Beware Of Fake Browser Updates That Installs Malicious BOINC Infrastructre

0
[ad_1]

SocGholish malware, also known as FakeUpdates, has exhibited new behavior since July 4th, 2024, as the infection chain still begins with a compromised website prompting a fake browser update. 

Downloading the update triggers malicious code that fetches additional malware. Unlike prior campaigns where SocGholish installed common RATs, recent attacks involved the execution of additional files and scripts, deviating from the usual patterns.  

Infection Chain

The initial malicious Javascript downloads a PowerShell script that bypasses AMSI and fetches the next stage loader from a DGA-generated domain.

Protect Your Business Emails From Spoofing, Phishing & BEC with AI-Powered Security | Free Demo

This second stage decodes, decrypts, and decompresses a third-stage PowerShell script using a Base64 encoded string, a hardcoded XOR key, and Gzip compression. The functionality can be replicated in CyberChef to reveal the final AsyncRAT payload.  

CyberChef recipe to decode the obfuscated AsyncRAT PowerShell commands.

Stage 3 of the AsyncRAT malware uses various techniques to detect virtualized environments, which check for specific strings in system information like “VMware” or “VirtualBox” and assign scores. 

A higher score indicates a higher likelihood of being in a virtual machine, and the final score is then incorporated into a cURL request parameter along with a randomly generated domain name fetched by the Domain Generation Algorithm (DGA).

If the score passes the threshold on the C2 server, the final AsyncRAT payload is delivered.  

 The domain used by the final AsyncRAT payload.

A malicious PowerShell script disguised as a BOINC software installation uses cURL to download a file and then creates a random directory and file name, downloads a ZIP archive, extracts it, renames a file likely containing malware (BOINC.exe), and creates a scheduled task to execute it. 

To potentially evade detection, the script removes itself and creates a registry value with a misspelled key name (“ExpirienceHost”) as a possible infection marker. 

Strings from the process memory of PowerShell show the scheduled task creation.

SocGholish malware is abusing BOINC, an open-source distributed computing software, to create a command-and-control (C2) server by installing a disguised BOINC client that connects to a malicious server instead of legitimate BOINC servers. 

While no malicious tasks have been observed yet, the attacker can potentially steal information, transfer files, or execute further malware on the infected hosts.

Malicious server project status page.

An AsyncRAT infection was discovered through the analysis of scheduled tasks, which include malicious PowerShell commands disguised within log file names and executed by a headless Conhost process. 

It establishes persistence for the AsyncRAT and maintains connections to its C2 server, and tasks associated with a BOINC client were found, which may be a downloaded component for cryptocurrency mining or other purposes. 

According to Huntress, the techniques used in this attack closely resemble those linked to the SocGholish malware family, particularly its use of fake browser updates for initial access and obfuscated PowerShell downloads for AsyncRAT deployment.  

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.


[ad_2]
Source link

Here are the Pixel 9 and Pixel 9 Pro XL in some cool colors

0
[ad_1]

Not too long ago, Google officially teased the Pixel 9 Pro and the Pixel 9 Pro Fold. These confirmed what we’ve been seeing before in renders. However, this doesn’t put a stopper in the leaks. Some new leaked renders show off the Pixel 9 and Pixel 9 Pro XL.

Right now, the recent leaks and rumors don’t leave anything to the imagination with these phones. We know how they look, when to expect some of them, and some of their specs. There’s not much to speculate on. With most of the hardware details revealed, there’s not much for Google to reveal to us other than AI.

New Pixel 9 Pro and Pixel 9 Pro XL renders show the phone in some nice colors

Most of the information we’ve seen has revolved around the Pixel 9 Pro. Now, it’s time for the other two variants to get some attention. In a new leak from Sudhanshu Ambhore on Twitter, we see some of the colors that these phones could come in.

Starting off with the Pixel 9, we see a pleasant-looking pink color. It has a pastel tone to it, which is consistent with Google’s brand. We know it’s the Pixel 9 base variant because of the cameras. We see that there are only two lenses and that there’s no temperature sensor. We also see that it’s the smaller of the two in the renders.

Next up, there’s the Pixel 9 Pro XL. This one has a nice cream color to it. Again, there’s a pastel aesthetic to it that gives it a very “Google” look. On this phone, we see the three sensors along with the temperature sensor. It will be the larger of the phones, dwarfing the Pixel 9 and Pixel 9 Pro. We’re sure that Google’s going to give these colors some wacky names.

Specs

As for the specs, these phones will use Google’s Tensor G4 SoC, and we expect the Pro versions of the phones to come with 16GB of RAM, and a Samsung modem (Exynos 5400)

Moving onto the camera tech, reports state that both the Pixel 9 and Pro phones will have a 50MP IMX858 sensor for their ultrawide cameras, and the Pro phones will use the same sensor for their telephoto cameras. Also, the Pro phones could use that same sensor for their selfie cameras.

Google’s going to unveil the Pixel 9 Pro and Pixel 9 Pro Fold on August 13th, and maybe some other devices. That’s only a few weeks away, so you’ll need to mark your calendars.


[ad_2]
Source link

Sonicos Ipsec VPN Vulnerability Let Attackers Cause Dos Condition

0
[ad_1]

SonicWall has disclosed a critical heap-based buffer overflow vulnerability in its SonicOS IPSec VPN.

This flaw, identified as CVE-2024-40764, can potentially allow unauthenticated, remote attackers to cause a Denial of Service (DoS) condition.

The vulnerability has been rated with a CVSS v3 score of 7.5, indicating a high severity level.

CVE-2024-40764: Critical Vulnerability in SonicOS IPSec VPN

The vulnerability, which affects multiple versions of SonicWall’s Gen6 and Gen7 platforms, was first published on July 17, 2024.

SonicWall has provided a workaround and is working on a patch to address this critical issue.

Advisory IDSNWLID-2024-0012
First Published2024-07-17
Last Updated2024-07-17
WorkaroundTrue
StatusApplicable
CVECVE-2024-40764
CWECWE-122
CVSS v37.5
CVSS VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

The heap-based buffer overflow vulnerability in the SonicOS IPSec VPN allows an unauthenticated remote attacker to exploit the system, leading to a Denial of Service (DoS) condition.

Protect Your Business Emails From Spoofing, Phishing & BEC with AI-Powered Security | Free Demo

This could disrupt services and potentially cause significant operational downtime for affected organizations.

Affected Products

The vulnerability impacts a wide range of SonicWall products across different versions. Below is a detailed list of the affected platforms and their respective versions:

Impacted PlatformsImpacted Version
Gen6 NSv – NSv10, NSv25, NSv50, NSv100, NSv200, NSv300, NSv400, NSv800, NSv16006.5.4.4-44v-21-2395 and older versions
Gen7 – TZ270, TZ270W, TZ370, TZ370W, TZ470, TZ470W, TZ570, TZ570W, TZ570P, TZ670, NSa 2700, NSa 3700, NSa 4700, NSa 5700, NSa 6700, NSsp 10700, NSsp 11700, NSsp 13700, NSsp 15700, NSv 270, NSv 470, NSv 8707.0.1-5151 and older versions, 7.1.1-7051 and older versions

To mitigate the potential impact of this vulnerability, SonicWall recommends restricting inbound IPSec VPN access to trusted sources or disabling IPSec VPN access from Internet sources. This temporary measure should be implemented until the official patch is applied.

Organizations are encouraged to contact SonicWall Technical Support for further assistance restricting or disabling IPSec VPN access.

SonicWall has released fixed versions for the affected platforms. Below is a list of the fixed platforms and their respective versions:

Fixed Platforms and Versions

Fixed PlatformsFixed Version
Gen6 NSv – NSv10, NSv25, NSv50, NSv100, NSv200, NSv300, NSv400, NSv800, NSv16006.5.4.v-21s-RC2457
Gen7 – TZ270, TZ270W, TZ370, TZ370W, TZ470, TZ470W, TZ570, TZ570W, TZ570P, TZ670, NSa 2700, NSa 3700, NSa 4700, NSa 5700, NSa 6700, NSsp 10700, NSsp 11700, NSsp 13700, NSsp 15700, NSv 270, NSv 470, NSv 8707.0.1-5161, 7.1.1-7058, 7.1.2-7019

Organizations using SonicWall products are urged to take immediate action to mitigate the risk posed by CVE-2024-40764.

Businesses can protect their systems from potential DoS attacks by restricting or disabling IPSec VPN access and applying the necessary patches.

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.


[ad_2]
Source link

More than meets the eye

0
[ad_1]

I’ve reviewed every single Galaxy Z Fold model since the original, though we were a bit late with the Galaxy Fold review publishing in 2020. It’s interesting to see how each model looks like an iterative update, but once you actually use the phone for a decent amount of time, it turns out to be a much larger update. That’s the case this year with the Galaxy Z Fold 6.

On paper, it looks like the Galaxy Z Fold 6 is a very minor upgrade over the Galaxy Z Fold 5. What’s new? A more boxy and flat design, a new processor, a few millimeters wider and a millimeter shorter, and that’s pretty much it. But these changes do make a pretty big difference actually. As I mentioned in the disclaimer above, I’ve been using this phone for a little over a week so far, and I actually really like it. I like it so much that, for the first time in four years, my main SIM has been moved from my iPhone to the Galaxy Z Fold 6 – though that is not 100% because of the Galaxy Z Fold 6.

With a $100 price increase this year, many are upset at the lack of innovation and changes. But there’s an important aspect to remember here. The original Galaxy Fold was $1,980 when it debuted back in 2019. So, even at a starting price of $1,899, this is still about $81 cheaper than the original model. It’s always good to keep things like that in perspective. Let’s keep that in mind as we go through this full review.

Samsung Galaxy Z Fold 6 Review: Design and Build Quality

Recently, we’ve heard a lot from people that the new Samsung phone “looks the same as last year”, and honestly, I don’t know what’s so bad about that. Every smartphone company has its own design identity, plus it doesn’t make much sense to spend a ton of money on R&D just to change up the design every year. Making iterative improvements to the design each year is a much better approach.

Samsung has started to take the Apple approach to updates, and I think it’s the right way to go. Apple, Samsung, and other companies know that you are most likely not upgrading every year. You might not even upgrade every two years, it might be three, four or even five years in between upgrades. So, instead of throwing everything and the kitchen sink into the new phone every year, Samsung does iterative upgrades. So when you upgrade your Galaxy Z Fold 3 to a Galaxy Z Fold 6, it’s a much larger upgrade and worth the price to the consumer.

And that’s the case here with the Galaxy Z Fold 6. It’s a pretty iterative upgrade on paper, but I absolutely love the design changes on this phone. First off, it is now fully matte. The Galaxy Z Fold 5 had a glossy frame and hinge, which is cool. But after a little while, once it catches all of the fingerprints, it really starts to look pretty nasty. This year, Samsung opted for a matte finish on the Fold 6, which not only looks much nicer but also doesn’t hold onto fingerprints and other dirt and dust.

Speaking of the sides, the Galaxy Z Fold 6 is fully flat, this is good for a couple of reasons. It does add some durability to the phone, but it also adds a bit more space inside the phone. Now you might be wondering, just how much space can this provide? Considering how large the Galaxy Z Fold 6 is, quite a bit. Especially since Samsung did include a much larger vapor chamber this year.

The hinge is also more flat and matte this year. It’s also stronger. This is the new dual rail hinge that Samsung has been talking up, and honestly, I can notice a huge difference between this and the older hinge on the Galaxy Z Fold 5. It stays in position better when you are opening the phone partway, and it also snaps open. Unlike some other foldables, the Galaxy Z Fold 6 does open to a full 180-degrees.

With the more boxy design, the front display has also gotten a tad larger, now at 6.3 inches. This is also thanks to the phone being a tad wider and a tad shorter, overall. This also makes the Galaxy Z Fold 6 look more premium. I really don’t know how to explain it, but it’s almost like the Galaxy Z Fold 6 looks more grown up, versus the Galaxy Z Fold 5 with its curves. I’ve fallen in love with the design of this phone, and it’s been hard to put it down, because it’s just so good.

Samsung Galaxy Z Fold 6 Review: Display

Over the past few years, I’ve been pretty vocal about why I don’t like foldables. And it mostly comes down to the display. The front display is generally pretty skinny, and the main display is generally a square. Neither of which is really great for watching videos or using apps. OnePlus and Google sort of got the message, and used wider front displays on their foldables last year. Now Samsung finally appears to be catching up, sporting a 22:9 aspect ratio cover display, versus the 25:9 aspect ratio on the Galaxy Z Fold 2 (as the first Galaxy Fold was not full screen). Each year, it gets a little wider, and this is the first time that I can say it is actually usable.

Let’s face it, with a foldable, you don’t want to have to open it every time you want to doomscroll on X, or check out Facebook, etc. And with a super skinny front display like the older Galaxy Z Fold models, I would find myself wanting to open the phone way more often than I wanted too. Which is what kept me away from using a foldable outside of reviewing it. However, that changed with the Pixel Fold and OnePlus Open last year, and now with the Galaxy Z Fold 6. While I would like it to be a little bit wider, closer to a 20:9 or 18:9 aspect ratio, it is now usable.

Samsung Galaxy Z Fold 6 AM AH 29

But what about the brightness on these displays? Samsung says that both displays can reach 2600 nits of peak brightness. That’s nice and bright, and the same peak brightness as the Galaxy S24 Ultra released earlier this year. This peak brightness is especially useful on the folding display, since it is made of plastic and plastic does tend to reflect a lot more. Meaning it’s tougher to see in direct sunlight if it’s darker – a problem we all faced with the Pixel Fold last year. I’m happy to report that both displays are perfectly visible in direct sunlight. I’ve used the Galaxy Z Fold 6 a lot in direct sunlight already, and I had no complaints being able to see it.

As we do with every smartphone, we also tested the brightness on both displays here. Basically, we get a plain white screen, use a flashlight to shine on the light sensor above the display, and a luminance reader to find out how bright it is. Now keep in mind, we will not see anywhere near 2,600 nits in this type of testing, as that is peak brightness, aka the absolute brightest it can get. We did get up to 1700 nits, which is still plenty bright.

Finally, let’s talk about that crease. Another big complaint about Samsung’s foldables have been the crease. I mean, they hadn’t even closed the gap until last year with the Fold 5. The crease is still here, but it is less noticeable compared to the Fold 5. It’s getting closer to the Chinese rivals like the HONOR Magic V2 and OnePlus Open, however, which is good. To be honest, most of the time I don’t even notice the crease, unless the display is off. If I’m watching TikTok on it, you don’t really see it, unless there is light reflecting off of it.

Samsung Galaxy Z Fold 6 Review: Performance

Performance on the Galaxy Z Fold 6 isn’t anything out of the ordinary here. It’s sporting the Snapdragon 8 Gen 3 for Galaxy, 12GB of RAM and (our unit has) 512GB of storage. Pretty similar internals to the Galaxy S24 Ultra, which I’ve used quite a bit this year. I’m happy to say that the performance on the Galaxy Z Fold 6 is top-notch. Of course, a good bit of that comes down to the new vapor chamber inside.

The vapor chamber inside the Galaxy Z Fold 6 is about 1.6x larger than that of the Galaxy Z Fold 5. And I have to say, I’ve really noticed a difference there. Typically when running a bunch of apps for a long period of time, the Galaxy Z Fold 5 would get quite warm, that’s not the case with the Fold 6. It does get warmer, but it’s barely noticeable. That’s even reflected in our temperature reading tests that we’ll talk about in a little bit.

Whether it’s multi-tasking, playing games, or what have you, the Galaxy Z Fold 6 lives up to its promise of being a performance king.

Samsung is also continuing to use a side-mounted fingerprint sensor, versus an under-display fingerprint sensor. That should come as no surprise, since the display is pretty fragile, particularly the main display. I do quite like having the fingerprint sensor in the power button, it just makes things so much easier and faster to unlock. The only real complaint I have here is that the power button is a little to concave, compared to some other foldables. Making it a little tougher to use versus the Pixel Fold, where you can just tap it and unlock it. Again, this isn’t a major issue, and it is something I’ve gotten used to, but I’d like to see it be a normal button like the volume rocker.

Samsung Galaxy Z Fold 6 AM AH 32

Benchmarks

With every phone (and tablet) we review, we run a few different benchmarks to truly test how good the phone is. Manufacturers will always tell us how much better their phone is compared to the predecessors and their competition. But we can’t always take what companies say at face value. So we have to benchmark them. In this series of benchmarks, we use a mixture of well-known benchmarks and one that we designed ourselves – so that OEMs can’t “cheat” on them.

The first of which is Geekbench 6. Many of you are likely familiar with Geekbench 6, it will test the raw performance of the CPU in single-core and multi-core tasks, as well as the raw performance of the GPU.

Geekbench 6

For this review, we are comparing the Galaxy Z Fold 6 to the HONOR Magic V2 RSR, OnePlus Open and the Galaxy S24 Ultra. All of these, with the exception of the OnePlus Open, run the Snapdragon 8 Gen 3, so scores should be relatively similar. The Galaxy S24 Ultra did marginally beat the Galaxy Z Fold 6 in both the CPU single-core and multi-core test. However, the Galaxy Z Fold 6 did beat the Galaxy S24 Ultra quite handily (by about 2,000 points) in the GPU test. And that, we believe comes down to the much larger vapor chamber this time around.

The next benchmark we run is the 3D Mark Wildlife Extreme Stress Test. This puts the phone through a pretty extreme stress test, getting it to about the highest temperature it’ll ever hit. It runs a loop of the same 60-second long benchmark, 20 times. And from that you get a score from the best loop, the lowest loop and then the stability score. Among the four phones we are comparing here, the Galaxy Z Fold 6 had the lowest scores, but had the highest stability, which is definitely more important. This means the Galaxy Z Fold 6 can withstand better performance for a longer time before needing to cool down.

Capcut video test (lower is better)

Finally, we do a benchmark with Capcut. This is a pretty popular video editing app from TikTok. What we do here is, load up the exact same 60-second video into the app, make zero edits and export it at 1080p30, and time how long it takes to export. A pretty simple test, with wildly different results, we’ve found out. The Galaxy Z Fold 6 did marginally better than the Galaxy S24 Ultra here, exporting at 7.68 seconds, whereas the Galaxy S24 Ultra was 7.75 seconds. The HONOR Magic V2 RSR was at 12 seconds and the OnePlus Open was 16 seconds.

It looks like Samsung’s claims on performance for the Galaxy Z Fold 6 do hold true. It has handily beat most other Snapdragon 8 Gen 3 devices, and is basically on par with the Galaxy S24 Ultra which uses the Snapdragon 8 Gen 3 for Galaxy.

Thermals

Now let’s talk thermals. This is probably one of the more interesting parts of these tests, and will really show us if that vapor chamber is doing what it should.

To test out the thermals, we run three (technically four) tests. The first is done with the benchmarks, and that’s the 3D Wildlife Extreme Stress Test. As mentioned before, this benchmark really heats the phone up, usually more than any other test we do. So once it completes, we use our temperature gun to get a reading. For the Galaxy Z Fold 6, we’re looking at a temperature of 100.4 degrees Fahrenheit. That is pretty good for phones, but with foldables where there’s more space for heat to dissipate, we generally see slightly lower numbers. The HONOR Magic V2 RSR was only 98.9 degrees Fahrenheit.

Next up, we will play Genshin Impact for an hour straight, at full brightness and max settings. Since Genshin Impact is such a demanding game, this is a pretty good way to test out the thermals. After an hour of gameplay, the Galaxy Z Fold 6 was at 99.6 degrees Fahrenheit, less than a degree higher than the HONOR Magic V2 RSR.

Finally, the third test is video recording. As most of you probably know, video recording particularly at 4K resolution can be very demanding and heat up the phone. So we record a video at 4K30 (since not every phone has an option for 4K60 yet, to keep things fair in comparisons), and check the temperature at 5 minutes and again at 10 minutes. These readings were 92.8 degrees and 95.5 degrees Fahrenheit, which is actually lower than the HONOR Magic V2 RSR.

Overall, it looks like that larger vapor chamber in the Galaxy Z Fold 6 is really doing a good job at keeping the phone cool, even in the most demanding instances. On most phones that we’ve tested, all of these numbers are above 100 degrees Fahrenheit, so this is looking good for Samsung.

Samsung Galaxy Z Fold 6 Review: Battery life and Charging

This is probably the most disappointing aspect of the new Galaxy Z Fold 6, the battery capacity and the charging speed. Both are unchanged once again. So the Galaxy Z Fold 6 has a battery capacity of 4400mAh – which is the same battery capacity as the Galaxy Z Fold 3. And the charging speed maxes out at 25W wired and 15W wireless.

When it comes to battery life, it’s okay. I’ve been able to get between six and eight hours of screen on time, depending on what I’m doing that day. On the weekend, I got a good bit more screen on time, since I wasn’t on my laptop all day working. And I generally did not need to charge the phone during the day – the only time that happened was after running all the benchmarks and thermal tests mentioned above. So it’ll get you through a day, but this is by no means, a two-day phone.

Samsung Galaxy Z Fold 6 AM AH

In our battery rundown test, the Galaxy Z Fold 6 lasted for 15 hours and 35 minutes. That is quite comparable to most other foldables we’ve tested – most are in the 14 to 15 hour range. But most other smartphones are well over 20 hours in this test. With this test, we play a 24-hour long video on YouTube at full brightness from 100% to about 1% to record how long it took.

On the charging side of things, seeing this cap out at 25W wired charging is pretty sad. I’m pretty sure I know why Samsung is not pushing the envelope on charging speeds; it all comes back to the Galaxy Note 7. But come on, Samsung, 25W? In 2024? OnePlus Open, which is sold in the US, offers 67W charging, and the OnePlus 12 (also available in the US) does 80W in the US and 100W in Europe. At least give us 45W like the Galaxy S24 Ultra has. That being said, in our charging test, we were able to fully charge from 1% up to 100% in about an hour and twenty minutes. While not terrible, it could be much better.

The battery capacity here is more puzzling since we now have flip-style foldables with larger capacity batteries, like the new Xiaomi Mix Flip that was just announced. Even the new HONOR Magic V3, which will make its global debut at IFA in September, has over 5,000mAh capacity. Samsung, it’s time to up the battery capacity. We’re not asking for much, just a larger battery. You’ve already upped the price by $100.

Samsung Galaxy Z Fold 6 Review: Software

The Samsung Galaxy Z Fold 6 launched with Android 14 and One UI 6.1.1, which is a slight update over what the Galaxy S24 series launched back in January. There are some minor changes here, but the bigger changes will come with One UI 7, which is expected later this year with Android 15. It’s also important to note that the Galaxy Z Fold 6, along with the Flip 6 and the S24 Series, will all get 7 years of software updates. Only the Pixel 8 series is matching that right now.

With the Fold 6 this year, Samsung’s not really focusing much on new features exclusive to foldables. Instead, it’s more about AI. Which, surprise, surprise. Obviously, Samsung announced a slew of Galaxy AI features with the Galaxy S24 series back in January. But with the new foldables, Samsung is adding onto that with a few more features. You can even force all of the processing to happen on the device, which is a really good security feature.

One of the changes that Samsung made in One UI 6.1.1 that I really like is adding a section in Settings for Galaxy AI. Honestly, I forget about a lot of these very useful Galaxy AI features. There are toggles for a lot of them, along with a few more options too. Here are all of the Galaxy AI features available on the Galaxy Z Fold 6: Call Assist, Chat Assist, Interpreter, Note Assist, Transcript Assist, Browsing Assist, Photo Assist, Drawing Assist, Photo Ambient Wallpaper, and Health Assist. We’ll touch more on the Health Assist feature when we review the Galaxy Watch 7 and Galaxy Watch Ultra.

Samsung Galaxy AI AM AH 2

There are a handful of Galaxy AI features that I do use quite often. One that I’ve used a few times but expect to use more the next time I travel to another country is Interpreter. I’ve tried this out with a few friends who speak Spanish, of which I don’t speak a lick. And it was pretty quick, and accurate. What’s great about using this on a foldable is that you can see each language on each side of the phone. So you can hold up the back of the phone to someone, and they’ll be able to see and hear what you’re saying once it is translated. I can see this coming in handy when I go to Berlin for IFA next month.

Transcript Assist is another super handy one, especially as a journalist, as we are a part of loads of Q&A sessions and briefings. With Transcript Assist, you can have your recordings transcribed into text, making it easy to find a specific portion of the briefing or meeting. It can also summarize the recording for you if it’s a long one. Speaking of summarizing, with Samsung’s Internet, you can do summarization of webpages. This is really helpful for articles like this one that are well over 4,000 words long and will take a while to read. Google Gemini powers it, so it’s going to work the same as the summarization feature in the Google app and in Chrome. But Samsung Internet is just so much faster than Chrome these days.

Finally, an AI feature that I use a lot now but suspect I won’t use as much after this review is Photo Assist. This allows you to use Generative AI to change up your photo. It’s especially fun with the Sketch to Image feature. Just sketch something that you want to add to the image, then tap on “Generate,” and it’ll give you a few options to choose from. This actually works a lot better than I thought it would. I took a picture inside Moynihan Train Hall in Manhattan, and I thought it’d be funny to have a train going through the main level. I drew something that was close to a train – my drawing sucks, though – and Samsung added a van. It looks cool, but the van is comically small compared to the people around it. Other than it does look realistic.

With Photo Assist, you also have the Portrait Studio option. This lets you turn pictures of people into a sketch, watercolor, cartoon or comic. Some of these have come out really well, in my opinion. I especially like the sketch and watercolor options. With this being Generative AI, it’s only going to get better as it learns more about what people are doing with it. Here are a few examples of what Photo Assist is capable of:

As mentioned before, the software on the Galaxy Z Fold 6 runs insanely well. I’ve never had it slow down or really heat up other than when I’m editing a video in Capcut or playing games for a long period of time. It’s what you expect with this type of hardware, but always good to see.

Samsung Galaxy Z Fold 6 Review: Camera

There’s been a lot of talk about how Samsung is still sticking with the same cameras as the Galaxy Z Fold 4. Which normally, I wouldn’t mind. However, where the Galaxy Z Fold cameras were already a few generations behind its flagship phones like the Galaxy S24 Ultra, and Samsung raised the price by $100, it is a lot harder to justify.

These cameras are not bad by any means. They will take some really good pictures on your Galaxy Z Fold 6, especially with that 50-megapixel primary camera. But they could be so much better. After using the OnePlus Open for many months, it’s hard to go this far backwards in terms of cameras. Samsung, please just slap the Galaxy S24 Ultra cameras on the Galaxy Z Fold 7 next year. Even it if makes the camera bump larger, we don’t care.

Like I said, the cameras aren’t bad. That 50-megapixel primary sensor has provided me with some pretty good images over the past week. They are still pretty sharp, mostly because they are pixel-binning the image down to a 12.5-megapixel image. But even when you opt to take a shot at the full 50-megapixels, it’s still really sharp. The colors look great, mostly true-to-life, with a tad of saturation. They aren’t overly saturated like Samsung phones used to be, back in the day.

The 12-megapixel telephoto sensor is a 3x optical zoom camera, which is a bit weird to see these days, with so many offering 5x, 6x or even 10x telephoto lenses. But It’s still taking some good pictures, though remember this only goes up to 30x and not 100x like the Galaxy S24 Ultra.

Finally the ultrawide. It’s really hard to mess up an ultrawide camera unless it’s a 3-megapixel or lower lens. It’s also a camera that I don’t use all that often. But on the Galaxy Z Fold 6 here, it has cranked out some really good-looking photos too. You can find images from all three lenses down below, none of these have been edited, and all shot at “auto” the only changes we made was the focal length.

My conclusion on the camera here is that it’s okay. It could be better, we know Samsung can do better. The $100 price increase does sting a bit since we’re now on our third-generation of the same camera sensors on this phone. While the Chinese competitors are putting crazy camera modules on their foldables, and selling them for less.

Should you buy the Samsung Galaxy Z Fold 6?

For me, it’s always hard telling someone whether they should buy a phone that costs $1,899. That’s a lot of money to spend on a phone. I will say, however, if this is your first foldable and you can get a good deal with trade-ins and other promos, then yes definitely switch to the Galaxy Z Fold 6. If you have a Galaxy Z Fold 5, I don’t think it’s worth switching yet. Even though Samsung is offering $1,500 trade-in credit for it.

I feel that foldables are still mostly niche products. Because not everyone wants to carry a phone that unfolds into a phone in their pocket all the time. But heavy users like myself love products like this because you have a 7.6-inch screen in your pocket to use for navigation, seeing desktop versions of websites, and much more.

You should buy the Samsung Galaxy Z Fold 6 if:

  • You want a phone that unfolds into a tablet.
  • You want one of the best foldable software experiences out there.
  • You can get a good deal from Samsung or your carrier.
  • You want to try out a foldable phone for the first time.

You should not buy the Samsung Galaxy Z Fold 6 if:

  • You have a Galaxy Z Fold 5.
  • You are turned off by the crease.
  • You like having a small and/or lightweight phone.

[ad_2]
Source link

Hackers Registered 500k+ Domains Using Algorithms For Extensive Cyber Attack

0
[ad_1]

Hackers often register new domains for phishing attacks, spreading malware, and other deceitful activities. 

Such domains are capable of pretending to be trusted entities, which helps to make individuals disclose their sensitive details or download harmful content.

Cybersecurity researchers at InfoBlox recently discovered that hackers have registered more than 500k domains by using Registered Domain Generation Algorithms for extensive cyber attacks.

Hackers Registered 500k+ Domains

Registered Domain Generation Algorithms (RDGAs) are an evolution of the traditional DGAs that threat actors have used to register domains secretly, numbering up to millions.

Protect Your Business Emails From Spoofing, Phishing & BEC with AI-Powered Security | Free Demo

On the other hand, unlike malware-based DGAs, RDGAs are flexible and can be used for various malicious purposes, such as phishing, malware, and scams.

Besides this, researchers unveiled Revolver Rabbit, an RDGA threat actor associated with XLoader malware, and Hancitor malware’s long-time use of RDGA for C2 domains.

They utilize harder-to-detect RDGAs as opposed to traditional DGAs, and criminal groups and legitimate businesses apply them. Some registrars even provide domain variant generation tools.

Difference in domain registration behaviors of traditional DGAs and registered DGAs (Source – InfoBlox)

This new technique significantly alters the DNS threat landscape, creating more challenges in cybersecurity.

RDGAs vary from traditional DGAs in that they are used to register many domains privately.

Due to the complicated patterns exhibited by RDGAs, which range from random characters to constructed word combinations, detecting them is difficult without massive DNS data analysis.

The case study of Hancitor malware shows how RDGAs turned into C2 domain generators and adopted a repeated character pattern like typical English words.

Infoblox created a statistical model in 2018 for preemptively identifying and blocking domains created by Hancitor’s RDGA, which helps underscore the need for advanced detection techniques for these maturing threats.

Revolver Rabbit, a famous horn-stepper from RDGA, has registered more than 500,000 domains on the .bond TLD alone by using changeable patterns that mix up dictionary words, numbers, and country codes.

It is important to note that these actors’ domains have been linked to XLoader malware, which reminds us of the significance of RDGA detection.

During the six-month period in question, around 2 million unique RDGA domains were detected at an average rate of 11,000 new ones per day in approximately 52,000 actor groups.

Manual research is ineffective as of the magnitude and intricacy of RDGA operations, consequently, automatic detection must remain the frontline defense against such threats.

Organizations should be aware of multiple malicious activities associated with RDGAs and implement advanced DNS analytics-based security solutions for their networks.

Indicators Of Activity

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.


[ad_2]
Source link

Get a $300 Amazon Gift Card with Galaxy Z Fold 6 Pre-Order!

0
[ad_1]

Amazon is still offering a $300 gift card when you pre-order the Samsung Galaxy Z Fold 6, and this does also include a free storage upgrade. So for $1,899, you’re getting a bump to 512GB of storage, along with a gift card that can be used to buy accessories, cases and much more.

The Galaxy Z Fold 6 is a really great phone from Samsung, and honestly, while it looks like an iterative upgrade, it’s a lot more than that. I’ve been using it for almost two weeks now, and it’s still hard to put it down. Thanks to the new boxy design, it looks a lot more premium than the previous models. It also is a tiny bit wider and shorter, which makes the front display a lot more usable. Finally, the new hinge is a huge upgrade. Not only does it feel stronger, but it is also smaller and lighter.

Inside the Galaxy Z Fold 6, Samsung has included the Snapdragon 8 Gen 3 for Galaxy, with 12GB of RAM and 256GB, 512GB or 1TB of storage. It also includes a 4,400mAh capacity battery which isn’t that large and is the same size as the Galaxy Z Fold 3. However, thanks to improvements in efficiency with the processor, it does have better battery life than its predecessor.

The Galaxy Z Fold 6 is available in pink, navy and silver shadow from Amazon and you can order yours from the link below.

Buy at Amazon


[ad_2]
Source link

40 GB of Confidential Data Exposed

0
[ad_1]

Daikin, the world’s largest air conditioner manufacturer, has become the latest target of the notorious Meow hacking group.

The USA branch of Daikin has been listed as a victim, with hackers demanding a ransom of $40,000. The incident has raised significant concerns about cybersecurity vulnerabilities in major corporations.

40 GB of Confidential Data Exfiltrated

According to a HackManac tweet, the Meow hacking group has allegedly exfiltrated 40 GB of confidential data from Daikin. This data reportedly includes sensitive account information, bank details, and transaction records.

The breach has potentially exposed critical financial information, posing a significant risk to the company’s operations and customer trust.

Protect Your Business Emails From Spoofing, Phishing & BEC with AI-Powered Security | Free Demo

The hacking group has a history of targeting high-profile organizations, and their latest attack on Daikin underscores the growing threat of cybercrime.

The hackers have reportedly provided samples of the stolen data to substantiate their claims, adding pressure on Daikin to meet their demands.

Ransom Demand and Cybersecurity Concerns

The Meow hacking group has demanded a ransom of $40,000 in exchange for not releasing the stolen data.

This demand places Daikin in a precarious position. Paying the ransom could set a dangerous precedent, while refusing could expose sensitive information to the public.

The industry and cybersecurity experts will closely watch the company’s response to this crisis.

Daikin has yet to release an official statement regarding the breach. Still, they are expected to work closely with cybersecurity professionals and law enforcement agencies to address the situation.

This incident serves as a stark reminder of the importance of robust cybersecurity measures and cybercriminals’ ever-evolving tactics.

As the investigation unfolds, stakeholders will be keen to see how Daikin navigates this challenging situation and what steps they will take to prevent future breaches.

The outcome of this incident could have far-reaching implications for the company’s reputation and the broader industry.

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.


[ad_2]
Source link

Blackmagic Camera app expands Android support: OnePlus, Xiaomi, more Pixel and Galaxy phones

0
[ad_1]
Last month, Blackmagic, renowned for its top-tier digital film cameras and DaVinci Resolve editing software, launched a free camera app for Android. Initially, the app was only compatible with a handful of recent flagship models. But now, it’s expanding to support more devices.

Blackmagic Camera 1.1 for Android adds support for the Pixel 6 series, as well as OnePlus and Xiaomi phones


On Threads, Blackmagic has announced that version 1.1 of its Camera app for Android is now compatible with several new devices, including:
The Blackmagic Camera 1.1 for Android update brings several new features, including HDMI monitoring support, pull focus transition controls, and integration with Blackmagic Cloud for Organizations. This new cloud feature lets you set up groups or teams for quick and easy project sharing.

The update also adds support for 3D LUTs during recording and monitoring, allowing for more advanced color grading. Plus, you can now dim the screen while recording, which is great for low-light situations. Plus, the app now includes image retouching tools like noise reduction and sharpening to enhance your footage. Performance has also been ramped up for a smoother experience.

If you’re eager to check out Blackmagic Camera 1.1 on your device, you can download the update from the Google Play Store.

It’s exciting to see more devices added to the list, and it would be awesome to see even more soon. For instance, foldable phones like the Pixel Fold or Galaxy Z Fold models would be great additions. Their large screens are perfect for editing and taking full advantage of all the features Blackmagic Camera has to offer.

[ad_2]
Source link

Emojis Are To Express Emotions, But CyberCriminals Using for Attacks

0
[ad_1]

There are 3,664 emojis that can be used to express emotions, ideas, or objects in digital communication.

While seemingly harmless, criminals are increasingly exploiting emojis for covert communication in illegal activities. This allows them to conduct transactions and target victims while evading detection by law enforcement and text-based filtering systems. 

Law enforcement’s text-based detection methods struggle to interpret emojis, which can bypass filters and have subjective meanings, making it hard to distinguish between intended and malicious use. 

 DEA Emoji Drug Code Cheat Sheet 

Emojis create ambiguity for analysts and automated systems even when combined with text.

Protect Your Business Emails From Spoofing, Phishing & BEC with AI-Powered Security | Free Demo

Emojis’ ongoing evolution makes it more challenging for law enforcement to stay on top of the gap between detection and prevention. 

Criminals leverage emojis to conceal their activities online.

Drug dealers use specific emojis, like pills, plants, and crystals, to represent different narcotics, which allows for clear communication about pricing, quantities, and locations despite variations in devices and platforms. 

DISGOMOJI Emoji Cheat Sheet 

Law enforcement agencies like the DEA track these evolving codes. Similarly, human traffickers utilize emojis like high heels and roses to advertise and communicate about victims on social media, exploiting the internet’s reach. 

Cybercriminals embed emojis in phishing emails and malware to bypass text-based security filters, which highlights the challenge emojis pose for law enforcement due to their ability to act as a covert communication language. 

According to DarkOwl, romance scammers leverage emojis to build rapport with victims, while emojis like hearts and kisses create a false sense of intimacy and trust, making victims more vulnerable to manipulation. 

This approach transcends language barriers and platforms, allowing scammers to maintain a consistent, relatable persona across dating apps, social media, and messaging services, which ultimately increases the scammer’s success rate. 

Fraudsters leverage emojis to mask communication about financial crimes like money laundering and credit card fraud by using emojis like credit card, money bag, and package to symbolize their illegal activity. 

Fraudster Posts contain Emojis

Emojis help obfuscate content for potential victims. Since emoji encoding is standardized, fraudsters can easily manage multiple platforms with the same messaging, enabling them to reach a wider audience without customizing content for each platform. 

They function as a visual language supplement that transcends spoken or written language barriers, which is particularly helpful for non-verbal individuals and multicultural families.

Emojis visually convey emotions, ideas, and everyday activities, enabling communication regardless of spoken language proficiency. 

Emojis provide a way for nonverbal individuals to express emotions and needs. For multicultural families, they bridge the communication gap between family members who speak different languages. Emojis are also helpful for migrant families as they integrate into new communities by facilitating communication of basic needs and emotions.

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.


[ad_2]
Source link

Some Android users can already talk to their Google Photos gallery: ‘Ask Photos’ is the test drive zone

0
[ad_1]

Google Photos is getting beyond smart: it’s getting artificially intelligent, as in AI!

That’s no surprise for anyone who watched the Google I/O conference in mid-May this year; during the presentation, the term ‘AI’ was mentioned over 120 times. If you were watching it live, these 120 times felt more like 1,200, but that’s another story.

One of the announcements – the Ask Photos feature – is now going live for some, but only for a testing phase. Things are not final and are about to be polished up, ironed out and enhanced before Ask Photos goes live for everybody.

Ask Photos is all about Gemini (Google’s AI model) getting more integrated into the popular Photos app, which will soon handle tasks based on your commands.

As previewed by Google, Ask Photos will help users find specific images or details within them with a smart, AI-powered search. The new Ask Photos feature leverages Gemini to understand image content, allowing for more advanced searches. For instance, it can identify a car license plate and let users ask about a specific plate number on a particular car model for precise identification.

Or, one could use Ask Photos to get the very best ten photos from that trip last year – in theory, this could be highly useful, if you’re the kind of person who takes 2,000-3,000 photos per day. On the other hand, you’re relying completely on Ask Photos and its understanding of what a ‘good photo’ is. Choices will have to be made!

Now, a 9to5Google report shines a light on Ask Photos on a Pixel 8 Pro – a user got a notification that their Google Photos app was part of a “pre-release” study. The disclaimer suggests Google is seeking feedback from some users, but the scope of this “study” remains unclear.

So, Ask Photos logically appears on the Search tab in the Google Photos app. A prominent Ask button with the Gemini logo appears next to the search bar. This is a new design, as Google previously showed the feature as a dedicated tab within the app. Of course, that was more than two months ago, so of course things like button positions and overall design are subject to change.

Here’s how it looks:

When you hit that Ask button, a page pops up. “What would you like to see?”, the new page reads. It offers example prompts (like: “Photos of me over time”) or the option to write your own question. Unfortunately, the sample prompt “Photos of me over time” wasn’t functional, and the feature disappeared for the user who got an early glimpse of it.

The exact release date for “Ask Photos” is still unknown, but its brief availability as part of this “study” suggests it could be relatively close. Google previously mentioned the feature would arrive in the summer.

[ad_2]
Source link