouTuber with the username “@Middle7” has been blasting them with nasty videos, and NewJeans wants to fight back. Since they can’t exactly call out “@Middle7” in the schoolyard (they’re K-Pop stars, not middle schoolers), they got a court order to sic Google on the YouTuber and reveal their real identity. Looks like “@Middle7” might be eating their keyboard soon!
Microsoft prepares to add your Android phone to Windows 11 File Explorer
Great news for Android users who also use a Windows 11 PC! Juggling files between your phone and computer might soon be a thing of the past. Microsoft is working on a feature that lets you see your Android phone directly in File Explorer, just like an external drive. Imagine being able to drag and drop photos or documents between your devices with ease! No more messing with tangled wires or funky transfer apps.
iOS 18 brings T9 dialing to the iPhone
Calling all iPhone users tired of hunting through contacts like a lost puppy! Rejoice, for iOS 18 brings the holy grail of T9 dialling. Need to call your friend Brian? Just tap in 2 (for B), 7 (for I), 2 (for A), and 6 (for N) on the keypad. Poof! Your iPhone magically pulls Brian to the top of the list, ready for a call. T9 dialing is like having a tiny fortune teller in your phone who can guess who you want to call based on a few button presses.
WhatsApp prepares to add a layer of privacy to your status updates
Ever accidentally posted a WhatsApp status update to your grandma that you meant for your besties? Fear not! An upcoming update will prompt you to confirm who can see your status before you hit share. Think of it as a “second chance” to avoid any awkward moments with distant relatives. WhatsApp is helping you be more judicious about what you share with the world, one status update at a time.
iPhone gets more charging limitations with iOS 18
iPhone users, now you can finally unplug from battery anxiety. Forget the stress of constantly plugging in your phone – you’re about to become a master of maximizing battery health! With iOS 18, you get more charging limitations, going all the way up to 95%. No more stress about leaving your phone plugged in throughout the night, while still ensuring you wake up with a near-full battery in the morning. This feature is a godsend for those who want their iPhone batteries to live forever.
Boost Mobile launches an affordable 5G phone
Calling all budget-minded phone lovers! Boost Mobile just dropped its latest phone, the Celero5G SC, and it’s designed to be easy on your wallet without skimping on features. A big screen, big battery, quality cameras, the phone has it all. Plus, it comes with a charger and cable, so you’re all set! And the best part? The carrier is giving away the Celero5G SC for FREE to new customers who switch to its network! Just visit your nearest Boost Mobile store. If you can’t visit a store, order the phone online for a nominal cost of $9.99.
T-Mobile fails to convince a customer to drop the FCC complaint
T-Mobile, the “Un-carrier,” tried to smooth-talk a customer out of complaining to the FCC about a price hike—like a magician trying to convince a rabbit it enjoyed disappearing in the hat—and failed spectacularly. The firm’s arguments and explanations appeared inaccurate and deceitful. It seemingly wanted to tangle the customer in heavy words but couldn’t quite pull off the feat. This whole situation is a hilarious public service announcement for always reading the fine print.
Nintendo Switch removes X integration with the latest update
Looks like pigeons everywhere can rejoice! No more epic Mario fails or Animal Crossing masterpieces clogging up their favorite social media platform X—well, at least not directly from the Switch. The latest update for Nintendo Switch ends X integration, blocking users from bragging about their achievements on the platform. Maybe this is Nintendo’s subtle way of encouraging us to actually talk to our friends about the games we love, instead of just live-posting every victory. Maybe this is the right way, as PlayStation and Xbox also removed X integration last year.
Four more states join DOJ’s antitrust lawsuit against Apple
The plot against Apple’s empire thickens! Four more states—Indiana, Massachusetts, Nevada, and Washington—have joined the Department of Justice’s lawsuit accusing Apple of being a smartphone bully. This brings the total number of accusers to 20! They’re all pointing the finger at Apple, saying it’s squeezing the competition out of the market with its App Store practices. Imagine if you could only buy games at a store that also made all the games! That’s kind of the beef these states have with Apple.
Xiaomi 14 Civi is an affordable selfie king with a flagship chipset
Xiaomi just unveiled the selfie king, the Xiaomi 14 Civi! This phone is all about capturing those flawless pics and looking oh-so-stylish while doing it. It features dual 32MP selfie cameras with wide and ultrawide angles. Basically, you can fit your entire squad (or a scenic background) into your selfies with ease. All this at an affordable price without compromising on performance—Xiaomi used the latest Snapdragon 8 gen 3 chipset instead of something dull like others do with their so-called “affordable flagships”.
YouTube Music prepares to let you upvote playlists
Get ready to unleash your inner music critic, folks! YouTube Music is rumored to be working on a feature that lets you upvote playlists. That’s right, after years of simply “liking” playlists (which let’s be honest, is basically meaningless), you’ll finally be able to shower your favorite musical curations with the digital equivalent of a standing ovation. Hopefully, this will not lead to a popularity contest for playlists with the chunkiest throwback hits and actually bring up Ultimate Workout Jams guaranteed to make you grunt.
Tile data breach exposes customer information
Someone managed to crack Tile’s defenses like a cheap padlock. They used an old employee’s login, like borrowing a forgotten key––except instead of your house, they got into Tile’s vault of customer info. Names, addresses, emails, and other personal information were leaked. Tile assures everyone their location data is safe, thankfully. So, if you use Tile to track your stuff, rest assured your phone (hopefully) still knows where it is, even if Tile forgot for a sec.
ChromeOS is copying more Android tech to bring AI features
Google is feeling a bit left out of the AI party, so it’s giving ChromeOS a makeover in an attempt to be cooler. The company is basically saying, “Hey Android, let’s share some toys!” This means ChromeOS is about to get a whole lot more Android-y, which translates to… more AI features? Imagine a Chromebook that can predict your next search before you even type it, or dodge pop-up ads like Neo from the Matrix. That’s the dream, at least.
Waymo robotaxi crashes into a pole
Waymo’s self-driving car must have gotten a little too into phoning it in! Seriously though, its robotaxi ran smack into a telephone pole. Luckily, it was an empty car with a dream of becoming a taxi driver, so no one got hurt. The accident was caused by a software glitch that rated telephone poles as low-damage hazards. It seems Waymo’s AI needs to brush up on the dangers of pointy roadside furniture! Let’s just hope the company gets things right soon, otherwise, its passengers might need a map to find a good chiropractor.
WhatsApp expands group video calls, adds new features
WhatsApp is making video calls more like Zoom, in a desperate attempt to be the life of the party instead of the awkward acquaintance at the back. The app now supports 32 people in group calls across all platforms. It has also improved screen sharing and added a speaker spotlight feature for group calls, which makes the person talking the loudest the star of the show, even if they’re just yelling about conspiracy theories. So basically, if you ever get stuck in a conversation with 32 of your closest friends or that weird uncle who keeps sharing minion memes, WhatsApp is now your go-to app.
Tesla shareholders sue Elon Musk for creating xAI
Elon Musk is in hot water again. This time, courtesy of shareholders of one of his companies. Tesla shareholders are suing him for allegedly competing with Tesla by launching a rival AI company xAI. Imagine investors being upset that their super-rich CEO is branching out into even more futuristic endeavors! Maybe they’re worried their self-driving Teslas will get jealous and try to unionize with xAI’s AI creations. This lawsuit promises to be a real doozy!
Big Tech is in for a double DMA-chine
Remember the DMA? That EU law that made Big Tech sweat a little? Get ready for round two! Another law is coming to town, aiming to put more reins on Google, Meta, and the gang. Indian lawmakers are drafting the Digital Competition Bill (DCB) intending to regulate the tech industry so bigger firms don’t run away with all the goodies. Looks like the party might be over for their Wild West ways in the digital world. We’ll have to see what hoops they have to jump through next!
Apple accused of paying less to female employees
Sounds like Apple might have bitten into a sour truth bomb. Two women filed a lawsuit claiming the company wasn’t paying their female employees as much as the men. The lawsuit says this alleged wage gap affected over 12,000 female workers in California for four years. Apparently, Apple based salaries on previous jobs and salary expectations, which can perpetuate existing pay gaps. The plaintiffs are calling for compensation for these women and a change to how Apple handles salaries. This could get messy for Apple, like a cracked under-warranty iPhone screen––expensive and inconvenient.
Intel has no idea why its i9 chips are crashing
Intel’s high-end Core i9 Raptor Lake chips have been crashing like a toddler’s tantrum in a toy store, and the company doesn’t know why. People were hyped that it found the culprit––a faulty eTVB (fancy overclocking thingy). But hold on to your RAM sticks! Turns out it was a hoax. Intel still hasn’t found the main cause of the crashes. So the eTVB fix might just be a temporary babysitter, not a permanent solution. While Intel’s on the case, no one knows when the real fix will come. In the meantime, keep your PC updated and maybe avoid any games that involve too much excitement for these sensitive chips.
Google is rolling out a new Pixel Camera 9.4 update with new features and tweaks to select devices like the Pixel 6 Pro, Pixel 7 Pro, and the Pixel Fold. Although the update is part of the Pixel Feature Drop, it seems the latest camera improvements are rolling out to users now.
Pixel Camera 9.4 update brings Pro Lens Selection feature and improved HDR+ experience
Yesterday, 9to5Google reported that the Pixel Camera 9.4 update is rolling out to select users. For starters, the latest update adds the ability to manually select a lens on Pixel 6/7 Pro, and Pixel Fold. While you may think it isn’t the biggest improvement, it gives clarity in choosing a specific lens to shoot with. With the Pixel Camera 9.4 update, you’ll be able to choose from one of three lens settings options including UW (Ultra-Wide), W (Wide), and T (Telephoto).
You can find the Lens Selection option inside a new “Pro” tab which sits right next to the “General” tab. When you select the Pro mode, the Zoom pill above the camera shutter displays three new lens options – “UW, W, and T.” As new lens options replace the Zoom pill in manual mode, one needs to pinch gestures to zoom in/out.
Image credit: 9to5Google
The Pixel Camera 9.4 update further brings improvement to HDR+ Improved Frame Selection. This means your Pixel phone will be able to detect the best moment from your photo in HDR+ ensuring you get more photos with a smiling face and open eyes.
The latest update also includes changes to the RAW/JPEG picker
Additionally, you’ll notice some changes related to RAW and JPEG photo settings. For example, the RAW/JPEG picker is moved to the Pro tab which is usually found inside Settings > Advanced. This eventually makes switching much easier when you want to edit the photo later on. Not to forget, you won’t find the resolution preference as you’d do in Google Pixel 8 Pro.
All in all, the Pixel Camera 9.4 update is slowly rolling out to users. So, if you are lucky enough, you’ll be able to access the new settings in the Pixel Camera app. It is worth noting that simply downloading the latest Pixel Camera update, version 9.4.103.641377609.23 won’t treat you with new features.
Therefore, you might want to get the June Pixel Feature Drop or wait until Google makes the update available through server-side updates. But, one thing is certain. With the new improvements coming your way, you’ll enjoy capturing moments with your Pixel device down the line.
Last October, Google tested a new UI for those who share content via the Google Messages platform. You know how that’s done, right? You tap the share icon on the content you want to send to someone and that opens the share sheet. From the share sheet, tap on Google Messages. You are taken to a page called Select conversations with a list of the people with whom you most recently messaged. You can select one of those names to share with, tap on New message to send your content as a completely new message or send it to someone not on the list.
Per 9to5Google, following a minor update, when you choose Google Messages from the share sheet on your Android device, you will see a page that says “Select recipients.” This page shows you the previous five conversations you have had using Google Messages with a very small slice of the last sent message from each conversation. Underneath the last conversation is a link that reads, “More recent conversations;” tap on it to see your entire Messages history. If you’re looking for a specific recipient and don’t want to go scrolling through your complete Messages history, there is a search icon on the upper right side of the screen that can be tapped.
Old UI for Google Messages sharing on the left, the new UI can be seen in the middle and on the right. Image credit-9to5Google
If you’re looking to share with more than one Google Messages recipient at a time, you can add the other names by tapping on the circle found on the right of each listing and a checkmark will appear. At the top of the page, you’ll see the profile icon of each person who will receive the content you are sharing. At the bottom right of the screen is a “Next” floating action button that you press to continue with the process.
The new UI has yet to appear on my Pixel 6 Pro running the latest Android 15 beta. It seems that Google has not yet disseminated the updated UI to all Android users although the distribution of it has picked up over the last few weeks. 9to5Google says that those signed up to the Google Messages beta channel are receiving the update.
The Samsung Galaxy S24 FE is not expected to launch until Q4 this year, and yet here’s your first look at the phone’s design. You will find a handful of renders below the article, while you can also check out the 360-degree video of the model by clicking here. Do note that the renders are CAD-based.
The Galaxy S24 FE design has been revealed way ahead of launch
These renders come from OnLeaks’ collaboration with GizNext. You will immediately notice how similar the device is to the Galaxy S23 FE. The thing is, its bezels will be thinner. Unfortunately, though, the “chin” will still be thicker and rather noticeable.
A flat display will be utilized by Samsung, with a centered display camera hole up top. Three vertically-aligned cameras will sit in the top-left corner on the back. The back side will be flat, as will the phone’s frame around the device.
A 6.5-inch display is expected
The corners of the phone will be rounded, clearly. A 6.5-inch display is tipped by the source. Its frame will likely be made out of metal, while glass will be included on the back. All the physical buttons will sit on the right-hand side.
In terms of the dimensions, the Galaxy S24 FE measures roughly 162 x 77.3 x 8mm. That is pretty much all the information that the source shared about the device.
It will probably come in two SoC variants
The Galaxy S24 FE is rumored to include the Exynos 2400 SoC or Snapdragon 8 Gen 3 chip. It will likely depend on which market you buy the device from. The availability will vary, as it does with the Galaxy S24.
A 50-megapixel main camera is also expected, while the device could include 12GB of RAM. The device is also tipped to offer 256GB of internal storage. Its predecessor did arrive in more than one variant, so… we’ll see.
.webp)
.webp)
