OnePlus 13 camera might get better zoom capability and new ultrawide sensor

0
[ad_1]

We recently reported that the OnePlus 13 will feature three 50 MP cameras. Now, there are rumors that the camera will get better zoom and will come with a new sensor for the ultrawide camera. The information has come from Digital Chat Station, the tipster who earlier tipped about the three 50 MP camera setups.

The OnePlus 13 is expected to get a better zoom and a new sensor for its ultrawide camera

The OnePlus 12’s periscope camera uses an OmniVision OV64B sensor with 3x optical zoom and an additional 6x sensor zoom. The ultrawide camera relies on a Sony IMX581 sensor. However, leaks suggest the OnePlus 13 will receive upgraded sensors for both the periscope and ultrawide cameras compared to its predecessor.

The OnePlus 13’s ultrawide and periscope cameras are rumored to use the Sony IMX882 sensor. And, the periscope lens will offer a 3x zoom. This sensor is already found in mid-range phones like the Poco F6 and the OnePlus Ace 3V.

Digital Chat Station post on OnePlus 13 camera specs.

The company is reportedly sticking with the same main camera setup as the OnePlus 12. This means a 50-megapixel sensor with Sony’s LYT808 technology. While some users might have hoped for the newer Sony LYT-900 sensor found in the Oppo Find X7 Ultra, leaks indicate no change for the main camera in the OnePlus 13.

The OnePlus 13 is losing wireless charging support

The upgraded zoom and ultrawide camera in the OnePlus 13 are definitely on par with the best aspects of the smartphone. But unfortunately, unlike the OnePlus 12, the OnePlus 13 might not support wireless charging. This is definitely a surprising move from OnePlus, especially after receiving a lot of praise for adding 50W wireless charging to the OnePlus 12.

The phone will run on the Snapdragon 8 Gen 4 and will have a new design compared to its predecessor. You will get a 6,000mAh battery that will easily last a couple of days on normal usage.

The phone is still a long way off from its release. Therefore, expect many more rumors to surface in the coming days.


[ad_2]
Source link

WhatsApp testing the ability to pin up to two channels

0
[ad_1]

Image credit: PhoneArena

WhatsApp, the global chat app owned by Meta, is ever-changing and evolving by adding new user features. Lately, it was found that WhatsApp was enhancing its user experience with a new feature currently being tested in the Android Beta version 2.24.13.3. Select beta testers are now able to pin up to two of their favorite channels to the top of their channels list, making it easier to stay connected and informed with the content they value most.Before, users had to scroll through their entire channels list to find their most frequently visited ones. However, this newest update has been reported to address this issue by allowing users to select and pin up to two channels to the top, making them easily accessible whenever they open the updates tab.

In addition to pinning, users can now perform bulk actions on multiple channels simultaneously, such as muting, marking as read, or even pinning them together. This streamlined functionality is a welcome addition for users managing numerous channels, where taking these actions could become time-consuming.

WhatsApp multiple channel pinning feature | Image credit: WABetaInfo

By pinning their favorite channels, especially when there is more than one, users can easily access them without scrolling through their entire list. This not only saves time but also improves the overall navigation experience within the app. This enhanced accessibility encourages users to stay more informed and engaged with their preferred channels, as they are more likely to see and interact with the latest updates, which would be more visible if they are pinned.The new multiple pinning feature is currently available to a limited number of beta testers who have installed the latest updates of WhatsApp beta for Android from the Google Play Store. However, it is expected that WhatsApp will gradually roll it out to more users in the coming days, offering users a new way of organizing their WhatsApp channels.

[ad_2]
Source link

Hackers Leak 270GB of New York Times Data, Source Code on 4Chan

0
[ad_1]

The New York Times suffered a major data breach! Leaked data includes source code, user info, and potentially internal communications — Learn about the potential consequences and how to protect yourself. This article explores the New York Times hack and its impact.

The New York Times (NYT), a media giant in the United States, has suffered a significant data breach. As per the malware repository platform XV Underground, an anonymous threat actor on 4chan has leaked 270GB of data belonging to the NYT after targeting its GitHub account. 

The NYT confirmed in its statement that the leak occurred in January 2024 due to the accidental exposure of a credential for a third-party cloud-based code platform (i.e., GitHub). 

Reportedly, the leaked data contains around 3,600,000 files, including source code for its website, mobile applications, internal tools, and content management systems. It also contains a database with 1,500 user information from an educational site, the source code of the game Wordle, acquired by the NYT in 2022, and various authentication methods, including URLs, passwords, secret keys, and API tokens. Private user keys have also been found.

The leak also reveals internal communications from Slack channels, potentially exposing sensitive information about the NYT’s operations, editorial processes, and employee discussions.

The threat actor claims that The New York Times has over 5,000 source code repositories, with less than 30 of them encrypted. The leak may reveal information about NYT’s internal IT architecture and software development practices, potentially allowing attackers to exploit the organization’s infrastructure.

The files can be downloaded via torrent link, with a list of 6,200 repositories, and the data is stored in three folders, nytimes, nytm, and TheAthletic. The Athletic folder contains iOS.tar and android.tar files comprising the source code for the Athletics mobile app.

However, the leak involves data from the IT/infrastructure/website organization, not the news organization responsible for reporting and editorial content as these platforms use distinct GitHub instances with stricter access controls.

The NYT has confirmed that there is no evidence of unauthorized access to its internal systems or any impact on operations following the leak. Nevertheless, the incident is concerning as this is the second leak of proprietary information onto 4chan, following a recent incident with Club Penguin files, and many unanswered questions such as the motive behind the attack, the extent of the breach, how the attacker accessed the data, and the full scope of the leak.

The NYT is expected to undergo a thorough security review and implement additional measures to prevent future attacks. It is worth noting that this is not the first time the NYT has suffered a cybersecurity incident. In 2013, Chinese hackers infected the newspaper’s computer system, compromising 53 of its journalists.

In 2018, major US newspapers suffered a malware attack that impacted their printing and delivery processes. Affected newspapers included the Chicago Tribune, the San Diego Union-Tribune, the South Florida Sun-Sentinel, the Capital Gazette in Annapolis, the New York Daily News, the Orlando Sentinel, the Hartford Courant, the Wall Street Journal, and the New York Times.

  1. Portion of Twitter’s proprietary source code leaked on GitHub
  2. Hackers Stole GoDaddy Source Code in a Multi-Year Data Breach
  3. LastPass Security Breach – Hackers Steal Company’s Source Code
  4. Russian Midnight Blizzard Hackers Breached Microsoft Source Code
  5. Samsung confirms data breach as Lapsus$ hackers leak its source code

[ad_2]
Source link

SSLoad Malware Employs MSI Installer To Kick Start Delivery Chain

0
[ad_1]

Malware distributors use MSI installers as Windows OS already trusts them to run with administrative rights by bypassing security controls.

For this reason, MSI files are a convenient means of spreading ransomware, spyware, and other malware that can be passed off as genuine software installations.

Cybersecurity researchers at Intezer recently discovered that SSLoad malware employs MSI installers to kick-start the delivery chain.

SSLoad Malware Employs MSI Installer

System infiltration, information gathering, and payload delivery are some of the operations in which SSLoad, a silent malware, is engaged.

With ANYRUN You can Analyze any URL, Files & Email for Malicious Activity : Start your Analysis

An active campaign using SSLoad recently involved a decoy Word document carrying an SSLoad DLL, which executed Cobalt Strike, and a phishing email leading to a fake Azure page that downloaded a JavaScript script as well as an MSI installer for loading the SSLoad payload.

Since April 2024, SSLoad has been targeting victims, and its multiple delivery methods hint at it being used for MaaS purposes, consequently showing how versatile it can be.

The researchers analyzed an MSI installer that initiates a delivery chain with multiple loaders, eventually deploying the final SSLoad payload.

The first PhantomLoader is a 32-bit C/C++ DLL using self-modifying techniques and XOR decryption to crack the next loader stage.

This second loader loads the SSLoad payload, a 32-bit Rust DLL. SSLoad decrypts a Telegram channel URL used as a dead drop to get the command-and-control server address.

SSLoad Telegram channel (Source – Intezer)

The C2 decoder decrypts the C2 address and user agent and sends an HTTP GET request to download the next payload stage from the C2 server.

This SSLoad variant uses a custom method to decrypt strings with the RC4 algorithm. Each string is encrypted with its own distinct key stored alongside it. 

The key is derived from the encoded blob’s first 6 and last 7 bytes. After calculating the encrypted string’s length, it is Base64 decoded and decrypted with RC4 using the derived key, extracting the Telegram channel URL. 

The payload is another Rust file that creates a mutex for anti-analysis, checks for debugging, dynamically loads DLLs, and derives rolling XOR keys through arithmetic operations to decode strings uniquely.

Besides this, it uses RtlGenRandom for unique folder naming, resolves library calls dynamically by hashing module and function names, and employs common malware techniques like manipulating the PEB for evasion.

The JSON fingerprint is sent to the C2 using HTTP POST, and Load makes an HTTP request containing the host ID.

The client checks for available tasks by sending a post request with a unique SSLoad host identifier.

Based on task availability, C2 responds with an encrypted job structure in RC4 and base64 encoded format, with a command (only “exe” is currently used for downloading payloads) and arguments.

It also demonstrates how complex it can be as shown by its use of Rust downloader, which is made up of dynamic string decryption and a new loader that includes an anti-debugging mechanism in place.

To combat such intricate malware campaigns effectively, continued monitoring and advanced threat detection are required.

Looking for Full Data Breach Protection? Try Cynet's All-in-One Cybersecurity Platform for MSPs: Try Free Demo 


[ad_2]
Source link

Google’s Chrome changes make life harder for ad blockers

0
[ad_1]

Despite protests, Google is rolling out changes in the Chrome browser that make it harder for ad blockers to do their job.

Starting last Monday, June 3, 2024, Chrome Beta, Dev, and Canary channels will see the effects of the implementation of the new extension platform Manifest V3. The gradual disabling of V2 extensions will later follow for all Chrome users.

For those not familiar with the terms, Manifest V2 and V3 are the “rules” that browser extension developers are required to follow if they want their extensions to get accepted into the Google Play Store.

Manifest V2 is the old model. The Chrome Web Store no longer accepts Manifest V2 extensions, but browsers can still use them. For now. Google explained that the goal of the new extension platform:

“Is to protect existing functionality while improving the security, privacy, performance and trustworthiness of the extension ecosystem as a whole.”

That’s commendable, because it stops criminals from hiding the malicious intentions of their extensions when they submit them for the Google Play Store.

However, the part of the transition that hinders ad blockers lies in the fact that extensions will now have limitations on how many rules they include. Google has made some compromises after initial objections, but the limitations are still present and have a large effect on ad blockers since they historically rely on a large number of rules. That’s because, generally speaking, each blocked domain or subdomain is one rule, and cybercriminals set up new domains by the dozen.

Google has tried to address developers’ concerns by adding support for user scripts and increasing the number of rulesets for the API used by ad blocking extensions. But this might not be enough.

Users can temporarily re-enable their Manifest V2 extensions, but this option will eventually disappear.

One of the affected ad blockers is the one incorporated in our own Malwarebytes Browser Guard.

We talked to one of the developers about the plans for Browser Guard and how it will deal with the Manifest V3 rules. They told us that the new Browser Guard, which is already available in beta, will use a mix of static and dynamic rules to protect our users.

Static rules are rules that are contained in the ruleset files which can be seen as block lists. These files are declared in the manifest file.

Dynamic rules are rules that can be added and removed at runtime. Chrome allows up to 30k dynamic rules. Browser Guard uses dynamic rules for two purposes:

  • Session rules are dynamic rules that can be added and removed at runtime, but they are session-scoped and are cleared when the browser shuts down and when a new version of the browser is installed.
  • And dynamic rules can be used to store allow lists, user blocked content, and general rules that block more than one domain. Take, for example, the IP address of a server that is known to host nothing but phishing sites.

And, to deal with urgent situations, we can use ruleset overrides, which are a mechanism by which we can override the static rules shipped with Browser Guard without requiring our users to add exclusions.

If you want to help Malwarebytes get ready for the transition, you can test the beta version of Browser Guard for Manifest V3.


We don’t just report on threats—we remove them

Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.


[ad_2]
Source link

Google describes how its achieved plastic-free Pixel packaging

0
[ad_1]

In recent years, smartphone manufacturers have been taking measures to try to reduce their environmental impact. Some have been unpopular or questionable, such as removing the charger from the retail box. Google has taken this further by also opting for plastic-free packaging for its Pixel devices.

Now, Google has published a packaging design guide. The company describes what it has been doing to achieve plastic-free packaging on its Pixel devices. The company says the guide is a “resource for others aiming to reduce their reliance on mixed material formats and adopt fiber-based solutions.”

Pixel 8 series has plastic-free packaging; all Google products will have it by 2025

The guide indicates the packaging components that were replaced. This is all in favor of reducing its carbon footprint. It’s noteworthy that Google achieved this plastic-free packaging starting with the Pixel 8 series. The company hopes to apply these principles to the packaging of all its products by 2025. With this, it wants to facilitate recycling and reusability.

One of the challenges was finding viable alternatives for all the packaging components. After all, it is necessary that the packaging continues to keep the products safe during transportation. As Google indicates, “replacing damaged products carries a significant environmental impact.”

The list of replaced components that made recycling difficult includes up to seven items. Google replaced them in different ways, such as by applying alternative coating solutions, shrink wrap removal strategies, closure labels, paper tapes, molded fiber hang tabs, protective product wraps, and molded fiber trays. So, Google turned heavily to fiber-based materials for this. There is a lot of paper and cardboard among the new used materials.

Currently, Google products have three types of packaging. There is a “Telescoping box” that reveals the product immediately after opening it. This has a “simple opening and closing mechanism” to make the task easier. Then there is the “Roll end lock front box” whose front panel is “interlocking tabs for closure.” The latter seeks to offer a higher level of protection. Lastly, there’s the “Tuck top box” for accessories and small gadgets.


[ad_2]
Source link

Apple could add Gemini to iOS 18

0
[ad_1]

Apple just held its latest WWDC event, and we’re all still reeling from the announcements. Everything from the calculator app on the iPad to iOS 18’s take on Material You to AI (Apple Intelligence); the company introduced some great stuff. After the keynote, however, we got some other news. According to a new report, Apple could implement Gemini into iOS 18.

Some of the more notable announcements we got during WWDC involved the latest version of iOS. This is iOS 18, and it comes chock-full of AI goodies. The artificial intelligence is baked deeply into the software, and it goes far beyond what we’re getting from the likes of Galaxy AI. We’re even seeing better integration than Gemini on Android. So, it looks like Google has some catching up to do.

Apple could implement Gemini into iOS 18

A few weeks before WWDC, we were following rumors that Apple was looking to partner with either OpenAI or Google to use their models. When the company announced Apple Intelligence, it also mentioned OpenAI. When the system needs to access larger language models in the cloud, it will contact GPT-4o. So, it’s clear that Apple chose to go with OpenAI.

However, the story doesn’t end there. Craig Federighi, the company’s senior vice president of software engineering, mentioned that Apple may still be open to bringing in Google’s models. “We want to enable users ultimately to choose the models they want, maybe Google Gemini in the future,” he told reporters after the keynote.

Right now, there are a ton of models for the company to choose from, but GPT-4o and Gemini seem to be some of the best ones. This is despite the fact that Gemini has been dropping the ball in several areas. In any case, it’s still nice that the company wants to give people the opportunity to choose. Having more choices is always better. At this point, this is still early information, so we’ll have to wait for more details over time.


[ad_2]
Source link

Remcos RAT Distributed As UUEncoding (UUE) File To Steal Logins

0
[ad_1]

Researchers identified a campaign distributing Remcos RAT, a Remote Access Trojan, where the attack uses phishing emails disguised as legitimate business communication, such as import/export or quotations. 

The emails contain a UUEncoded (UUE) file compressed with Power Archiver, which likely contains the Remcos RAT downloader, which once executed would allow attackers remote access to the victim’s machine. 

A phishing email

An attacker is distributing a malicious VBS script hidden within an attachment. The script is encoded using Unix-to-Unix Encoding (UUE), a method for converting binary data into readable text format.

With ANYRUN You can Analyze any URL, Files & Email for Malicious Activity : Start your Analysis

This disguises the script from detection systems. 

The UUE-encoded attachment has a header, an encoded data section, and an end marker.

Decoding the attachment reveals an obfuscated VBS script, further complicating the analysis. 

An obfuscated vbs script

VBScript acts as a downloader, fetching a malicious PowerShell script (Talehmmedes.txt) and saving it in the victim’s temporary directory, which in turn downloads Haartoppens.Eft, another malicious script, from a remote server and stores it in the user’s AppData folder. 

 Part of the Base64-decoded Talehmmedes.txt

Haartoppens.Eft is obfuscated, making it difficult to analyze its functionality.

However, it can be identified as another PowerShell script and its primary function is to inject shellcode into the wab.exe process, a legitimate Windows process associated with address book contacts. 

The shellcode establishes persistence by modifying the registry, ensuring the attacker maintains access to the compromised system even after a reboot. 

It retrieves further malicious data (mtzDpHLetMLypaaA173.bin) from another remote server, which is likely another PowerShell script or a component used by the malware for malicious purposes. 

Ultimately, this entire chain of events leads to the execution of the Remcos Remote Access Trojan (RAT), granting the attacker unauthorized control over the victim’s machine.

Adding a registry – 1

Remcos RAT, a sophisticated remote access trojan, extracts system information via hxxp://geoplugin[.]net/json.gp, likely for geolocation purposes. 

The malware then logs keystrokes and stores them as mifvghs.dat within the user’s application data directory (AppData), which is then exfiltrated to the attacker’s command and control (C&C) server, granting the attacker comprehensive information about the victim’s machine and their keystrokes. 

Remcos RAT settings

AhnLab SEcurity intelligence Center (ASEC) warns users about malicious files detected by AhnLab V3 anti-malware.

The files are disguised as invoice documents (Invoice_order_new.uue and Invoice_order_new.vbs) and spread through emails. 

They are classified as Downloader/VBS.Agent (downloading additional malware) and Data/BIN.Encoded (containing encoded malicious data).  

The IOCs (Indicators of Compromise) – unique hashes associated with the files – are provided to identify and block them and to prevent infection; users are advised to avoid emails from unknown senders, disable macros in attachments, and update anti-malware signatures.

Looking for Full Data Breach Protection? Try Cynet's All-in-One Cybersecurity Platform for MSPs: Try Free Demo 


[ad_2]
Source link

When things go wrong: A digital sharing warning for couples

0
[ad_1]

“When things go wrong” is a troubling prospect for most couples to face, but the internet—and the way that romantic partners engage both with and across it—could require that this worst-case scenario become more of a best practice.

In new research that Malwarebytes will release this month, romantic partners revealed that the degree to which they share passwords, locations, and devices with one another can invite mild annoyances—like having an ex mooch off a shared Netflix account—serious invasions of privacy—like being spied on through a smart doorbell—and even stalking and abuse.

Importantly, this isn’t just about jilted exes. This is also about people in active, committed relationships who have been pressured or forced into digital sharing beyond their limit.

The proof is in the data.

When Malwarebytes surveyed 500 people in committed relationships, 30% said they regretted sharing location tracking with their partner, 27% worried about their partners tracking them through location-based apps and services, and 23% worried that their current partner had accessed their accounts without their permission.

Plenty of healthy, happy relationships share digital access through trust and consent. For those couples, mapping out how to digitally separate and insulate their accounts from one another “when things go wrong” could seem misguided.

But for the many spouses, girlfriends, boyfriends, and partners who do not fully trust their significant other—or who are still figuring out how much to trust someone new—this exercise should serve as an act of security.

Here’s what people can think about when working through just how much of their digital lives to share.

Inconvenient, annoying, and just plain bothersome

A great deal of digital sharing within couples occurs on streaming platforms. One partner has Netflix, the other has Hulu, the two share Disney+, and years down the line, the couple can’t quite tell who is in charge of Apple Music and who is supposed to cancel the one-week free trial to Peacock.

This logistical nightmare, already difficult for people who are not in a committed relationship, is further complicated after a breakup (or during the relationship if one partner is particularly sensitive about their weekly algorithmic recommendations from Spotify).

If an ex maintains access to your streaming accounts even after a breakup, there’s little chance for abuse, but the situation can be aggravating. Maybe you don’t want your ex to know that you’re watching corny rom-coms, or that you’re absolutely going through it on your seventh replay of Spotify’s “Angry Breakup Mix.” These are valid annoyances that will require a password reset to boot your ex out of the shared account.

But there’s one type of shared account that should raise more caution than those listed above: A shared online shopping account, like Amazon.

With access to a shared online shopping account, a spiteful ex could purchase goods using your saved credit card. They could also keep updates on your location should you ever move and change addresses in the app. This isn’t the same threat as an ex having your real-time location, but for some individuals—particularly survivors of domestic abuse who have escaped their partner—any leak of a new address presents a major risk.

Non-consensual tracking, monitoring, and spying

When couples move into the same home, it can make sense to start sharing a variety of location-based apps.

Looking for a vacation rental online for your next getaway? You’re (hopefully) lodging together. Ordering delivery because nobody wants to make dinner? That order is being sent to the same shared address. Even some credit cards offer specific bonuses on services like Lyft, incentivizing some couples to rely more heavily on one account to score extra credits.

While sharing access between these types of accounts can increase efficiency, it’s important to know—and this may sound obvious—that many of these same shared location-based apps can reveal locations to a romantic partner, even after a breakup.

Your vacation could be revealed to an ex who is abusing their previously shared login privileges into services like Airbnb or Vrbo, or by someone peering into the trip history of a shared Uber account that discloses that a car was recently taken to the airport. Food delivery apps, similarly, can reveal new addresses after a move—a particular risk for survivors of domestic abuse who are trying to escape their physical situation.

In fact, any account that tracks and provides access to location—including Google’s own “Timeline” feature and fitness tracking devices made by Strava—could, in the wrong hands, become a security risk for stalking and abuse.

The vulnerabilities extend farther.

With the popularity of Internet of Things devices like smart doorbells and baby monitors, some partners may want to consider how safe they are from spying in their own homes. Plenty of user posts on a variety of community forums claim that exes and former spouses weaponized video-equipped doorbells and baby monitors to spy on a partner.

These scenarios are frightening, but they are part of a larger question about whether you should share your location with your partner. With the proper care and discussion, your location-sharing will be consensual, respected, and convenient for all.

Stalking and abuse

When discussing the risks around digital sharing between couples, it’s important to clarify that trustworthy partners do not become abusive simply because of their access to technology. A shared food delivery app doesn’t guarantee that a partner will be spied on. A baby monitor with a live video stream is sometimes just that—a baby monitor.

But many of the stories shared here expose the dangers that lie within arm’s reach for abusive partners. The technology alone cannot be blamed for the abuse. Instead, the technology must be scrutinized simply because of its ubiquitous use in today’s world.

The most serious concerns regarding digital access are the potential for stalking and abuse.

For partners that share devices and device passcodes, the notorious threat of stalkerware makes it easy for an abusive partner to pry into a person’s photos, videos, phone calls, text messages, locations, and more. Stalkerware can be installed on a person’s device in a matter of minutes—a low barrier of entry for couples that live with one another and who share each other’s device passcodes.

For partners who share a vehicle, a recent problem has emerged. In December, The New York Times reported on the story of a woman who—despite obtaining a restraining order against her ex-husband—could not turn off her shared vehicle’s location tracking. Because the car was in her husband’s name, he was able to reportedly continue tracking and harassing her.

Even shared smart devices have become a threat. According to reporting from The New York Times in 2018, survivors of domestic abuse began calling support lines with a bevvy of new concerns within their homes:

“One woman had turned on her air-conditioner, but said it then switched off without her touching it. Another said the code numbers of the digital lock at her front door changed every day and she could not figure out why. Still another told an abuse help line that she kept hearing the doorbell ring, but no one was there.”

The survivors’ stories all pointed to the abuse of shared smart devices.

Whereas the solutions to many of the inconveniences and annoyances that can come with shared digital access are simple—a reset password, a removal of a shared account—the “solutions” for technology-enabled abuse are far more complex. These are problems that cannot be solely addressed with advice and good cybersecurity hygiene.

If you are personally experiencing this type of harassment, you can contact the National Network to End Domestic Violence on their hotline at 1-800-799-SAFE.

Making sure things go right

Sharing your life with your partner should be a function of trust, and for many couples, it is. But, in the same way that it is impossible for a cybersecurity company to ignore even one ransomware attack, it’s also improper for this cybersecurity and privacy company to ignore the reality facing many couples today.

There are new rules and standards for digital access within relationships. With the right information and the right guidance, hopefully more people will feel empowered to make the best decisions for themselves.


We don’t just report on threats – we help safeguard your entire digital identity

Cybersecurity risks should never spread beyond a headline. Protect your—and your family’s—personal information by using identity protection.


[ad_2]
Source link

camera, display, SoC & more

0
[ad_1]

A well-known Chinese tipster, Digital Chat Station, just shared a bunch of information about Xiaomi’s upcoming flagship. He shared the Xiaomi 15 details, including the camera, display, SoC, and more.

The Xiaomi 15 details were just shared by a well-known tipster

This information was shared via Weibo, a Chinese social media network. Do note that he seems to be talking about the regular Xiaomi 15 here, not the ‘Pro’ model. The device is expected to have a 6.36-inch display, like its predecessor, though the tipster did not mention the size. A 1.5K LTPO display is mentioned, however.

The Snapdragon 8 Gen 4 SoC will fuel the phone, as expected. The tipster also mentioned that 16GB of RAM will be included, along with 1TB of storage. That will likely be the top-end model.

A 50-megapixel main camera from OmniVision is tipped. That will be a 1/1.3-inch camera sensor, by the way. A 50-megapixel ultrawide camera will also be a part of the package, as will a 3.X telephoto macro camera.

The phone will launch in several variants

The tipster also mentioned that the phone will arrive in glass and eco-leather variants. It could be available in a glass-only variant globally, though.

Some other details were mentioned by the tipster. He said that the device will include an ultrasonic fingerprint scanner which will sit under the display. Stereo speakers will also be a part of the picture. The phone’s earpiece will double as a secondary speaker. A good motor for haptic feedback was also mentioned.

Now, the Xiaomi 14 series arrived in October last year. Well, most of it, anyway. The Xiaomi 14 and Xiaomi 14 Pro were announced, while the ‘Ultra’ model arrived later on.

The Xiaomi 14 Pro did not launch globally, only the Xiaomi 14 did, along with the Xiaomi 14 Ultra, of course. The same could happen next year too, actually. The Xiaomi 15 and Xiaomi 15 Pro could once again launch in October, though, we’ll see.


[ad_2]
Source link