The European Commission opened up investigations targetting Google, Apple & Meta
The whole purpose of these investigations is to find out how Google, Apple, and Meta are complying with its new Digital Markets Act antitrust rules. The EU antitrust chief, Margrethe Vestager said: “We suspect that the suggested solutions put forward by the three companies do not fully comply with the DMA”.
What about Meta? Well, its “pay or consent model” for ad targeting is another point of interest for the European Commission. The regulator said that it plans to conclude these investigations within the next 12 months.
Those are the main points of the investigations, but there are more secondary targets. The Commission plans to look into the fee structure Apple announced for distributing apps outside of the App Store.
Amazon’s practices will also be looked over by the EU
Amazon is not exempt either. It will find out whether Amazon is preferencing its own products in its store. When it comes to Meta, the Commission gave it an additional six months to make Messenger interoperable with other messaging services.
The EU Commissioner, Thierry Breton, said “We are not convinced that the solutions by Alphabet, Apple and Meta respect their obligations for a fairer and more open digital space for European citizens and businesses”. He also added: “Should our investigation conclude that there is lack of full compliance with the DMA, gatekeepers could face heavy fines”.
If found guilty, heavy fines are coming, along with steps on how to improve current practices. The European Commission can fine each of the companies up to 10% of their annual global revenue under the DMA. If repeated offenses are in question, those fines go up to 20% of annual global revenue.
Ars Technica reports that Instagram users have started complaining on X/Twitter after discovering that Meta has begun limiting recommended political content by default.
Back in February, when the announcement was made, Meta said:
We want Instagram and Threads to be a great experience for everyone. If you decide to follow accounts that post political content, we don’t want to get between you and their posts, but we also don’t want to proactively recommend political content from accounts you don’t follow. So we’re extending our existing approach to how we treat political content – we won’t proactively recommend content about politics on recommendation surfaces across Instagram and Threads. If you still want these posts recommended to you, you will have a control to see them.
Fast-forward to present days. There’s an abundance of users who complain on X/Twitter about it and they’re not happy their accounts are set to limit such posts by default:
Instagram put up a new “limit political content” feature in settings and set it as the default for tons of accounts. The timing of this feature is very suspect to me, but anyway here is how to fix it pic.twitter.com/wPofpiFwZk
“Political content is likely to mention governments, elections, or social topics that affect a group of people and society at large”, reads the Instagram settings page for such kinds of posts. Even if you’re sick of politics and you just want to see another cat/dog/red panda video, the “… or social topics that affect a group of people…” part is extremely vague and could incorporate… well, everything.To change the setting and not let Meta’s algorithm decide what’s a political post (and what’s not) that you should or should not see, users can navigate to Instagram’s menu for “settings and activity” in their profiles, and update their “content preferences”. There’s a “political content” menu (the last item under a list of “suggested content”) where users can set preferences for what content is recommended in their feeds.
Choosing “don’t limit” means “you might see more political or social topics in your suggested content,” the app says. By default, all users are set to “limit,” which means “you might see less political or social topics.”
This affects suggestions in Explore, Reels, Feed, Recommendations, and Suggested Users. It does not affect content from accounts you follow. This setting also applies to Threads.
A malvertising campaign has been discovered deploying a fake PuTTY client to deliver the Rhadamanthys stealer, a dangerous malware.
This campaign cleverly exploits the trust in the widely used SSH and Telnet client, PuTTY, by presenting a counterfeit website through malicious ads at the top of Google search results.
This article delves into the mechanics of this attack, the role of malware loaders, and the subsequent deployment of the Rhadamanthys stealer, underscoring the need for heightened vigilance among Linux administrators.
Malware Loader
Malware loaders, also known as droppers or downloaders, play a pivotal role in the cybercriminal ecosystem.
Alert Fatigue that helps no one as security teams need to triage 100s of vulnerabilities.:
The problem of vulnerability fatigue today
Difference between CVSS-specific vulnerability vs risk-based vulnerability
Evaluating vulnerabilities based on the business impact/risk
Automation to reduce alert fatigue and enhance security posture significantly
AcuRisQ, which helps you to quantify risk accurately:
Their primary function is infiltrating a machine and deploying additional payloads while evading detection.
A sophisticated loader delivers malware and ensures that the victim is legitimate, thereby maximizing the attack’s impact.
The loader discussed in this campaign is particularly noteworthy for its use of the Go programming language and an innovative technique to deploy the Rhadamanthys stealer.
Malwarebytes has reported that the latest version of Go loader is being used to deliver the Rhadamanthys stealer malware.
This new variant is being actively distributed and poses a significant threat to organizations and individuals.
The Malvertising Campaign
The campaign begins with a malicious ad that masquerades as the homepage for PuTTY.
malicious ads
This ad, cunningly placed above the official site in Google search results, directs unsuspecting users to a domain controlled by the attackers.
The domain, arnaudpairoto[.]com, is a red flag due to its irrelevance to PuTTY, highlighting the importance of scrutinizing domain names in ads.
Crawler, sandbox, or scanner, will see this half-finished blog
Fake PuTTY AdVictims from the US are redirected to a counterfeit site that mirrors putty.org, with the critical difference being the download link.
A big difference though is the download link
This link initiates a two-step redirection process, ultimately leading to downloading a malicious PuTTY executable from the astrosphere[.]world.
puttyconnect[.]info/1.php
HTTP/1.1 302 Found
Location: astrosphere[.]world/onserver3.php
astrosphere[.]world/onserver3.php
HTTP/1.1 200 OK
Server: nginx/1.24.0
Content-Type: application/octet-stream
Content-Length: 13198274
Connection: keep-alive
Content-Description: File Transfer
Content-Disposition: attachment; filename="PuTTy.exe"
This server performs checks for proxies and logs the victim’s IP address, setting the stage for the delivery of the Rhadamanthys stealer.
Cybertron Technologies has recently tweeted about a malvertising campaign that leverages the Go Loader to deploy the Rhadamanthys Stealer.
🚨 Threat Campaign Alert – Malvertising Campaign Uses Go Loader to Deploy Rhadamanthys Stealer🚨
Summary: A Malvertising campaign employs a new loader written in Go language to deploy the Rhadamanthys stealer via fake PuTTY sites, targeting system administrators through… pic.twitter.com/YlAZS2jsmj
— CyberXTron Technologies (@CyberxtronTech) March 25, 2024
The Rhadamanthys Stealer: The Final Payload
Upon execution, the fake PuTTY client, dubbed “Dropper 1.3” by its author, verifies the victim’s IP address to ensure the malware was downloaded through the deceptive ad.
The dropper proceeds to retrieve a follow-up payload from another server
Successful verification triggers the retrieval of the Rhadamanthys stealer from another server, utilizing the SSHv2 protocol for a covert download.
Rhadamanthys Stealer DeploymentThe Rhadamanthys stealer, once executed, poses a significant threat by stealing sensitive information from the compromised system.
This highlights the critical nature of the loader-malvertising combo, in which the threat actor meticulously manages the entire deployment process, from ad to loader to final payload.
The discovery of this malvertising campaign serves as a stark reminder of the constant vigilance required in the digital age.
System administrators, in particular, must be wary of seemingly legitimate tools and websites as cybercriminals continue to find innovative ways to breach defenses.
With Perimeter81 malware protection, you can block malware, including Trojans, ransomware, spyware, rootkits, worms, and zero-day exploits. All are incredibly harmful and can wreak havoc on your network.
Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.
Entering the dynamic world of cryptocurrencies is pretty exciting. But one can easily get overwhelmed with the amount of information that floods you once you dip your toes.
Since you’re looking to create a crypto wallet, this guide was designed to help you as a newbie complete this process without a hassle. It will highlight the distinction between custodial and non-custodial wallets, emphasizing the benefits of each, and walk you through the setup process.
Two Types of Crypto Wallets
There are two main types of wallets: custodial and non-custodial. Understanding the difference between these two is detrimental to making the right decision.
Custodial Wallets
Custodial wallets are managed by a third-party entity, such as a cryptocurrency exchange or a specialized wallet service. When you use a custodial wallet, the private keys to your cryptocurrencies are held by the service provider.
Advantages:
Custodial wallets often offer a user-friendly interface, making them accessible to beginners.
Users don’t need to worry about managing their private keys, as the service provider takes care of security.
If you forget your password or lose access to your account, you can recover your funds through the service provider’s customer support.
Disadvantages:
By entrusting your private keys to a third party, you’re exposed to the risk of the service being hacked.
Since the service provider controls the wallet’s private keys, they have the ultimate authority over your funds. This control includes the ability to freeze accounts or delay transactions, which might be concerning for some users.
Non-Custodial Wallets: Security and Autonomy
Non-custodial wallets give you full control over your cryptocurrency by allowing you to manage your wallet’s private keys. This means that only you have access to your funds and the authority to make transactions.
Advantages:
Since you’re the sole holder of the private keys, the risk of external breaches is significantly reduced.
You have complete autonomy over your funds, without any intermediary having the power to freeze or manage your assets.
Disadvantages:
Managing your private keys means you must be vigilant in securing them. Losing your keys without a backup can result in the irreversible loss of your assets.
Non-custodial wallets can be more complex to use, especially for those new to cryptocurrency.
Your choice between a custodial and non-custodial wallet will depend on what you value more: convenience or control. For those who prioritize ease of use and are just getting their feet wet in the crypto world, a custodial solution might be the way to go.
On the other hand, if you’re keen on having full control over your assets, a non-custodial wallet is your best bet. But then you must learn how to safely store and manage your keys, which might be tough for a beginner.
Setting Up Your Wallet
Regardless of the type of wallet you choose, the setup process is generally straightforward. Here’s how you can get started:
Research
Look for a reputable wallet provider. For non-custodial options, consider security features and compatibility with different cryptocurrencies. For custodial wallets, assess the platform’s reliability and customer service.
Download and Install
Once you’ve chosen your provider, download the wallet application on your smartphone or computer. Follow the installation instructions.
Create Your Wallet
Open the application and select the option to create a new wallet. You’ll likely be prompted to set up a password or PIN for additional security.
Backup Your Wallet
If you’re using a non-custodial wallet, you’ll be given a recovery phrase. It’s crucial to write this down and store it in a safe place. This phrase is your lifeline if you ever lose access to your device.
Deposit Cryptocurrency
You can now transfer crypto into your new wallet. You can do this by purchasing cryptocurrency through an exchange and sending it to your wallet’s address or receiving it from someone else.
Introducing Nonbank: The Best of Both Worlds
Now, let’s talk about Nonbank (PDF). It’s a new player but their concept is intriguing. Nonbank offers the convenience of a custodial wallet with the security and control of a non-custodial option. The upcoming Tron Wallet feature is especially noteworthy for those interested in managing both digital and traditional financial assets seamlessly.
Setting up a wallet with Nonbank is a breeze. Their user interface is intuitive, making it easy for beginners to navigate. With Nonbank, you’re not just getting a wallet; you’re getting a comprehensive platform that supports your journey through the crypto space.
To Sum Up
Choosing the right wallet is a critical step for anyone venturing into the cryptocurrency world. Whether opting for a custodial or non-custodial wallet, the primary considerations should be convenience, security, and control. Nonbank can be a great tool to simplify the management of your digital and traditional assets, which makes it an excellent choice for you as a newcomer.
AliExpress is currently hosting its Anniversary Sale with massive discounts, and Ulefone has decided to join the party. The company is now offering up to 65% off on its devices via AliExpress.
Ulefone has joined the AliExpress Anniversary Sale with some massive discounts
These discounts will be available until March 27, so keep that in mind, you only have a few days to grab something. Ulefone did throw in a bunch of devices in the mix here, so let’s highlight some of them.
The Ulefone Power Armor 16S and Note 17 Pro are the first that come to mind. These are both newer devices, and both are discounted by 60%. The former is a rugged device with a huge battery, while the latter is a more regular smartphone.
The Ulefone Power Armor 16S has a huge speaker on its back
The Ulefone Power Armor 16S has a 36mm smartphone speaker on the back with an 11.5cc sound cavity. It comes with a huge battery, expandable RAM thanks to virtual RAM, and more. It is now priced at $129.99.
The Ulefone Note 17 Pro, on the flip side, has a 6.78-inch AMOLED display with a 120Hz refresh rate. It is drop-proof too, and the display is protected by the Gorilla Glass 5. This handset is priced at $239.99.
The Ulefone Armor 23 Ultra has two-way satellite messaging built in
What else is on offer? Well, the Ulefone Armor 23 Ultra, for example. That rugged handset has two-way satellite messaging built in, and a 50% discount. It’s now priced at $369.99.
The Ulefone Armor 24 can now be purchased for $239.99, and it comes with a night vision lens. If you need a smartphone with a thermal camera, Ulefone has you covered. The Ulefone Power Armor 17T Ultra has the FLIR Lepton 3.5 sensor for thermal imaging. That device is priced at $429.99.
The Ulefone Armor 22’s 8GB RAM variant with 128GB of storage costs only $158.99 now, while more devices are available. If you follow the link below, you’ll be able to see everything that Ulefone is offering.
As the debate around potentially banning TikTok comes to a head, two members of the Senate have asked for the Congress TikTok briefing to be declassified. TikTok, the popular Chinese video-sharing platform, has been in hot water for a long time now. Rumors have been flying around for years that the app is Chinese spyware. For instance, some argue it is impossible for a Chinese platform to not hand over user data to the Chinese government. Senators Blumenthal and Blackburn now believe they have something concrete that the American public needs to be made aware of.
Senate bill and the Congress TikTok briefing
The House of Representatives has recently passed a bill that could see TikTok banned in the States. TikTok has been brought up as a national security concern before, but this bill is the closest anyone has come to banning it. The main concerns always raised center around TikTok being a tool to spy on users. Hence, ever since American users first picked up the popular app, it has faced scrutiny, like many other Chinese products and services.
Congress has just received a briefing by intelligence agencies on what they’ve learned about TikTok. This briefing apparently left some senators shocked, and others not convinced of any danger posed by the app. Senators Richard Blumenthal and Marsha Blackburn had this to say.
“We are deeply troubled by the information and concerns raised by the intelligence community in recent classified briefings to Congress. TikTok is a weapon in the hands of the Chinese government, and poses an active risk to our democratic institutions and national security.” The bill, if passed into law, will force TikTok’s parent company ByteDance to sell the platform within six months or face a ban in the States.
Is TikTok actually Chinese spyware?
The main question that comes to mind after all this drama is whether TikTok is actually spyware. The claim lacks concrete proof as of yet. Nonetheless, the public does not know what the classified briefing to Congress contained. Representative Sara Jacobs, speaking to the Associated Press, thinks the entire thing is blown out of proportion.
“Not a single thing that we heard in today’s classified briefing was unique to TikTok. It was things that happen on every single social media platform,” she said. What Representative Jacobs was talking about here was likely the app permissions each app requires. Less tech-savvy folk often mistake these requirements for something more sinister. Take, for example, an app that has a photo-taking feature. It would require access to the camera. The wording of this permission leads people to believe that the app is always using their camera to spy on them.
If the briefing is declassified, the public will get a look at what intelligence officials have found. Applying different perspectives to the data may lead to a more rational decision.
If you’re using Google’s Gboard and you’re facing issues with the way it behaves, you’ll be able to tell Google about your dissatisfaction even quicker in the near future.
9to5Google reports that Gboard now lets you quickly file a “Quality Bug Report”.
This is Gboard’s latest feature and this shortcut should open Google’s standard tool for submitting issues and feedback on Android.
This “Quality Bug Report” is found on the latest Gboard beta version (13.9.13.x) on Pixel devices.
If you don’t participate in the beta program, but you still want to let Google know about an issue (or a suggestion) on Gboard, you have to take the long road. The current bug filing process involves going to Gboard settings, then tapping Help & feedback (at the bottom), then it’s Send feedback.
When this beta feature rolls out to the public, the whole process would be quicker. It should take two taps or as fast as a single press if one drags and puts the “Quality Bug Reports” shortcut in the shortcuts’ toolbar.
The workflow appears to be otherwise identical, though “Quality bug report” is appended to the start of the “describe your issue” field. This should let the Gboard team filter and find feedback filed in this manner.
Prior to that, Gboard recently introduced a handy OCR feature called Scan Text to Gboard. When you use the feature, your camera will open, taking up a bit more than half of your display. A button will appear at the bottom center, along with a tagline that says, “Take a photo of words to scan.”
Afterward, Gboard highlights all the text it identifies on the page. You can then insert the content captured from the photo into messages, notes, and other places. The feature also provides a quick preview of what it copied beside the insert button.
March 22, 2024 – Since the main reason for the ban was to prevent car thefts that didn’t happen, we’re happy to see the change of heart.
March 21, 2024 – Ivanti has issued patches for two new vulnerabilities with a high CVSS score. Neither is known to have been explioted in the wild. Yet.
March 21, 2024 – Researchers scanned the internet for incorrectly configured Firebase instances and what they found was frightening.
March 20, 2024 – We found a tax scammer that set up a fake website where targets could apply for an Employer Identification Number.
March 19, 2024 – Social media influencers are attractive targets for identity thefs. Not just for their bank accounts but also to influence their followers
Following years of preparation and nearly two decades operating as a privately-held company, Reddit officially went public this week, searching for IPO success. The company had its initial public offering (IPO) on Thursday, March 21 and was subsequently listed on the New York Stock Exchange. As is tradition, Reddit’s IPO was marked by a company figure ringing the NYSE’s opening bell Thursday. It was Reddit’s affectionate mascot, Snoo, that got the honor of ringing the bell and signaling the start of Reddit’s time as RDDT on the NYSE. In the process, Reddit became the most recent social media site to go public, following Pinterest in 2019 and Snap in 2017.
Reddit hoped to sell its shares for $34 each, with the company making a total of 15.3 million shares available. If all shares sold at Reddit’s projected prices, it would generate $519.4 million for the company. Separately, private shareholders put up 6.7 million shares for purchase. Reddit’s projections and goals for the IPO would give it a market value at around $6.5 billion. But, after two whole days on the NYSE as a publicly-traded company, Reddit didn’t just meet its internal goals. It crushed them, finding success in Reddit’s IPO.
As reported by CBS News, Reddit stock prices grew 54% on Thursday after a full day of trading. The peak of Reddit’s share prices hit $52.29 in a result that greatly exceeded the company’s own goals. This meant that Reddit met its target of raising over $500 million for the company, and $748 million was generated through the IPO in total. However, some of that money went to private shareholders. Reddit’s successful IPO continued into Friday. The company traded at a stock price of $46 when the market closed on March 22.
Why Reddit found success through its IPO
Not every IPO turns out to be a success, so why did Reddit perform so well? It comes down to how the company strategically prepared for the IPO. Reddit made a couple of high-profile moves to increase revenue and make the company more valuable. Notably, it started charging for API access. More importantly, it struck an agreement with Google worth $60 million annually. Per the terms of the deal, Google can use Reddit content to help train artificial intelligence models.
In essence, Reddit’s success comes down to its user base. That’s why the company came up with the clever idea of letting users buy Reddit stock at its IPO pricing. With enough Reddit “karma,” users could have an early shot at owning a portion of the company. All of these things are just a few factors that led to a successful IPO for Reddit.
Meta is testing a lot of new features for Threads, the app that has a long way to go before it could replace Twitter. Swipe gestures to “like” posts and “Trending now” are just some of the features that Threads has started testing in the last week or so.
Over the weekend, Meta’s Mark Zuckerberg announced that Threads will start showing live sports scores. The feature is now being tested, which is why NBA live sports scores are the only ones showing up on Threads.
Apparently, this isn’t just a simple implementation of a feature that allows users to see sports scores in real-time, but a more complex one that involves multiple functions.
According to TechCrunch, users can now tap a team’s logo to be redirected to the conversation about that specific team or connect with other sports fans who follow the same team.
Threads didn’t just pick NBA randomly, as basketball seems to be one of the most popular topics on the app. The social network also claims that NBA Threads is currently one of the most active sports communities.
