The Google Contacts app has three tabs at the bottom of its interface – Contacts, Highlights, and Fix & manage. In the upcoming update, Google is replacing the Fix & manage tab with the Organize tab.
This change was first noticed and shared by AssembleDebug about a month ago. At that time, this change was under testing and was enabled with a flag (45621130). Now, Google has started the public rollout of this feature in the app version 4.29 for Android.
Tools are more descriptive in the Organize tab
All the tools in the Fix & manage tab were in a 2×4 grid format and did not provide much information about what a particular tool would do. However, in the new Organize tab, the tools have been arranged in a list format, with each tool providing a brief description of its functionality.
For example, the Emergency contacts tool comes with the description, “Choose who others can call using your phone’s safety app.” This concise description gives an idea of what to expect when tapping on this tool. Similarly, the Bin tool description states, “Recently deleted Google Account contacts,” indicating that accessing this tool will display all recently deleted account contacts.
Furthermore, the Organize tab has two sections — Google and This Device. In the Google section, you will find options such as Merge and fix, Reminders, Emergency contacts, Family group, Restore contacts, and Bin. In the This Device section, options include Contacts ringtones, Manage SIM, Import from file, Export to file, Blocked numbers, and Settings.
There is also a search field in the Organize tab
You also have a search field in the Organize tab to match the Contact and Highlights tabs. This means you can search for your contact from the Organize tab, which was previously only possible from the Contacts and Highlights tabs.
Google Contacts is one of those Google apps that doesn’t receive major updates frequently. However, it seems like Google is now paying attention to their Contacts app. It wasn’t too long ago that Google rolled out Contacts ringtones in Google Contacts. And now, by replacing the Fix & manage tab with the Organize tab, Google is indicating that they have big plans for their Contact app.
[ad_2]
Source link
GitHub Comments Abused to Spread Malware in Fake Microsoft Repositories
McAfee cybersecurity researchers have discovered a malicious scheme exploiting GitHub’s comment section, where threat actors host malware and disguise download links as legitimate Microsoft repositories.
This incident reminds me of a similar event that occurred in June 2027, during which Russian hackers exploited the comment section of Britney Spears’ Instagram profile to host malware.
According to McAfee, cybercriminals have been exploiting GitHub’s file upload logic since February 2024 to host and distribute malware through automatically generated download links containing the repository owner’s name and ownership details.
These repositories contain password-stealing malware disguised as seemingly innocuous files. More troubling, the repositories also included comments with download links crafted to mimic official Microsoft software repository URLs.
GitHub’s comment feature stores files on its servers, creating real-time access links to them. This can trick potential victims into thinking they are clicking on a link from a trusted developer. Users don’t need to send comments or bug reports as the file is already uploaded and available.
What to do About it?
GitHub’s CDN files remain unchanged even after comments are posted or deleted, and downloaded URLs keep functioning. This issue allows threat actors to create sophisticated lures, as most software companies use GitHub and the file URL contains the repository name.
Unfortunately, the only available solution is to disable comments, but this leads to more issues as legitimate users often report bugs or provide quality suggestions, and comments can only be disabled for up to six months at a time.
Why This Matters:
This deceptive tactic leverages the trusted nature of both GitHub and Microsoft. Users visiting these repositories might be tricked into downloading malware, believing they are getting legitimate Microsoft software.
This could have serious consequences, as downloaded malware could steal user credentials, compromise systems, steal browsing data and crypto funds or launch further attacks.
However, the good news is that according to Bleeping Computer, GitHub has removed the malware associated with Microsoft’s repositories.
How to Protect Yourself?
To protect yourself, download software directly from the developer’s official website, avoid clicking on links in comments or third-party websites, verify file hashes, and use a robust security solution with real-time malware scanning. If unsure about a download link, visit the official Microsoft website to ensure system safety.
Cyber Intelligence Team Manager at Cofense, Max Gannon, commented on the issue stating, “This is a very clever tactic for threat actors to take advantage of, especially because GitHub has provided no way for companies to mitigate the threat.“
“The only thing that can be done is for individuals to exercise caution when clicking any link, regardless of where it appears to go or who it appears to be from,“ For example, if you stopped and thought about it, a .zip file containing cheat software is not likely to be directly hosted on a Microsoft repository,“ Max explained.
RELATED TOPICS
[ad_2]
Source link