Training your favorite AI models is getting more expensive

0
[ad_1]

As you may know, AI is an expensive business. It costs tons of money to secure GPUs, develop tools, and maintain them. One of the biggest costs is training the AI models powering our AI world. According to Anthropic AI’s CEO, training AI models is getting more expensive.

Any person looking to develop their own AI startup will need to come to terms with the fact that they’ll need millions, if not billions, just to get off the ground. This is because developing an AI model is no cheap affair.

During a recent episode of the In Good Company podcast, Anthropic AI CEO Dario Amodei spoke about some of the costs associated with AI. During the podcast, he mentioned that it took $100 million just to train the GPT-4o model. That’s just one model. This should come as no surprise, as OpenAI burned through $520 million last year.

Training AI models is getting more expensive

Unless you haven’t gone to the grocery store or tried to buy anything in the last couple of years, you’d know that prices are going up! Well, training AI models is not very different. Right now, companies like Google, OpenAI, Anthropic, Perplexity, Meta, xAI, etc. are pouring money into training their latest and greatest models. While we don’t know how much money each company is shelling out, we can guess that they’re paying in the range of hundreds of millions of dollars.

Amodei said during the podcast that models that cost $1 billion to train are coming. According to him, this shouldn’t take more than a few years to happen. He even mentioned models that cost $10 billion or even $100 billion to train. “Right now, 100 million. There are models in training today that are more like a billion… I think if we go to ten or a hundred billion, and I think that will happen in 2025, 2026, maybe 2027,” he said, “we’ll be able to get models that are better than most humans at most things.”

What does this mean for AI in general? It could mean general AI. Right now, companies are racing to achieve AGI (Artificial General Intelligence). This is an AI that’s smarter than a human being in all respects. Most industry experts believe that we’ll be able to reach AGI within the next decade. When that happens, we can only imagine how much money it will cost to train and maintain it.


[ad_2]
Source link

OnePlus Watch 2R specs confirm exactly what we expected

0
[ad_1]

The OnePlus Watch 2R specs have just surfaced, and they’ve confirmed our suspicions. We’ve exclusively leaked the OnePlus Watch 2R quite recently, its design, and based on it, it was kind of obvious this watch already launched in China.

The OnePlus Watch 2R specs confirm OnePlus is looking to rebrand its existing product… kind of

The OnePlus Watch 2R launched in China under the OnePlus Watch 2 name. Yes, the OnePlus Watch 2 launched globally earlier this year, but it never arrived to China. No, the two smartwatches are not the same, not at all.

However, the Chinese variant of the OnePlus Watch 2 and the OnePlus Watch 2R will be the same products, basically… other than their software. This is a bit confusing, we really don’t know why OnePlus went down this road, but… there you go.

Now, we assumed that the two devices are the same based on their designs, and the specs that just leaked only confirmed that. These specifications come from Ishan Agarwal, a well-known tipster.

A 1.43-inch round display will be included, along with two chips

The OnePlus Watch 2R will feature a 1.43-inch round AMOLED display. Its brightness will go up to 1,000 nits in HBM. The Snapdragon W5 and BES2700 chips will be included here, and fuel this watch.

The device will offer 2GB of RAM and 32GB of internal storage. It will be IP68 certified, and it will also have a 2.5ATM rating. So, yes, you will be able to go diving with it, up to a certain level.

The watch will offer up to 100 hours of battery life, and VOOC charging will be on offer too. Dual-frequency GPS will also be on offer. OnePlus will include over 100 sports modes in this watch.

In regards to health and fitness tracking, a heart rate sensor will be included. The watch will also be able to track your stress levels and monitor your sleep patterns.

The OnePlus Watch 2R will launch in Forest Green and Gunmetal Gray colors. Those two colors are called Nebula Green and Meteorite Black in China.


[ad_2]
Source link

RCS gets major update, bridges Android-iPhone messaging gap

0
[ad_1]

GSMA, the association responsible for maintaining a standard global mobile communication system, has announced a major update for RCS (Rich Communication Services). Universal Profile 2.7 of RCS brings “Extended Messaging” features to enable more engaging messaging experiences. The update should significantly improve Android and iPhone interoperability of the next-gen mobile messaging standard.

The latest RCS update standardizes messaging between Android and iPhone

Finalized in June, GSMA recently publicized Universal Profile 2.7 of RCS. This update adds several modern features to your standard text messaging. Like WhatsApp, Telegram, and many other messaging apps, RCS-based chats on your phone will properly show replies and emoji reactions to messages. Currently, if you react to a message with an emoji, it is sent as an SMS text. It is the standard behavior on the iOS Messages app and Google Messages for Android.

The official specification published by GSMA also mentions custom reactions. These can be an existing or generated image like a Live Sticker, Genmoji, or Photomoji. Additionally, this RCS update will fix the reply problem on iOS. The current version of RCS on iOS 18 does not support inline/threaded replies from Android users. Android-to-Android conversations don’t have the issue. Replies note the message you were referencing, like on messaging apps.

The updated RCS standard also supports editing and deleting of messages after they are sent. If you want to fix a typo or entirely recall the message you just sent, you have both options. There will probably be a time limit for these actions, though. Once it’s elapsed, you cannot edit or delete a sent message in a conversation for both parties. “An RCS client shall provide an option to recall an RCS message shortly after they sent that message,” the official specification states.

Enhanced spam protection & more improvements

This RCS update will offer better spam protection than before. GSMA is extending spam reporting to one-to-one chats. “The Spam Report Message allows a client to report an RCS user as a spammer or as an identifier involved in fraud, sending inappropriate content, or other inappropriate behavior,” the Association explains. These spam reports will go to the application server and be processed accordingly to “take unilateral blocking action.”

Overall, this update will modernize RCS messaging so you don’t have to rely on third-party apps. It will also improve the messaging experience between Android and iPhone. Apple recently added RCS support to iOS, so it’s still a new thing for iOS users. The feature is currently in beta and will be available publicly with the iOS 18 update later this year. As they say, “Better late than never.” Hopefully, Google and Apple will adopt the updated RCS standard quickly.


[ad_2]
Source link

Xiaomi MIX Flip design confirmed by certification listing

0
[ad_1]

The Xiaomi MIX Flip design has just been confirmed by a certification listing. The phone got certified by the NCC in Taiwan, and as part of it, the device’s design got revealed via live images.

The Xiaomi MIX Flip design has just been confirmed thanks to a certification listing

It seems like the real-life image of the device that surfaced back in May was… not accurate. This time around we get to take a proper look at the phone, If you check out the gallery below the article, you’ll see the device itself.

The phone will have two vertically aligned cameras on the back. They’ll sit in the top-left corner when the phone is unfolded, and in the bottom-right when it’s folded. Each of those two cameras is its own island, they’re not a part of a joint module or anything like that.

You can also see that the cover display has some curves on the very edges. The two cameras on the back do protrude quite a bit. Unfortunately, we can’t see the outline of the cover display in these images, as the images are not the best they could be. It’s likely that the display is large, and that the cameras cut into it, though. We’ll have to wait and see.

A display camera hole will sit on the main, foldable display. It will be centered at the top of the display, as expected. The design of the phone overall is quite minimalistic. This black variant looks very stealthy.

Two batteries will be included, and 67W charging supported

This listing also confirms that the phone will have a dual battery setup. It will include a 1,145mAh pack and a 3,595mAh battery pack. The Xiaomi MIX Flip will also support 67W wired charging. We’re not sure about wireless charging at this point.

The Xiaomi MIX Flip will become the company’s very first flip phone foldable. The Xiaomi MIX Fold series is focused on book-style foldables, but this one will be the first of its kind from Xiaomi.

Both the Xiaomi MIX Fold 4 and Xiaomi MIX Flip will launch this month. That much has been confirmed by Lei Jun. The Xiaomi MIX Flip is coming to global markets, while we’re still not sure about the Xiaomi MIX Fold 4.


[ad_2]
Source link

HONOR Magic Vs3 design & color options officially confirmed

0
[ad_1]

The HONOR Magic Vs3 is a foldable phone that will launch alongside the Magic V3, and its design and color options just got confirmed. We’ve seen the Magic Vs3 design once before, quite recently, but more info just got revealed.

The HONOR Magic Vs3 design and color variants have been confirmed

HONOR revealed this phone’s design and color variants via a pre-order listing. The Magic Vs3 is listed in China, and it will launch on July 12. These two foldables will launch, alongside several other devices.

If you take a look at the gallery below, you’ll see the Magic Vs3 in the flesh. Black, Green, and White colors are shown here. The camera island looks entirely different compared to the Magic V3. The rest of the phone, as far as we can tell, is very similar, though.

Unfortunately, however, we don’t know the phone’s thickness or weight. It is expected to be a bit thicker and heavier than the Magic V3, though. Why? Well, because this is expected to be a more affordable variant of the Magic V3.

A periscope telephoto camera will also be included, which is a bit surprising

What we do know is that three cameras will be included on the back of the phone. One of those cameras will be a periscope telephoto camera, which is a bit surprising. The Magic V3 will get it, and the Magic V2 won’t offer it. So considering this is supposed to be a more affordable variant of the Magic V3, it is a bit surprising… but in a good way.

We also know that the Magic Vs3 will come in three storage options. 256GB, 512GB, and 1TB storage flavors will be on offer. That is basically it as far as our knowledge about this phone goes.

We’re only three days away from the phone’s launch event, however. July 12 is right around the corner, and everything will be revealed. The HONOR Magic V3 will take the spotlight, but the Magic Vs3 is worth a look too.


[ad_2]
Source link

Universal Code Execution Vulnerability In Browsers Puts Millions Of Users At Risk

0
[ad_1]

Hackers remotely execute malicious code on a compromised device or server by exploiting the Universal Code Execution vulnerability.

Through this vulnerability, threat actors can inject codes into server-side interpreter languages such as Java, Python, and PHP.

Hacking into this security flaw can steal information, divert money to other accounts, perform surveillance, and even severely affect some organizations.

Cybersecurity analyst Eugene Lim at SpaceRaccoon recently discovered that millions of users are at risk due to the Unniversal Code Execution.

Universal Code Execution Vulnerability

Chaining messaging APIs in browsers and extensions allows hackers to exploit the Universal Code Execution Vulnerability, breaking the Same Origin Policy as well as the browser sandbox.

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.

Attackers can use content scripts and background script vulnerabilities to execute malicious code across any webpage potentially.

The study unveils two new vulnerabilities affecting millions of users and proposes a way for extensive detection of such vulnerabilities using dataset queries and static code analysis.

Browser extension design is vulnerable, and malicious web pages can evade the Same Origin Policy. 

In other words, content scripts injected with wildcard patterns and taking advantage of the trust between background scripts and content can steal sensitive information from third-party websites.

Browser extension message chain (Source – Spaceraccoon)

For instance, “Extension A” injects scripts on all pages though it is supposed to be for one site only, moreover, it requests access to cookies from various origins.

For this reason, this vulnerability allows an attacker to obtain session cookies from whitelisted domains, leading to the breaking of same-origin policy and ultimately compromising user security on these websites.

This research is about how browser extensions can achieve “universal code execution” by chaining different messaging APIs.

The attack vector combines content scripts with wildcard characters, background scripts, and native messaging capabilities.

Exploiting weaknesses within this chain allows attackers to bypass the Same Origin Policy and execute malicious code on the host system.

The study targets high-profile extensions, especially those involving PKI (Public Key Infrastructure) smart card functions.

Researchers found vulnerable extensions through a combination of dataset queries and static code analysis, one of which had 2 million users, allowing arbitrary loading of DLLs.

This highlights the need for better security processes during browser extension development and implementation, especially when dealing with native messaging capabilities.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo


[ad_2]
Source link

Detailed Xiaomi 15 & Xiaomi 15 Pro specs & prices leak early

0
[ad_1]

The Xiaomi 15 and Xiaomi 15 Pro are coming later this year, and their detailed specs have just surfaced, way early, along with the prices of these two smartphones. Both smartphones are expected to arrive in October… to China.

The Xiaomi 15 & Xiaomi 15 Pro specs & prices surface early

These two smartphones are expected to become the very first to launch with the Snapdragon 8 Gen 4 SoC. That processor has been confirmed to arrive in October, by the way. So, the timing fits.

Let’s take a closer look at the Xiaomi 15 first. The device is tipped to include a 6.36-inch 1.5K display with a refresh rate of up to 120Hz. It will have an LTPO OLED display and a 1,400-nit brightness in ‘High Brightness Mode’. Its peak brightness will go higher than that, probably.

That device will offer up to 16GB of LPDDR5X RAM and up to 1TB of UFS 4.0 flash storage. Its battery will be somewhere between 4,800mAh and 4,900mAh in terms of capacity. That’s a nice boost over a 4,610mAh battery inside the Xiaomi 14.

The Xiaomi 15 will offer 100W wired & 50W wireless charging

This leak also revealed that the Xiaomi 15 will support 100W wired and 50W wireless charging. That part is not surprising at all, but it’s nice to see that Xiaomi will offer such fast charging again.

There will be three cameras on the back of the device. A 50-megapixel main camera will use the OmniVision OV50H sensor (1/1.31-inch sensor). Both its ultrawide and telephoto cameras will use the Samsung ISOCELL JN1 sensor (1/2.76-inch sensor). The telephoto camera will offer 3x optical zoom.

On the front, you’ll be able to use a 32-megapixel camera. The Xiaomi 15 will also be IP68 certified for water and dust resistance. Leica will be a part of the package too, of course.

The Xiaomi 15 Pro is coming with a 6.73-inch display, and 80W wireless charging support

The Xiaomi 15 Pro, on the other hand, will feature a 6.73-inch 2K display with up to 120Hz refresh rate. It will include an LTPO AMOLED display too. It will also offer a 1,400-nir brightness in ‘High Brightness Mode’, but its peak brightness will go considerably higher.

A 5,400mAh battery will be included, while 120W wired charging will be supported. This smartphone will also offer fast wireless charging, but up to 80W, even faster than the Xiaomi 15.

A 50-megapixel main camera (OmniVision OV50N sensor, 1/1.3-inch sensor, f/1.4 aperture lens) will be backed by a 50-megapixel ultrawide camera (Samsung JN1 sensor). The third camera on the back will be an unnamed 50-megapixel unit (3x optical zoom, periscope telephoto camera, 1/1.95-inch sensor).

This phone will also be IP68 certified for water and dust resistance. This phone will also arrive with up to 16GB of LPDDR5X RAM and up to 1TB of UFS 4.0 flash storage.

Both devices will offer up to 16GB of LPDDR5X RAM

Now, in terms of prices. The Xiaomi 15’s 12GB RAM model with 256GB of storage will cost CNY4,599 ($632). Its 16GB RAM variant with 1TB of storage will be priced at CNY5,499 ($756). The Xiaomi 15 Pro with 12GB of RAM will start at CNY5,299-CNY5,499 ($728-$756). The 16GB RAM model with 1TB of storage will cost CNY6,299-CNY6,499 ($866-$894).


[ad_2]
Source link

Which is better for your brand?

0
[ad_1]

The digital advertising landscape is evolving rapidly, offering brands innovative ways to reach their target audiences. Two of the most impactful channels in recent years are OTT vs CTV. This article delves into the nuances of OTT and CTV, helping advertisers understand which platform may be more beneficial for their brand.

Understanding OTT and CTV

> What is OTT?

Over-The-Top (OTT) refers to streaming media services delivered directly to viewers via the internet, bypassing traditional cable or satellite television. OTT content can be accessed on various devices such as smartphones, tablets, laptops, and smart TVs. Popular OTT platforms include Netflix, Hulu, and Amazon Prime Video. OTT allows consumers to access a vast array of content, including TV shows, movies, and original programming, without the need for a cable subscription.

> What is CTV?

Connected TV (CTV) refers to a television that connects to the internet and allows users to stream content online. This category includes smart TVs, as well as devices like Roku, Apple TV, and Amazon Fire Stick. CTV combines the experience of traditional TV with the flexibility and interactivity of digital media. Unlike OTT, which can be consumed on various devices, CTV content is viewed on a TV screen, providing a more traditional viewing experience enhanced by the digital interactivity.

OTT vs. CTV: Key Differences

> Device Flexibility

– OTT: Accessible on multiple devices, offering greater flexibility for viewers to watch content anytime, anywhere. This means users can switch seamlessly between their smartphone, tablet, or laptop, making OTT a versatile choice for consuming media on the go or at home.

– CTV: Primarily viewed on a television screen, providing a more traditional, lean-back viewing experience. This setup is particularly appealing to households that enjoy watching content together in a communal setting.

> Audience Reach

– OTT: Offers a broad reach across different demographics and device types. Ideal for targeting users who prefer consuming content on mobile devices. The wide variety of content available on OTT platforms attracts a diverse audience, from young adults to older viewers who are increasingly adopting streaming services.

– CTV: Targets viewers in a household setting, making it effective for campaigns aiming to engage with families or individuals in a home environment. CTV viewers often watch longer-form content, providing advertisers with the opportunity to deliver their message in a more engaging and immersive way.

> Advertising Formats

– OTT Advertising: Includes pre-roll, mid-roll, and post-roll ads, similar to traditional digital video advertising. Offers capabilities like ad personalization and programmatic buying. Advertisers can also leverage interactive ad formats that encourage viewer engagement, such as clickable overlays or in-stream surveys.

– CTV Advertising: Often includes dynamic ad insertion, which allows advertisers to deliver personalized ads in real-time. This format is particularly effective for performance marketing and demand generation campaigns. CTV ads are typically unskippable, ensuring higher ad completion rates and greater brand recall.

Advantages of OTT for Brands

> Extensive Reach

OTT platforms boast extensive reach due to their accessibility on various devices. This allows advertisers to connect with a diverse audience, from tech-savvy millennials to older generations who are increasingly adopting streaming services. The ability to reach viewers on their preferred devices makes OTT a powerful tool for expanding brand visibility and engagement.

> Targeting Capabilities

OTT advertising leverages data to deliver highly targeted ads. Advertisers can segment audiences based on demographics, interests, and viewing behaviors, ensuring their message reaches the most relevant viewers. This precise targeting helps optimize ad spend and improve the effectiveness of marketing campaigns.

> Flexibility and Measurement

OTT provides flexible ad placement options and robust measurement capabilities. Brands can track ad performance in real-time, adjusting their strategies based on detailed analytics to optimize campaign effectiveness. This level of insight allows advertisers to understand which content and creatives resonate best with their audience, enabling continuous improvement.

> Cost-Effectiveness

OTT can be a cost-effective option for brands with varying budget sizes. The flexibility in pricing models allows advertisers to scale their campaigns according to their budget, making it accessible for both large enterprises and smaller businesses. Additionally, the high targeting precision reduces wasted ad spend by reaching only the most relevant audiences.

Advantages of CTV for Brands

> High Engagement

CTV offers a high-engagement environment, as viewers are typically more focused when watching content on a larger screen. This enhances the impact of TV advertising and increases the likelihood of viewer retention and response. The immersive nature of CTV viewing makes it an ideal platform for delivering high-quality, visually engaging ads that capture attention.

> Premium Content

CTV often delivers premium content from major networks and popular streaming services, providing a high-quality advertising context. This association with premium content can enhance brand perception and credibility. Advertisers can benefit from the trusted and engaging environments that CTV platforms offer, leading to better brand associations.

> Advanced Targeting

CTV allows for sophisticated targeting options similar to OTT, including demographic, geographic, and behavioral targeting. Additionally, CTV supports programmatic advertising, enabling brands to automate and optimize their ad buying process. The ability to deliver personalized ads based on viewer data enhances the relevance and effectiveness of CTV campaigns.

> Enhanced Metrics

CTV offers detailed metrics and insights into ad performance, including view-through rates, completion rates, and engagement metrics. These analytics help advertisers understand how their ads are performing and make data-driven decisions to improve campaign outcomes. The ability to measure the impact of CTV ads in real-time provides a significant advantage for performance marketing strategies.

Considerations for Choosing Between OTT and CTV

> Campaign Goals

– Brand Awareness: If the primary goal is to increase brand awareness, CTV’s premium content and high engagement rates make it an excellent choice. The immersive viewing experience and association with high-quality content can help create a strong brand presence.

– Direct Response: For campaigns focused on direct response or performance marketing, OTT’s precise targeting and measurement capabilities can drive more immediate results. The ability to reach users on their preferred devices and deliver personalized messages can lead to higher conversion rates.

> Budget

– OTT: Often offers more flexible pricing models, making it accessible for brands with varying budget sizes. The ability to scale campaigns according to budget and optimize ad spend through precise targeting makes OTT a cost-effective option for many advertisers.

– CTV: Generally requires a higher investment due to the premium nature of the content and the viewing environment. However, the higher engagement rates and brand-safe environments can justify the additional cost for campaigns focused on building brand equity.

> Audience Preferences

Understanding your target audience’s media consumption habits is crucial. Younger audiences may prefer the flexibility of OTT, while older demographics might lean towards the traditional viewing experience of CTV. Analyzing audience behavior and preferences can help advertisers choose the platform that best aligns with their campaign objectives.

> Creative Considerations

– OTT: Allows for interactive ad formats that can engage viewers in unique ways. Advertisers can experiment with different creative approaches to see what resonates best with their audience.

– CTV: Requires high-quality, visually appealing ads that can capture attention on a larger screen. The focus should be on creating impactful and memorable ads that align with the premium content being viewed.

Integrating OTT and CTV in Your Advertising Strategy

> Complementary Use

Brands don’t have to choose between OTT and CTV exclusively. Integrating both can provide comprehensive coverage and maximize reach. For instance, an advertiser can use OTT for targeted, personalized ads and CTV for brand-building campaigns in a premium context. This complementary approach ensures that brands can leverage the strengths of both platforms to achieve their marketing goals.

> Consistent Messaging

Ensure that your messaging remains consistent across OTT and CTV platforms. This helps in reinforcing brand identity and maintaining a cohesive narrative, regardless of the viewing device or platform. Consistent messaging also enhances brand recall and ensures that audiences receive a unified brand experience.

> Unified Analytics

Utilize unified analytics to measure the effectiveness of both OTT and CTV campaigns. This holistic approach allows brands to understand cross-platform performance, optimize their strategies, and achieve better overall results. By consolidating data from both platforms, advertisers can gain a comprehensive view of their audience and campaign performance.

> Tailored Strategies

Develop tailored strategies for each platform based on their unique strengths. For example, use OTT for highly targeted campaigns that drive immediate actions, while leveraging CTV for long-term brand building and engagement. By aligning your strategy with the specific advantages of each platform, you can maximize the impact of your advertising efforts.

> Testing and Optimization

Continuously test and optimize your campaigns on both OTT and CTV platforms. Experiment with different ad formats, creatives, and targeting options to determine what works best for your brand. Use data-driven insights to refine your strategies and improve campaign performance over time.

Conclusion

Choosing between OTT and CTV depends on your brand’s specific goals, budget, and target audience preferences. Both platforms offer unique advantages that can significantly enhance your advertising efforts. By understanding the strengths of each and strategically integrating them into your marketing mix, you can create powerful campaigns that drive both brand awareness and direct response.

In the evolving landscape of digital advertising, leveraging the right mix of OTT and CTV can provide a competitive edge and help your brand connect with audiences in meaningful ways. By carefully considering your campaign objectives, audience behavior, and budget, you can make informed decisions that maximize the impact of your advertising strategy.


[ad_2]
Source link

If video degrades on Facebook, Instagram, are TikTok doomscrollers to blame?

0
[ad_1]

The videos of silly cats and prancing adolescents come with a price, because nothing is free. The more TikTok, Instagram, Facebook, and YouTube videos we’re watching, the more data traffic we generate. The mobile networks carry this traffic. They’re not happy about it. It’s about money. It always is, right?The latest Reuters report underlines how global traffic grew 25% in the 12 months to the first quarter of 2024. Video accounted for 73% of all mobile traffic by the end of 2023. These are some serious numbers.

That’s why telecom operators (like Vodafone) have been complaining about the cost of it all – at the end of the day, they have to shoulder the cost of upgrading networks, while the Big Tech companies that benefit get a free ride.

Not to sound like a 1920s Soviet propaganda poster (you know: sturdy peasants, hammers, and sickles), but with every TikTok video you’re watching, you’re making it harder for telecom operators to profit. On the other hand, if that’s your goal: cool, you’re doing great. It’s just that in the meantime we’re getting costlier and costlier plans. And not all of us watch TikTok…

So, back to the report: Meta (owner of Facebook, Instagram) has collaborated with Vodafone to increase capacity on 11 European mobile networks by optimizing the delivery of short-form video “without noticeably compromising the viewing experience”.

However, it remains to be seen whether this claim holds true and video isn’t degrading.

The surge in demand for video content on platforms like Instagram, TikTok, and YouTube continues to drive substantial growth in mobile data usage.

Efforts within the EU to compel major tech firms to invest in 5G infrastructure stalled last year and are unlikely to be revived before year-end, if at all.

Vodafone views partnering with Meta as a practical approach to address debates on equitable resource allocation.
–Alberto Ripepi, Vodafone’s chief network officer

During a trial in April, Vodafone reported a significant reduction in Meta’s data traffic on its UK network, freeing up capacity in high-traffic areas such as shopping centers and transport hubs.

Spain’s Telefonica said last week it was also working with Meta on optimizing video traffic delivery on its networks. Let’s see how this one ends!


[ad_2]
Source link

Turla Hackers Weaponizing LNK-Files To Deploy Fileless Malware

0
[ad_1]

Hackers often weaponize LNK files because they can carry malware into systems undetected by anyone. LNK files are shortcuts that, when opened, launch a malicious payload (like scripts or executables).

LNK files are widely used in Windows environments and can easily pass themselves off as genuine files, making it hard for users to suspect their evil motives.

Cybersecurity researchers at GDataSoftware recently discovered that Turla hackers had been actively weaponizing the LNK files to deploy fileless malware.

Turla Hackers Weaponizing LNK-Files

Turla hackers have targeted Philippine companies and organizations, and to do so, they utilize a hacked media website to distribute malicious code.

Join our free webinar to learn about combating slow DDoS attacks, a major threat today.

The chain begins with a harmful shortcut, which pretends to be an official advisory from the Philippine Statistics Authority.

When applied, it sets off a PowerShell script that uses msbuild.exe from Microsoft to launch a fileless backdoor around application whitelisting.

This malware is set to run every 30 minutes via scheduled tasks. To ensure it is not detected and hard to reverse engineer, its payload is an MSIL binary protected by SmartAssembly.

TURLA infection flow (Source – GDataSoftware)

Interestingly, this incident brings together Siem Reap in Cambodia like Angkor Wat’s annual troop of tourists – social engineering, fileless malware, and legitimate system tools all being utilized in one attack.

This sophisticated backdoor has used several evasion techniques to prevent its detection. It disables ETW, patches its copies in memory, and avoids AMSI.

Malicious software establishes contact with its C2 server using an infected personal website. It first checks out a routine through a URL and then gets orders from another URL.

This multi-step communication enables the attacker to remain in control without being detected by the defenses, which shows how advanced this threat is.

Analysis of this malware shows that it has some features in common with Turla APT techniques, such as using infected websites as servers, bypassing AMSI by patching memory, executing files using PowerShell without them being on disk and executing scripts controlled by a server.

Besides this, new techniques are also used in this variant that had not previously been associated with Turla, implying possible changes in tactics within the group or that a new actor using similar methods has emerged.

Such a mix of known and unfamiliar tricks points to advanced persistent threats frequently changing their strategies. It implies that getting to know who is behind an attack remains challenging for cybersecurity researchers.

Preventions

Here below we have mentioned all the preventions:-

  • Set PowerShell to execute only signed scripts.
  • Assess and consider removing PowerShell if not needed.
  • Disable/restrict the WinRM Service to prevent remote PowerShell use.
  • Remove MSBuild.exe if not required.
  • Block msbuild.exe with application control if unnecessary.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo


[ad_2]
Source link