Security and Entertainment Essentials Amid Rising Digital Risks

0

[ad_1]

VPN Evolution: Security and Entertainment Essentials Amid Rising Digital Risks

With the cost of cybercrime set to surpass $10 trillion in the coming months, is it time that VPNs become an everyday essential? According to Statista Market Insights, the total global cost of cybercrime will reach $13.8 trillion by 2028, crossing the $10 trillion milestone in the next year. 

Such baffling figures are likely to spark renewed debate about the safety of emerging technology like quantum computing and generative AI (GenAI), all of which could become a powerful tool for cybercriminals to steal personal information and obtain confidential data on an unprecedented scale. 

While the quality of tools available to malicious threat actors and shady organizations is strengthening, so is the quality of enhancements that can help combat cybercrime. In particular, we’re seeing traditional virtual private networks (VPNs) become considerably more powerful as digital threats continue to strengthen. 

As a result, VPNs are becoming more sophisticated in terms of their entertainment and security credentials. Let’s take a deeper look at how the technology is staking its claim as a key internet companion for users: 

Defining the Modern VPN

Virtual private networks connect to a user’s device and network through an encrypted tunnel. This helps encrypt the user’s online activity while hiding their IP address from view, instead replacing it with the IP address of the private server that the user connects to. 

Today, many VPNs use AES-256-bit encryption (PDF). Using internet protocols that place the data in packets to send in a logical order, VPN users can send and receive data in confidence. Should a problem occur, most VPNs are equipped with a kill switch that will instantly close all windows or apps to ensure protection and anonymity for users. 

Although we traditionally think of VPNs as desktop tools, they can be utilized for smartphones and a range of other devices that connect to the internet. VPNs are also widely used at an enterprise level, with many firms identifying its security features as essential practice in handling confidential information. 

In addition to their high-level security credentials, VPNs are also great for accessing greater quantities of entertainment, and many individuals utilize virtual private networks to geo-shift their location to access more content from streaming services like Netflix, Amazon Prime, and Disney+. 

Cybersecurity is set to become a major technological talking point in the coming years as geopolitical conflict and new technologies cause us to question just how secure our data is online. However, we’re already seeing VPN technology answer many of the questions of tomorrow as they become more sophisticated and powerful. 

Tapping into the Security of Tomorrow

The sustainability of VPNs is assured by the technology’s commitment to privacy and security. While the strongest encryption systems used by VPN services are based on AES-256, we’re set to see these processes become considerably more powerful in the coming years. 

As quantum computing continues to grow in its development, there can be legitimate concerns over the ability of hackers to illegally access data and private networks more successfully using sophisticated online tools. 

This issue has become more pertinent in the age of work-from-home (WFH) where more private information is shared away from the confines of company servers. 

With more employees working and sharing information remotely, the importance of the VPN is transforming. Virtual private networks will be required to add a layer of security for corporate data that’s immune to the strongest levels of scrutiny. 

For businesses, the average cost of a data breach was $4.45 billion, representing a 15% increase over the past three years. 

Privacy in the Age of Decentralization

One of the biggest solutions that we’re likely to see reach individuals and enterprises alike is the rise of the decentralized VPN (dVPN). These tools operate similarly to VPNs, but on a peer-to-peer network which is based on a distributed architecture rather than traditional centralized servers. 

Instead of routing internet traffic through a single server, dVPNs would leverage the computing power and bandwidth of many different devices, or nodes, in the network to create a distributed secure, and private connection. 

You may be familiar with blockchain as the underlying technology that powers cryptocurrencies like Bitcoin, so how can it be applied to virtual private networks?

Well, dVPNs use modern encryption protocols alongside distributed ledger technology to establish secure connections instead of having to rely on centralized servers. 

When a user connects to a dVPN, their traffic is encrypted and routed through multiple different nodes within a network, generating unprecedented levels of privacy to prevent threats from digital eavesdropping, surveillance, and censorship due to the multiple nodes that data travels through making it more difficult to track the origin and destination of data. 

Astonishingly, Market.us data suggests that the global blockchain market is set to grow at a CAGR of 68% to a total value of $12.89 trillion by 2032. It’s this rapid growth that’s likely to deliver the emergence of decentralized VPNs sooner rather than later. 

Next-Generation Entertainment

It’s worth looking at the wider capabilities of VPNs and how they can improve in a growing technological environment. In the future, we’re likely to see VPNs provide more comprehensive geo-fencing and geo-shifting capabilities that will access content and services that would otherwise be geo-locked for users. 

This will be a perk of VPNs as artificial intelligence (AI) infrastructures become more commonplace throughout the industry. 

One of the biggest draws for VPNs aside from their security credentials can be found in the digital freedom they afford users. Thanks to AI, VPN services will soon be capable of offering access to entertainment and streaming services intuitively, by displaying the content that can be accessed based on each region in which the user wants to access geo-locked content. 

This means that a VPN would become more than just a cost-effective tool for accessing entertainment on demand, particularly when paired with streaming tools like Amazon’s FireStick. There are free FireStick VPNs that enable you to access a far greater range of shows, movies, and other content from all over the world privately and cost-effectively. 

Unprecedented Anonymity

In an online landscape where targeted ads and tailored content serve as a regular reminder that our activity is far from private, VPNs and dVPNs are fast becoming great tools for maintaining a sense of comfort when browsing. 

By masking your IP address, VPNs pose no threat to exposing your true location, making it an essential tool for accessing international streaming services or bypassing internet censorship laws in your country. 

As the geopolitical landscape becomes increasingly uncertain, VPNs will play an invaluable role in keeping internet users in touch with one another while supplying them with essential content that could otherwise be blocked locally. 

With fears over online surveillance as strong as ever, virtual private networks are becoming more valuable than ever. As their sophistication grows, so too will their functionality in keeping us safe, comfortable, and entertained when online. 

  1. Netflix errors – How to fix them
  2. Everything You Need to Know About Amazon Fire TV Stick
  3. New Soap2day Domains Emerge Despite Legal Challenges
  4. Best legal free online streaming sites for movies & TV show
  5. Exploring the Differences Between Residential Proxies and VPNs
  6. Mullvad VPN Introduces Mullvad Leta: A Privacy-Focused Search Engine



[ad_2]

Source link

These Are All The Streaming Services Compatible With Google TV

0

[ad_1]

With the new Chromecast announced in September 2020, Google also re-debuted Google TV, which is basically an interface that lives on top of Android TV. It’s almost like a new home screen for your TV.

Since releasing the original Chromecast with Google TV, Google has also launched a 1080p version called Chromecast with Google TV (HD). It’s priced at $29, while the 4K model is priced at $49.

Google TV offers a more streamlined interface, with the ability to see all shows and movies from all apps installed on your home screen. Instead of just a row of apps. Making it easier to find something to watch.

What streaming services are compatible with Google TV

As of today, the following streaming services are compatible with Google TV. However, we expect to have more added in the future.

  • ABC
  • aha
  • Amazon Prime Video
  • AMC
  • Apple TV+
  • A&E
  • BET+
  • Brown Sugar
  • Comedy Central
  • Crackle
  • Crunchyroll/Funimation
  • Discovery+
  • Disney+
  • Epix Now
  • FlixLatino
  • Fox Now
  • Freevee
  • Fubo
  • Globoplay
  • Google Play Movies (now Google TV)
  • HayStack News
  • HBO Go
  • History
  • Hulu
  • iQIYI
  • Kocowa
  • Lifetime
  • Max
  • MGM+
  • MTV
  • NBC
  • Pantaya
  • Paramount+ 
  • Peacock
  • Philo
  • Plex
  • Pluto TV
  • Red Bull TV
  • Showtime
  • Sling TV
  • Starz
  • TBS
  • The CW
  • TNT
  • Tubi TV
  • Viki/Rakuten
  • VH1
  • YouTube
  • YouTube TV
  • Zee5

What Live TV services work with Google TV’s “Live” tab?

Google TV has a really useful “Live” tab on its home screen, that will show you exactly what it is on TV right now. At launch, this was only compatible with YouTube TV. Since then, the compatibility list has expanded. These are the services that are currently compatible with the Live tab.

Can I use streaming services that are now compatible?

If you have a streaming service that you subscribe to that is not compatible with Google TV right now, you can still use them. They just won’t show up with their content in the content section. You can still launch them like normal though.

Just head over to the Apps tab, and you’ll see all of your installed apps on Google TV. The “For You” Tab also has many of these apps, as well as top picks. So you can find something to watch easily. These Top Picks will change over time, based on what you watch and don’t watch. So that Google can recommend shows and movies that you’ll actually like.

Is YouTube TV compatible?

You might have noticed that Sling TV is compatible, but YouTube TV is not located in that list. That is because YouTube TV is in the “Live” section of Google TV. So you’ll be able to scroll through YouTube TV listings like you would if you were using a cable box.

Thats’ going to make it super simple to find something that you can watch, live or DVR’d on YouTube TV.

YouTube TV does also work with most of the TV Everywhere app, which will also show content in your library.

This is going to make it a much nicer way to interact with your TV and find something to watch while you’re eating dinner and such. Which is what Google TV is all about. Making it easier to find something to watch, in a cleaner interface. With all of these streaming services it can sometimes be tough to find something good to watch.

[ad_2]

Source link

Apple is planning to release a 20-inch foldable MacBook in 2027

0

[ad_1]

Apple has reportedly been working on a foldable device for some time, but the company hasn’t given any official news. Since the original Samsung Galaxy Fold launched back in February 2019, Apple has been absent in what seems to be a popular industry of foldable devices. While most were predicting the tech giant to prioritize foldable phones, much like Samsung’s Galaxy Z Fold and Z Flip, an Apple analyst suggests a 20-inch foldable MacBook might be in the works too.

Apple wants to launch a foldable MacBook in 2027

While the specifics of the apparent upcoming device are unknown, Apple analyst Ming-Chi Kuo, one of the best-known analysts, reported that the foldable MacBook will have a 20.3-inch screen. Kuo has previously leaked major things like the Galaxy Note 9 having a fingerprint sensor. His most recent leak includes information about the iPhone 16 and iPhone 17 cameras.

It’s unknown when foldable iPhones or iPads will start getting mass-produced, likely due to the display issues. However, the 20.3-inch foldable MacBook is “Apple’s only foldable product with a clear development schedule.” The company reportedly plans to have the 20.3-inch foldable MacBook to “enter mass production in 2027.”

This date would align with a previous report from DigiTimes stating that Apple is planning for its first foldable device to be “much larger” than an iPhone. There were also rumors of Apple’s first foldable device releasing in 2027. Since Kuo’s post and this 2027 tip align, the foldable MacBook might see the light of day before a foldable iPhone or iPad.

MacBooks might be getting bigger

Apple MacBook Air 2 up hero 240304

This tip by Ming-Chi Kuo does reveal Apple’s plan of eventually releasing a 20-inch foldable MacBook. However, it also suggests that the company wants to introduce a larger MacBook than currently available.

The largest Apple laptop users can currently buy is the 16-inch MacBook Pro. While Apple previously offered a 17-inch MacBook Pro, it was discontinued in 2012, likely due to its poor sales. Since the foldable MacBook that Kuo reported on will have a screen measuring 20.3 inches diagonally, it’s unsure if it’ll see the same fate as the 17-inch discontinued MacBook Pro. 

The MacBook might be designed so that half of the 20-inch foldable MacBook screen gets used as a keyboard. This design would make the foldable MacBook work as a 20-inch iPad when not folded. Alternatively, the MacBook might come with an attachable keyboard to ensure there’s something to differentiate it from an iPad.



[ad_2]

Source link

WhatsApp starts testing new sticker editor feature on Android

0

[ad_1]

WhatsApp is testing new features all the time, even before they are spotted in the beta version of the app. This time around the chat app is preparing to launch a new feature that will allow users to create their own stickers.

Spotted by the fine folks at WaBetaInfo, the new sticker editor feature is now available in the WhatsApp beta version of the app on Android. If you’re an iPhone user, then this isn’t really news for you since the sticker editor has been available on iOS for quite some time.

The customization options that come with the new sticker editor make it possible to convert a sticker from an image, as well as the ability to edit an existing sticker via the “Edit sticker” option.

When an image is selected to be converted into a sticker, the app will open the drawing editor and highlight the subject. Additional stickers are available at the bottom of the screen if you’re not content with what WhatsApp automatically chose the first time you selected the image.

Currently, the sticker editor is only available to a limited number of users on Android, but it’s safe to assume that a wider roll-out will happen in the coming weeks. It’s hard to tell when it will make it to the stable version of WhatsApp, but we’re probably talking about a few months.

[ad_2]

Source link

Here is the List of Hacker Groups

0

[ad_1]

The hacker group known as Server Killers has announced their participation in a coordinated cyber attack on Moldova.

This group has joined forces with several other notorious hacker collectives, signaling a worrying escalation in cyber threats against the Eastern European nation.

The Coalition of Cyber Threats

The Server Killers team has publicly declared its alliance with several hacker groups, each with a history of cyber disruptions and attacks.

Document

Integrate ANY.RUN in your company for Effective Malware Analysis

Malware analysis can be fast and simple. Just let us show you the way to:

  • Interact with malware safely
  • Set up virtual machine in Linux and all Windows OS versions
  • Work in a team
  • Get detailed reports with maximum data
  • If you want to test all these features now with completely free access to the sandbox: ..

The list of these groups includes:

  • NoName057(16)
  • Digital Revolt
  • 2CC
  • Russian CyberArmy
  • Phoenix
  • Coup Team
  • Lulzsec Muslims
  • Cyber Dragon

This coalition brings together a diverse array of cyber capabilities and suggests a high level of coordination among groups typically known to operate independently.

A new tweet from Daily Dark Web reports that a group called The Server Killers has formed an alliance and is planning to launch cyber attacks on Moldova.

The image released by the Server Killers features a central figure cloaked and masked, symbolizing these groups’ anonymity and secretive nature.

The figure is tearing apart a coat of arms, which appears to represent Moldova, indicating the target of their joint operation.

Below the image, a message confirms the alliance and expresses confidence in their success, stating, “We believe in our victory!!!” This bold declaration is accompanied by a series of logos representing each allied hacker group, further emphasizing the united front presented by these cyber adversaries.

Implications for Cybersecurity

The formation of this alliance poses a significant threat to Moldova and the international community, as it demonstrates the potential for collaboration among groups that can amplify the scale and impact of cyber attacks.

These groups’ collective expertise and resources could lead to sophisticated and potentially devastating cyber operations.

The announcement is a stark reminder of the evolving landscape of cyber warfare, in which national boundaries are blurred, and the battleground is the global network infrastructure.

Governments, corporations, and individuals must remain vigilant and invest in robust cybersecurity measures to protect against such coordinated threats.

As the situation develops, cybersecurity experts and law enforcement agencies must closely monitor these groups’ activities.

Sharing information and strengthening international cooperation will be vital to mitigating the risks posed by this and similar alliances.

The alliance of these hacker groups under the Server Killers banner is a testament to the evolving challenges that nations and organizations face in protecting their digital infrastructures.

You can block malware, including Trojans, ransomware, spyware, rootkits, worms, and zero-day exploits, with Perimeter81 malware protection. All are incredibly harmful, can wreak havoc, and damage your network.

Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.



[ad_2]

Source link

Predator spyware vendor banned in US

0

[ad_1]

The US Treasury Department has sanctioned Predator spyware vendor Intellexa Consortium, and banned the company from doing business in the US.

Predator can turn infected smartphones into surveillance devices. Intellexa is based in Greece but the Treasury Department imposed the sanctions because of the use of the spyware against Americans, including US government officials, journalists, and policy experts.

Under Secretary of the Treasury for Terrorism and Financial Intelligence Brian E. Nelson said:

“Today’s actions represent a tangible step forward in discouraging the misuse of commercial surveillance tools, which increasingly present a security risk to the United States and our citizens.”

Since its founding in 2019, the Intellexa Consortium has marketed the Predator label as a suite of tools created by a variety of offensive cybercompanies that enable targeted and mass surveillance campaigns.

Predator is capable of infiltrating a range of electronic devices without any user interaction (known as ‘zero-click’). Once installed, Predator deploys its extensive data-stealing and surveillance capabilities, giving the attacker access to a variety of applications and personal information on the compromised device. The spyware is capable of turning on the user’s microphone and camera, downloading their files without their knowledge, tracking their location, and more.

Under the sanctions, Americans and people who do business with the US are forbidden from transacting with Intellexa, its founder and architect Tal Dilian, employee Sara Hamou and four of the companies affiliated with Intellexa.

Sanctions of this magnitude leveraged against commercial spyware vendors for enabling misuse of their tools are unprecedented, but the US has expressed concerns about commercial spyware vendors before.

“A growing number of foreign governments around the world, moreover, have deployed this technology to facilitate repression and enable human rights abuses, including to intimidate political opponents and curb dissent, limit freedom of expression, and monitor and target activists and journalists.”

In July 2023, the US Commerce Department’s Bureau of Industry and Security (BIS) added Intellexa and Cytrox AD to the Entity List for trafficking in cyber exploits used to gain access to information systems. Cytrox AD is a North Macedonia-based company within the Intellexa Consortium and acts as a developer of the consortium’s Predator spyware.

The Entity List is a trade control list created and maintained by the US government. It identifies foreign individuals, organizations, companies, and government entities that are subject to specific export controls and restrictions due to their involvement in activities that threaten US national security or foreign policy interests.

Earlier this month, a California federal judge ordered spyware maker NSO Group to hand over the code for Pegasus and other spyware products used to spy on WhatsApp users.

While you’ll see Predator and Pegasus usually deployed in small-scale and targeted attacks, putting a stop to the development and deployment of spyware by these commercial entities is good news for everyone.

How to remove spyware

Because spyware apps install under a different name and hide themselves from the user, it can be hard to find and remove them. That is where Malwarebytes for Android can help you.

  1. Open Malwarebytes for Android and navigate to the dashboard
  2. Tap Scan now
  3. It may take a few minutes to scan your device, but it will tell you if it finds spyware or any other nasties.
  4. You can then uninstall the app.

We don’t just report on phone security—we provide it

Cybersecurity risks should never spread beyond a headline. Keep threats off your mobile devices by downloading Malwarebytes for iOS, and Malwarebytes for Android today.

[ad_2]

Source link

Buy the Anker 735 USB-C Charger for only $39

0

[ad_1]

If you’re in the market for a new USB-C wall charger, then you’ll want to look no further than the Anker 735. This is a three-port USB-C charger with two USB-C ports and a USB-A port for only $39.99 (regularly $55.99). With many smartphones coming without a wall charger these days, this is a great purchase.

Anker is well-known for its chargers, and this is another great one. I actually have one myself and use it when I travel. Mostly because it is pretty tiny, it has a foldable plug and can charge multiple phones at the same time, which is super useful when traveling.

As if that wasn’t a big enough reason to buy this charger, it is also a GaN charger – or Gallium Nitride. What this means is that you’re going to get a much smaller charger that can charge faster. Anker claims that this is about 53% smaller than most other 65W chargers. This means that when you plug it into a surge protector, it won’t cover other outlets.

It’s a 65W charger, but it can actually push out 65W from a single outlet. However, the more you plug in, the slower it’ll get. If you use all three outlets, the USB-C1 will charge at 40W max, USB-C2 will charge at 12W max, and the USB-A will charge at 12W max – that does only equal 64W, however, as there are some losses expected.

If you do a lot of traveling or need a new charger for your office, bedroom, or anywhere else, this is a great pickup.

Buy at Amazon

[ad_2]

Source link

Apple could lose the world’s most valuable company title

0

[ad_1]

Businesses in the rapidly evolving technology sector are always coming up with new ideas. Whether if it is pushing the envelope of what’s feasible. Apple has long been regarded as the “World’s Most Valuable Company,” thanks to its inventive goods and devoted clientele. But with generative AI becoming more and more popular, there are rumors that Apple’s supremacy may be in danger. Meanwhile, Analysts have expressed worries about how well Apple’s generative AI services are doing. In addition, how this would affect the company’s status in the market.

The rise of generative AI

Artificial intelligence’s generative branch, which emphasizes invention and creativity, is gaining traction across a number of sectors. The generative AI has demonstrated enormous promise, capable of producing lifelike pictures and even music. Businesses leading the way in the development of this technology include OpenAI and Google. Both the tech giants have demonstrated its potential via a range of projects and activities.

How generative AI could impact Apple

There are worries that Apple’s stranglehold in the market may be threatened by the growing powers of generative artificial intelligence. Innovation and design have always been priorities for the computer behemoth, since they have helped it climb the corporate ladder. Still, Apple could struggle to hold onto its competitive advantage if generative AI keeps developing at its present rate.

Concerns over Apple’s generative AI services have lately been expressed by analysts, who have noted a drop in accuracy and performance. There can be serious repercussions for the business if these services don’t live up to expectations. It may damage Apple’s financial results and, eventually, its standing as the “World’s Most Valuable Company,” in addition to eroding consumer confidence and loyalty.

Will Apple’s position as the ‘World’s Most Valuable Company’ be threatened?

Everyone is wondering if Apple would ever regain its esteemed reputation in the event that Generative AI fails. Even while it is challenging to make certain predictions about the future, one thing is certain: the state of technology is always changing. Apple may lose its number one position to rivals that swiftly implement this cutting-edge technology if it is unable to take use of generative AI or if it lags behind in terms of innovation.

Now, the key question is whether Apple can turn things around and address the problems with its generative AI services. Apple cannot afford to lag behind its rivals who are always pushing the limits of innovation and technology. To guarantee that its generative AI services meet and beyond client expectations, the business will need to make investments in R&D as well as talent acquisition.

The risks are bigger than ever for businesses like Apple as customers grow increasingly dependent on AI-driven products. The company’s future success will depend on how well it can innovate and adapt to this quickly changing environment. Apple may be able to hang on to its title of “World’s Most Valuable Company” if it can step up to the plate and provide generative AI capabilities that genuinely wow clients.



[ad_2]

Source link

Facebook uses AI to recommend videos: Are Reels about to get even more addictive?

0

[ad_1]

Artificial intelligence is grabbing headlines as big tech players battle for supremacy in the field. Google boasts its Gemini, while Samsung flaunts its Galaxy AI, recently debuted with the latest Galaxy S24. Apple is also in the mix, developing its own AI features. And let’s not forget Meta, which is keeping pace with the competition.

According to Engadget, Meta is shaking things up by infusing AI into Facebook’s video recommendations. Tom Alison, Head of Facebook, spilled the beans that the new video recommendation algorithm, powered by AI, is already in action on Reels – Meta’s answer to TikTok.

The plan is to roll this new AI-powered recommendation engine out across all sections of Facebook featuring videos — from the main Facebook feed to Groups. This is part of a broader “technology roadmap” set to unfold through 2026, revealed Alison during a tech conference at Morgan Stanley in San Francisco.

Making a splash in the TikTok arena has been a key focus for Meta, especially since the Chinese app, famed for its vertical video clips and a robust recommendation engine that seemingly knows what hooks users, skyrocketed in popularity in the US over the past few years. When Meta put the new AI-powered recommendation engine to the test with Reels, watch time shot up by approximately 8 to 10 percent, as shared by Alison.

Alison highlighted that the results showed them that this new model architecture is learning from the data much more efficiently than the previous generation and the company is on the “right track.”

Until now, Facebook had separate video recommendation engines for Reels, Groups, and the main Facebook feed. However, with the positive results observed in Reels, the company is now looking to apply the same AI-powered engine across all these products. Alison stated:

Meta’s push to incorporate AI into all its products gained momentum with the explosion of AI technology following the launch of OpenAI’s ChatGPT at the end of 2022. In a video earlier this year, Mark Zuckerberg disclosed that the company is shelling out billions to snatch up hundreds of thousands of high-priced NVIDIA GPUs, crucial for training and powering AI models.

[ad_2]

Source link

Tycoon and Storm-1575 Linked to Phishing Attacks on US Schools

0

[ad_1]

Tycoon and Storm-1575 groups are identified as key players, with Tycoon offering MFA bypass as a service and Storm-1575 targeting Microsoft 365 credentials.

Tycoon and Storm-1575 Linked to Phishing Attacks on US Schools

Public schools across the United States are facing a surge in sophisticated phishing campaigns, according to a new report by PIXM, a cybersecurity firm specializing in artificial intelligence solutions.

Threat actors launch targeted spear phishing attacks using stealthy attack patterns to target officials at large US school districts, bypassing MFA protections.

The report highlights a worrying trend: attackers are increasingly employing tactics to bypass Multi-Factor Authentication (MFA), a security measure previously thought to offer robust protection.

Since December 2023, a surge in MFA-based phishing campaigns targeting US teachers, staff, and administrators has been observed, using dadsec and Phishing-as-a-Service (PhaaS) platforms to compromise administrator email accounts and deliver ransomware, researchers noted.

Tycoon and Storm-1575

PIXM discovered phishing activity in November 2023 and linked it to Tycoon and Storm-1575 threat groups. These groups were singled out because of their common attack pattern. Both actors use social engineering techniques, spoofing emails to appear legitimate and using AiTM (Adversary-in-the-Middle) phishing to bypass MFA tokens and session cookies.

They also create customized login experiences and use dadsec and phisingkit PhaaS services to point at legitimate sites. Their infrastructure, including C2 servers, domain generation algorithms, legitimate hosting services, and SSL certificates, allows them to control large numbers of phishing websites and avoid detection.

For your information, The Tycoon Group’s PaaS, available on Telegram for just $120, boasts key features like bypassing Microsoft’s two-factor authentication. On the other hand, Microsoft identifies Storm-1575 as a threat actor engaging in phishing campaigns through the Dadsec platform. They employ numerous Domain Generated Algorithm domains to host credential harvesting pages, targeting global organizations to extract Microsoft 365 credentials.

Tycoon and Storm-1575 Linked to Phishing Attacks on US Schools
Tycoon group on Telegram (Screenshot: PIXM)

In the attacks, as detailed by PIXM in a blog post, targeted officials received phishing emails prompting them to update passwords. This led to encountering a Cloudflare Captcha and a spoofed Microsoft password page. If unthwarted, attackers would forward passwords to legitimate login pages, requesting two-factor authentication codes, and bypassing MFA protections.

Common targets include the Chief of Human Capital and multiple finance and payroll administrator accounts. Some attacks attempted to alter Windows registry keys, potentially infecting machines with malicious scripts. The attacks concealed their tracks using stealth tactics like hiding behind Cloudflare infrastructure and spinning up new domains.

The use of CAPTCHAs in phishing attacks can delay the delivery of the payload and provide a sense of legitimacy to end users. However, there is also a potential for malicious trojan activity, such as modifying Windows registry keys for the VBS file format and injecting a malicious file’script.vbs’. These attacks can be used for malware installation, ransomware, and data exfiltration. 

Tycoon and Storm-1575 Linked to Phishing Attacks on US Schools
Attack flow – (Screenshot: PIXM)

Schools, Most Targeted Industry

While schools are the most targeted industry by ransomware gangs, student data has also been a prominent prey of cybercrime, but the extensiveness of data loss noticed recently is unprecedented. It is estimated that over 900 schools were targeted in MOVEit-linked cyber attacks.

A data leak involving Raptor Technologies in January 202, reported by cybersecurity researcher Jeremiah Fowler, exposed around 4,024,001 sensitive records belonging to students, parents, and staff, raising concerns about student privacy and school safety.

Just one month later, in February 2024, Fowler discovered a non-password-protected database storing 210,020 records or 153.76 GB of data, containing sensitive information like full names, addresses, phone numbers, and tax records of students and parents, associated with the Online Voucher Application.

To protect against such phishing attacks, organizations should identify high-priority staff with sensitive access or regular communication patterns, invest in tailored awareness efforts, arm users with caution against links and websites prompting MFA tokens and CAPTCHAs, and implement proactive AI-driven protections at the browser and email layers.

  1. Data Leak Exposes 572 GB of Student, and Faculty Info
  2. 100s of schools at risk after Magecart attack on Wisepay
  3. Iranian APT group hits schools, universities in phishing attacks
  4. NIST Releases Cybersecurity Framework 2.0: Guide for All Firms
  5. Conti ransomware gang demanded $40m from US school district



[ad_2]

Source link