We got the first Android 15 Developer Preview last week. Yesterday, we reported that the next software version could pack a solution for annoying repetitive notifications. Now, a new feature on the forthcoming OS has been unearthed by Mishaal Rahman (via Android Authority). Android 15 could come with an additional measure to protect sensitive information from scammers.
Android 15 to protect your login codes from scammers
Almost all platforms and online accounts offer a two-factor authentication code (2FA). It adds an extra layer of security preventing user’s accounts from getting hacked. This method sends a one-time password (OTP) code to the user via text or email. It is easier to use but also less secure. Hence the codes can be intercepted by a malicious third party.
Rahman was digging through the Android 14 QPR3 Beta 1 update and found a new security feature that could possibly protect the login codes. For this, Google seems to be adding a new permission called RECIEVE_SENSITIVE_NOTIFICATIONS. It has a protection level of role|signature. This indicates that it will be restricted only to applications with the requisite role or to applications that the OEM signs. Rahman claims that this permission will work with a feature that will redact sensitive notifications from untrusted apps that implement NotificationsListenerService. This API allows apps to read or take actions on all notifications. It can only be enabled manually in the device’s settings.
Both the new permission and API are said to be powerful. Hence Google won’t let third-party apps access it. It remains to be seen what apps are considered untrusted and what notifications are deemed sensitive as per Google.
There’s also another feature to bolster security against scamsters
Rahman also unearthed a new feature called OTP_REDACTION in the source code of Android 14. This will hide OTP notifications on the lock screen. Meanwhile, the RECEIVE_SENSITIVE_PERMISSION will stop untrusted apps from reading notifications that contain 2FA codes.
With both these features Google could significantly improve the security of Android devices. A lot of apps including banking, social media, and more require sensitive data like OTP messages for logging in. Getting scammed is a rampant practice, especially with OTP messages. Things often get messy quickly after one wrong move.
Discover the Complete Story Behind the Collapse of the LockBit Ransomware Gang – From Infrastructure Seizures and Freezing Cryptocurrency Accounts to European Arrests, Charges, Indictments, and the Release of a Recovery Tool by Authorities.
In a groundbreaking operation, the United Kingdom’s National Crime Agency (NCA) has dismantled the notorious LockBit ransomware, one of the world’s most prolific ransomware groups – The takedown was part of “Operation Cronos.”
On 19 February 2024, Hackread.com’s in-depth report revealed that all dark web domains of LockBit ransomware had been seized. Now, according to the NCA’s press release, the latest development in this ongoing saga sees the agency taking control of LockBit’s primary administration environment, effectively cutting off the group’s ability to carry out further attacks.
Additionally, the agency has seized control of LockBit’s public-facing leak site on the dark web, repurposing it to expose the group’s tactics and operations.
LockBit Source Code and Backend
Crucially, the NCA has obtained the source code of the LockBit platform and a wealth of intelligence on the group’s activities and affiliates. This trove of information not only sheds light on LockBit’s modus operandi but also provides insight into the individuals and organizations complicit in their criminal enterprises.
One noteworthy disclosure from the NCA’s investigation is the discovery that some of the data on LockBit’s systems belonged to victims who had already paid ransom demands. This highlights the harsh reality that even compliance with ransom demands does not guarantee the safe return of stolen data—a fact often glossed over by cybercriminals.
LockBit ransomware’s dark web domains are now being used to expose the gang’s modus operandi (Screenshot credit: Hackread.com)
Arrests and Indictments
The crackdown on LockBit extends beyond digital infiltration, with law enforcement agencies in multiple countries executing arrests and freezing cryptocurrency accounts linked to the group.
In a coordinated effort led by Europol, two LockBit actors from Poland and Ukraine have been apprehended, while the US Department of Justice has brought criminal charges against two Russian nationals Artur Sungatov and Ivan Kondratyev, alias Bassterlord, for deploying LockBit against multiple victims across the United States.
These victims include businesses spanning various industries nationwide, such as manufacturing, alongside global victims in sectors like semiconductors.
It is worth noting that in June 2023, Ruslan Magomedovich Astamirov (20), a Russian national, was also arrested and charged with conspiring to commit LockBit ransomware attacks against U.S. and foreign businesses. To date, the LockBit ransomware gang targeted over 2,000 victims and received more than $120 million in ransom payments.
A platform for LockBit victims
It is also crucial to mention that the FBI has established an online platform for victims of LockBit ransomware. This platform caters to both U.S. victims and non-U.S. victims interested in engaging with the U.S. LockBit prosecutions. Whether it’s to submit a victim-impact statement or to claim restitution, individuals can access the platform here: Lockbitvictims.ic3.gov.
This is what the LockBit ransomware’s dark web domains look like (Screenshot credit: Hackread.com)
Japanese LockBit Recovery Tool
The Japanese Police, with support from Europol, has developed a specialized recovery tool aimed at restoring files encrypted by the LockBit 3.0 Black Ransomware. To utilize this recovery solution effectively, users are instructed to execute the provided binary file on their affected machines, initiating an initial assessment process.
The tool will be available on the No More Ransomware platform soon. Alternatively, if you are a victim and based in the United Kingdom send an email to the NCA at [email protected]. Those in the United States can visit Lockbitvictims.ic3.gov.
The NCA’s Director General, Graeme Biggar, hailed the operation as a testament to the agency’s relentless pursuit of cybercriminals, emphasizing that no criminal enterprise is beyond its reach. Home Secretary James Cleverly echoed this sentiment, commending the NCA for disrupting LockBit’s operations and signalling the UK’s unwavering commitment to combatting cyber threats.
US Attorney General Merrick B. Garland emphasized the collaborative nature of the operation, highlighting the partnership between US and UK law enforcement agencies in dismantling LockBit’s criminal infrastructure. FBI Director Christopher A. Wray echoed these sentiments, underscoring the bureau’s dedication to defending against cyber threats and holding perpetrators accountable.
Reaction from Experts
For insights into the latest development, we reached out to Ryan McConechy, CTO of Barrier Networks, who expressed appreciation for law enforcement’s role in combating cybercrime, particularly the escalating threat of ransomware.
“These actions demonstrate the efforts law enforcement is placing on fighting ransomware, but the seizure of LockBit’s servers is undoubtedly one of the biggest accomplishments so far.”
Ryan warned that seizing infrastructure and arrests does not mean the gang can not return. However, strengthening your cybersecurity measures can defend businesses against such threats.
“Organisations must act before it is too late,” he emphasised. “This involves training on threats, implementing MFA to secure employee credentials, keeping systems up to date with patches, and getting a well-oiled and comprehensive incident response plan in place, so everyone can step straight into effective action, even when attacks do occur,” Ryan advised.
As the dust settles on this major takedown, the NCA and its international partners stand ready to assist LockBit victims in recovering encrypted data and pursuing justice. With LockBit now effectively locked out, the NCA remains alert, knowing that the group may attempt to regroup and rebuild its criminal empire.
However, with the combined efforts of law enforcement agencies worldwide, the message to cybercriminals is clear: there is no safe haven for those who seek to profit from extortion and cybercrime.
Heads up, Microsoft users! It’s now time to update your devices as Microsoft rolled out its monthly Patch Tuesday updates for February 2024. This time, the tech giant addressed over 70 different vulnerabilities, including two zero-day flaws.
Microsoft February Patch Tuesday Updates Released
The most important security fixes in the February 2024 Patch Tuesday update bundle address two Microsoft zero-day vulnerabilities. The tech giant described both vulnerabilities as security feature bypass. Specifically, these include the following.
CVE-2024-21412 (CVSS 8.1): An important severity vulnerability affecting the Internet Shortcut Files. An adversary could exploit the flaw by tricking the target user into opening a maliciously crafted file designed to bypass displayed security checks. Microsoft confirmed detecting exploitation attempts for this flaw prior public disclosure.
CVE-2024-21351 (CVSS 7.6): A moderate severity vulnerability affecting Windows SmartScreen, compromising the Mark of the Web feature. An adversary could exploit the flaw by tricking the target user into opening a maliciously crafted file that could bypass Windows SmartScreen. Once done, the attacker could gain code execution on the target system. The tech giant confirmed detecting active exploitation of this vulnerability as well.
Besides these noteworthy security fixes, Microsoft released patches for three critical severity vulnerabilities. These include CVE-2024-21380 (CVSS 8.0) – an information disclosure flaw affecting the Microsoft Dynamics Business Central/NAV, CVE-2024-21357 (CVSS 7.5) – a remote code execution vulnerability in the Windows Pragmatic General Multicast (PGM), and CVE-2024-20684 (CVSS 6.5) – a Windows Hyper-V denial of service vulnerability.
In addition, the February Patch Tuesday update bundle addressed 66 other vulnerabilities, including 59 important severity issues and two moderate severity flaws. Moreover, the update bundle also includes numerous security fixes from third parties, facilitating users to patch their devices accordingly.
While these updates would automatically reach all eligible devices, users should still check for any updates manually to receive all bug fixes in time.
The gaming industry is experiencing unprecedented growth, propelled by technological advancements and shifting consumer preferences. As the paradigm shifts, the significance of data privacy and security in B2B gaming data transactions cannot be overstated. This article will delve into the intricacies of navigating data privacy and security in B2B gaming data, highlighting key challenges, regulatory requirements, and best practices.
Data privacy and security are paramount in the gaming industry, where companies handle sensitive information such as player profiles, in-game transactions, and gameplay analytics. With the surge in B2B data transactions, ensuring the confidentiality, integrity, and availability of data has become a primary concern for gaming companies. By addressing these challenges, companies can establish trust with their partners and players, ensuring compliance with regulations and safeguarding their reputation.
The ever-changing regulatory environment adds complexity to data privacy and security in B2B gaming data transactions. Regulations like the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) impose stringent requirements on data collection, processing, and protection. Non-compliance can lead to severe penalties and reputational harm, underscoring the importance for gaming companies to stay abreast of regulations and maintain compliance.
Data Privacy Regulations in Gaming
Data privacy regulations have significantly impacted how gaming companies handle B2B data transactions. These regulations aim to protect individuals’ privacy rights and ensure responsible data handling. For gaming companies, this entails implementing robust data protection measures, securing explicit consent for data processing, and empowering individuals with control over their data.
Compliance with data privacy regulations is not only a legal obligation but also vital for fostering trust and credibility with players and partners. By demonstrating a commitment to data privacy and security, gaming companies can distinguish themselves in a competitive market and cultivate long-term relationships founded on trust and transparency.
Implementing data privacy regulations can be intricate and resource-intensive for gaming companies, necessitating a comprehensive understanding of regulatory requirements, meticulous planning, and ongoing compliance efforts. However, investment in data privacy and security is crucial for mitigating risks, protecting sensitive information, and upholding a positive reputation in the gaming industry.
Ensuring Data Security in B2B Gaming Data Transactions
Data security is integral to data privacy in B2B gaming data transactions, encompassing measures to protect data from unauthorized access, disclosure, alteration, or destruction. With the escalating sophistication of cyber threats, gaming companies must deploy robust data security measures to safeguard their B2B data transactions.
Encryption serves as a fundamental tool for ensuring data security in B2B gaming data transactions, converting data into a coded format decipherable only by authorized parties. By encrypting sensitive data in transit and at rest, gaming companies can mitigate the risk of unauthorized access and data breaches.
Access controls are another vital component of data security in B2B gaming data transactions, involving policies and technologies to restrict data access based on the principle of least privilege. By granting access solely to authorized individuals or systems, gaming companies can minimize the risk of insider threats and unauthorized data access.
Data masking is a technique employed to anonymize sensitive data in B2B gaming data transactions, replacing identifiable information with fictional yet realistic data. By masking sensitive data such as personal identifiers or financial information, gaming companies can uphold data privacy while facilitating legitimate data processing and analysis.
Implementing data security measures necessitates a holistic approach encompassing the entire data lifecycle, from collection to disposal. It involves identifying and assessing potential security risks, implementing suitable security controls, and regularly monitoring and updating security measures to counter evolving threats. By prioritizing data security in B2B gaming data transactions, companies can safeguard their data assets and maintain trust with their partners and players.
The ASUS ZenFone 11 Ultra just got certified prior to its launch. The phone got certified in Europe, it paid a visit to the EEC. The phone was certified with the AI2401 model number.
The ASUS ZenFone 11 Ultra gets certified prior to launch
That listing did not really reveal anything about the phone, though, other than it will launch in Europe. We do have plenty of information about the ASUS ZenFone 11 Ultra thus far, though. Not only did its design surface more than once, but its specs did too.
A Geekbench listing confirmed that the ASUS ZenFone 11 Ultra will be fueled by the Snapdragon 8 Gen 3 processor. It also confirmed that the 16GB RAM model will become a reality.
Unlike the ASUS ZenFone 9 and the ZenFone 10, the ASUS ZenFone 11 Ultra will be large. The other two phones are rather small, both of them have 5.9-inch displays. Well, they’re not small, but compact.
The phone will launch in Eternal Black, Desert Sienna, Misty Gray, Skyline Blue, and Verdure Green colors. You can see all those color options in the image provided below.
The ZenFone 11 Ultra specs also surfaced. Other than the SoC and RAM that we’ve already mentioned, the phone is expected to include a 6.78-inch fullHD+ 120Hz LTPO AMOLED display (up to 144Hz for gaming).
A 5,500mAh battery is expected, along with 65W wired charging
A 5,500mAh battery was also mentioned, as was 65W wired, and 15W wireless charging. The phone will also include a set of stereo speakers and an audio jack as well.
A 50-megapixel main camera will sit on the back, while a 13-megapixel ultrawide camera (120-degree FoV) will also be located there. ASUS is planning to include a 32-megapixel telephoto camera (3x optical zoom) as the third option.
Right now, we only know about two versions of Google Gemini. There’s the core version and there’s Gemini Advanced. However, it appears that Google is working on two more versions. According to a report, Google is going to launch Enterprise and Business Gemini plans.
This is something that was foreseen. Most AI products have some sort of enterprise version for people looking to run their business using AI. These offer the most robust plans that benefit teams rather than just one person. Going forward, a large chunk of businesses that are established will use AI in some way shape, or form, so we expect these Enterprise plans to really become popular.
Google will bring Business and Enterprise Gemini plans
Right now, information on these plans is a bit scarce. The information comes from a testing catalog and a post from Dylan Roussel on X. As for the post, Roussel stated, “Ability to edit and run Python code snippets directly from Gemini is really neat! The new plans are also awesome. What a crazy month for Gemini!”
As for the testing change logs, there are two of them, and they are both yet to be released. One of the changelogs is dated February 20th (Tuesday) and the other one is dated February 21st. So, Google did not intend for this information to be out just yet.
The one dated Wednesday has information about the Enterprise and Business plans. If you sign up for one of these plans, you’ll get access to Gemini Ultra 1.0 and administrators can manage settings via the Google Workspace admin console. These plans will give you access to a bunch of features, but we don’t know about all of them just yet. Since this has yet to be announced, we’re sure that Google is going to either post a video or post a lengthy blog post about them when the day comes.
These plans will be available in over 150 countries and territories. Also, conversations that people have will not be used to train the model. This is something that’s very important, as many people are going to be using this for their business. So, conversations recorded in Gemini should definitely not be used to train the model.
The other changelog is great for people who are into coding
On the other changelog, Google announced that, for Gemini Advance customers, the ability to run and edit Python code is coming. The changelog states that “…you can now edit and run Python code snippets directly in Gemini’s user interface. This allows you to experiment with code, see how changes affect the output, and verify that the code works as intended.”
So, if you’re a person who codes in Python, and you have Gemini Advanced, you should expect this functionality soon.
If you’re curious about Gemini Advanced, you can only access it through the Google One AI Premium plan. This plan costs $19.99/month, and it comes with 2TB of Google One Cloud storage along with other AI features. If you want to know how to sign up for Gemini Advanced, we have you covered. Also, if you want to know what Gemini Advance is, we also have you covered.
The European Union, a persistent challenge for tech giants, is once again making its presence felt. A recent report indicates that Apple might be facing a substantial fine (potentially reaching $539 million) imposed by the EU for creating “unfair trading conditions” for its rivals. Now, it seems TikTok is also under the EU’s scrutiny. Reuters reports that the European Union will launch an investigation into whether TikTok violated online content regulations designed to safeguard children and ensure transparent advertising. EU industry chief Thierry Breton decided after reviewing TikTok’s risk assessment report and its responses to information requests. If found guilty, TikTok could face a substantial fine.
Today we open an investigation into #TikTok over suspected breach of transparency & obligations to protect minors:
The EU’s Digital Services Act (DSA), which became effective for all online platforms on February 17, mandates that notably large online platforms and search engines take additional measures to combat illegal online content and protect public safety.If TikTok is found to have violated the rules outlined in the DSA, ByteDance, the owner of TikTok, could potentially face fines amounting to up to 6% of its global turnover. For context, statistics show that TikTok generated an estimated $9.4 billion in revenue in 2023. This could potentially result in a fine of around $500 million.
TikTok stated that it remains committed to collaborating with experts and the industry to ensure the safety of young people on its platform. The company also expressed its readiness to provide detailed explanations of its efforts to the European Commission. A TikTok spokesperson said:
TikTok has pioneered features and settings to protect teens and keep under 13s off the platform, issues the whole industry is grappling with.
The European Commission mentioned that the investigation will look into TikTok’s system design, including its algorithmic features, which might encourage addictive behaviors and lead to what’s known as the rabbit hole effect.
The rabbit hole effect is a metaphor that describes the phenomenon of becoming deeply engrossed in something, typically to the point of losing track of time or neglecting other responsibilities. It’s often used in the context of the internet, where algorithms and user engagement strategies can keep people clicking on related content for hours on end.
For reference, research shows that just on Android phones, we spent a whopping 2.3 trillion hours on social media in 2023, and TikTok is the king of the social media jungle.
The European Commission will also check if TikTok has set up measures that are suitable and proportional to guarantee a high level of privacy, safety, and security for minors. Apart from the concern for protecting minors, the Commission is examining whether TikTok offers a reliable database of ads on its platform, enabling researchers to analyze potential online risks. Stay tuned for updates.
Earlier this week, Europol and the UK’s National Crime Agency announced they had successfully taken down the dark web platform associated with LockBit, a notorious ransomware group.
LockBit has been one of the most active and prolific ransomware groups, and this operation is a significant win for law enforcement and the fight against ransomware.
LockBit, a notorious ransomware group, operates a leak site where they threaten to leak and publish stolen data from their victims. This site has now been taken down and replaced by a featured image that indicates law enforcement has taken control of the site.
LockBit Ransomware Gang
The image shows a takedown notice that a group of global intelligence agencies issued to a dark web site called Lockbit.
The image includes flags of the countries involved in the operation and logos of the police forces. It appears that the authorities have successfully taken down the infrastructure of this criminal group.
DocumentLive Account Takeover Attack Simulation
Live attack simulation Webinar demonstrates various ways in which account takeover can happen and practices to protect your websites and APIs against ATO attacks.
Current Analysis:
The dark web leak site that LockBit used to name their victims who hadn’t paid the ransom is now under the control of the UK’s National Crime Agency.
Every single known Lockbit ransomware group website is either offline or displaying a seized by EUROPOL page.
It appears law enforcement has seized and/or taken down, at minimum, 22 Tor sites, in what is labeled ‘Operation Cronos’. pic.twitter.com/DbxofBI1mP
The message on the site indicates that the operation was part of “Operation Cronos,” which involved the FBI, Europol, and several other European and Asian law enforcement agencies.
About Lockbit Ransomware:
LockBit ransomware will still be a popular choice for cybercriminals in 2023. Since January 2020, LockBit affiliates have targeted organizations of varying sizes in critical infrastructure sectors, including banking, education, energy, healthcare, transportation, government and emergency services, food, and agriculture.
The LockBit ransomware group operates on a ransomware-as-a-service model and has been one of the most active threat actors globally.
Managed Care of North America Inc. was one of the previous victims of LockBit in May 2023. In June 2022, authorities in Arizona arrested a person believed to be affiliated with the gang and linked to other LockBit ransomware attacks that affected victims across the Americas, Europe, and Africa.
Foxsemicon Integrated Technology Inc., a division of Hon Hai Precision Industry Co. Ltd., was one of the most recent victims of LockBit in January.
Stay updated on Cybersecurity news, Whitepapers, and Infographics. Follow us on LinkedIn & Twitter.
On the internet, people need to worry about more than just opening suspicious email attachments or entering their sensitive information into harmful websites—they also need to worry about their Google searches.
That’s because last year, as revealed in our 2024 ThreatDown State of Malware report, cybercriminals flocked to a malware delivery method that doesn’t require they know a victim’s email address, login credentials, personal information, or, anything, really.
Instead, cybercriminals just need to fool someone into clicking on a search result that looks remarkably legitimate.
This is the work of “malicious advertising,” or “malvertising,” for short. Malvertising is not malware itself. Instead, it’s a sneaky process of placing malware, viruses, or other cyber infections on a person’s computer, tablet, or smart phone. The malware that eventually slips onto a person’s device comes in many varieties, but cybercriminals tend to favor malware that can steal a person’s login credentials and information. With this newly stolen information, cybercriminals can then pry into sensitive online accounts that belong to the victim.
But before any of that digital theft can occur, cybercriminals must first ensnare a victim, and they do this by abusing the digital ad infrastructure underpinning Google search results.
Think about searching on Google for “running shoes”—you’ll likely see ads for Nike and Adidas. A Google search for “best carry-on luggage” will invariably produce ads for the consumer brands Monos and Away. And a Google search for a brand like Amazon will show, as expected, ads for Amazon.
But cybercriminals know this, and in response, they’ve created ads that look legitimate, but instead direct victims to malicious websites that carry malware. The websites themselves, too, bear a striking resemblance to whatever product or brand they’re imitating, so as to maintain a charade of legitimacy. From these websites, users download what they think is a valid piece of software, instead downloading malware that leaves them open to further attacks.
A malicious ad for the KeePass password manager appears as a legitimate ad.The real KeePass website (left) side-by-side with a malvertising site (right).
It’s true that malvertising is often understood as a risk to businesses, but the copycat websites that are created by cybercriminals can and often do impersonate popular brands for everyday users, too.
As revealed in our 2024 ThreatDown State of Malware report, the five most impersonated brands for malvertising last year included:
Amazon
Rufus
Weebly
NotePad++
TradingView
These five brands may not all carry the same familiarity, but their products and services capture a broad swath of user interest, from Weebly’s website creation products, to TradingView’s investment trading platform, to Rufus’s niche-but-useful portable OS booting tool.
Why the increase in malvertising last year?
If Google ads have been around for more than a decade, why are they only being abused by cybercriminals now? The truth is, malvertising has been around for years, but a particular resurgence was recorded more recently.
In 2022, cybercriminals lost access to one of their favorite methods of delivering malware.
That summer, Microsoft announced that it would finally block “macros” that were embedded into files that were downloaded from the internet. Macros are essentially instructions that users can program so that multiple tasks can be bundled together. The danger, though, is that cybercriminals would pre-program macros within certain files for Microsoft Word, Excel, or PowerPoint, and then send those files as malicious email attachments. Once those attachments were downloaded and opened by users, the embedded macros would trigger a set of instructions directing a person’s computer to install malware from a dangerous website online.
Macros were a scourge for cybersecurity for years, as they were effective and easy to deliver.
But when Microsoft restricted macro capabilities in 2022, cybercriminals needed to find another malware delivery channel. They focused on malvertising.
Today’s malvertising is increasingly sophisticated, as cybercriminals can create and purchase online ads that target specific types of users based on location and demographics. Concerningly, modern malvertising can even avoid basic fraud detection as cybercriminals can create websites that determine whether a user is a real person or simply a bot that is trawling the web to find and flag malicious activity.
How to protect against malvertising
The threat of malvertising is multi-layered: There are the fraudulent ads that cybercriminals place on Google search results, the malicious websites that imitate legitimate brands and companies to convince users to download malware, and the malware infection itself.
As such, any successful defense strategy must be multi-layered.
For safe browsing, people can rely on Malwarebytes Browser Guard, a browser extension that blocks third-party tracking and flags malicious websites known to be in the control of cybercriminals. As we wrote before:
“Malwarebytes Browser Guard provides additional protection to standard ad-blocking features by covering a larger area of the attack chain all the way to domains controlled by attackers. Thanks to its built-in heuristic engine it can also proactively block never-before-seen malicious websites.”
The problem with malvertising, though, is that new malicious websites are created every single day. Cybersecurity defenders, then, are often caught in a game of catch-up.
Here, users can find safety from Malwarebytes Premium, which provides real-time protection to detect and stop any cyberthreats that get installed onto a device, even if those threats are masquerading as legitimate apps or software.
We don’t just report on threats—we remove them
Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.
The Nothing Phone (2a) will become official on March 5. It will become the company’s third smartphone ever. Nothing has just revealed the SoC that the Nothing Phone (2a) will feature, and it’s not as surprising as you may think.
Nothing deliberately created some confusion yesterday. Carl Pei and its employees said that the chip is not the MediaTek Dimensity 7200. That managed to surprise pretty much everyone, as every single rumor thus far said it was. The phone even surfaced in benchmarks with that chip.
The Nothing Phone (2a) SoC has just been revealed… officially
Well, Nothing was trolling us, kind of. The Nothing Phone (2a) is fueled by the MediaTek Dimensity 7200 Pro. So it’s not exactly a different processor, it’s just a more powerful variant of the rumored one.
You have never heard of that chip as it was co-engineered by Nothing and MediaTek for the Nothing Phone (2a). It’s basically just a tweaked variant of the regular chip, as already mentioned.
Nothing revealed this info via a new video shared via social media. In that video, the company’s employees are talking about the process behind processor choice, and sharing more information about the chip itself.
The company was also considering the Snapdragon 7s Gen 2 and the Snapdragon 782G. The MediaTek Dimensity 7200 Pro is the more powerful processor, which is why the company opted for it.
Nothing realized that it may be a hard sell in the UK, as the Snapdragon is much more powerful, but they decided to go that route either way. Nothing believes this is the right chip to fuel the Nothing Phone (2a).
The MediaTek Dimensity 7200 Pro is using TSMC’s second-gen 4nm process
The MediaTek Dimensity 7200 Pro was made using TSMC’s second-generation 4nm process. That’s actually a good thing, and that chip is actually quite powerful, albeit still a mid-range chip. This is not surprising considering the fact the Nothing Phone (2a) will be a budget-oriented phone.
In the video embedded below, Nothing also shows what seems to be internals of the Nothing Phone (2a), you can also check them out in the image below. 12GB of RAM is also mentioned, and 8GB of boosted RAM as a possibility (virtual).
