Interpol Arrested 3,500 Suspects and Seized $300 Million

andreasc
-
0
Interpol Arrested 3,500 Suspects and Seized $300 Million
[ad_1]

In a groundbreaking initiative spanning 34 countries, INTERPOL orchestrates Operation HAECHI IV, a relentless assault on online financial crime, yielding a formidable impact.

Interpol, short for the International Criminal Police Organization, is a global entity dedicated to fostering international police collaboration and enhancing global efforts in crime control.

Delivering a resounding blow to cybercriminals, this meticulously executed operation culminates in the arrest of nearly 3,500 individuals and the confiscation of a staggering $300 million in illicit assets.

Navigating through the intricate landscape of cyber-enabled scams, investigators focus on seven distinct categories, unraveling the threads of voice phishing, romance scams, online sextortion, investment fraud, money laundering, business email compromise, and e-commerce fraud.

INTERPOL’s Global Rapid Intervention of Payments

A key element in Operation HAECHI IV’s success lies in the adept utilization of INTERPOL’s I-GRIP system, empowering investigators to freeze suspicious bank accounts and virtual asset service provider (VASP) accounts associated with criminal activity.

A strategic collaboration between Filipino and Korean authorities led to the arrest of a notorious online gambling criminal, resulting in the dismantling of an illegal gambling network.

Operation HAECHI IV’s triumph extends beyond financial gains, acknowledging the emotional and psychological toll on victims of cybercrime. 

This operation aims to safeguard not only wallets but also the well-being of individuals affected.

Adapting to a Shifting Landscape: Emerging Threats Explored

In recognition of the ever-evolving nature of cyber threats, Operation HAECHI IV takes on emerging challenges, including investment fraud involving Non-Fungible Tokens (NFTs) and the incorporation of AI and deep fake technology into scams.

By issuing Purple Notices, INTERPOL proactively alerts member countries to emerging cyber threats, showcasing a commitment to staying ahead of the curve and safeguarding the public from evolving criminal tactics.


[ad_2]
Source link

Xfinity Rocked with Data Breach Impacting 36 Million Users

andreasc
-
0
Xfinity Rocked with Data Breach Impacting 36 Million Users
[ad_1]

Comcast Cable Communications, LLC, operating under the brand name Xfinity, has suffered a massive data breach affecting 36 million users.

Comcast-owned brand Xfinity has initiated the process of notifying its customers about a significant data breach impacting tens of millions of users. The data breach is linked to the critical vulnerability in Citrix software.

It is worth noting that in November 2023, the cybersecurity firm Mandiant, owned by Google, released its findings, issuing a warning to companies about the active exploitation of the Citrix vulnerability. The report indicated that not one, but four uncategorized threat actor groups were involved in the exploitation.

The telecommunication giant, which offers a wide range of services including internet, TV, and phone, stated in the notice sent on Monday that hackers exploited a software vulnerability to access its customers’ personal information.

Xfinity discovered the suspicious activity on October 25, and by December 6 it determined that compromised data may include usernames, hashed passwords, last four digits of Social Security numbers, account security questions, birthdates, and contact information.

According to a breach notification filed with the Maine Attorney General, the breach affected around 35.9 million user accounts, representing a significant portion of its overall user base, which comprises 32 million broadband users. 

Cloud computing firm Citrix discovered a vulnerability (CVE-2023-4966) dubbed Citrix Bleed in early October, which affected products used by companies like Xfinity.

It is worth noting that in November 2023, the cybersecurity firm Mandiant, owned by Google, released its findings, issuing a warning to companies about the active exploitation of the Citrix vulnerability.

The report revealed that four uncategorized threat actor groups were involved in exploiting the vulnerability. This vulnerability affects NetScaler ADC and Gateway appliances, allowing them to manipulate user sessions without requiring authentication measures. The same vulnerability was previously linked to hacks targeting the Industrial and Commercial Bank of China’s New York branch and a Boeing subsidiary.

Xfinity patched the vulnerability, but unauthorized access to its internal systems led to data compromise by mid-November. In its official statement, Xfinity’s spokesperson stated that there is no evidence of customers’ data being leaked or targeted attacks.

“We are not aware of any customer data being leaked anywhere, nor of any attacks on our customers.”

Nevertheless, all Xfinity customers are urged to reset their passwords and are advised to use two-factor authentication for added security.

In a comment to Hackread.com, Immersive Labs’ Director of Cyber Threat Research Kev Breen warned companies to timely patch security vulnerabilities as threat actors are quick to exploit them.

“In 2022, the median time to exploitation was one day from exploitation, while the timing of public patches was on average 7 days. This year we’ve consistently seen recently disclosed vulnerabilities and zero days actively exploited in the wild by threat actors at scale.”

Breen also argued the culture of non-existing cybersecurity and vulnerability disclosure-related transparency, despite the US government’s strict and recent policies holding software companies liable for data breaches.

“Despite government intervention to try and strengthen transparency and guidance around cybersecurity practices, many standard implementations still haven’t kept pace. For example, FedRAMP guidelines say organizations have 30 days to remediate high-risk threats — yet attackers just need one day to discover a vulnerability and take advantage to wreak havoc on systems and cause costly damage to organizations.”

This, however, is not the first time Comcast has made headlines for data breaches. In November 2015, the company discovered that 200,000 user login credentials, including email addresses and passwords, were leaked and being sold on the dark web. The company attributed the incident to customers falling victim to malware and phishing attacks.

As for the latest data breach, Comcast, under new Securities and Exchange Commission rules, must disclose cybersecurity breaches affecting their bottom line within four days but has not yet filed such a report, according to The Associated Press.

  1. US aerospace services provider data breach loses 1.5 TB of data
  2. Mortgage Giant Mr. Cooper Data Breach; 14 Million Users Impacted
  3. Hackers Leak Thousands of Idaho National Lab Employees’ PII Data
  4. Sony Data Breach via MOVEit Vulnerability Affects Thousands in US
  5. Hackers Access User Info, Corporate Systems in MongoDB Data Breach
  6. Delta Dental Hit with 7 Million User Data Breach in MOVEit-Linked Attack

[ad_2]
Source link

Samsung now offers self-repair service for its latest foldables

andreasc
-
0
Samsung now offers self-repair service for its latest foldables
[ad_1]

Samsung has finally expanded its Galaxy self-repair program to foldable phones. The Galaxy Z Fold 5 and Galaxy Z Flip 5 are the first two foldables to be eligible for the company’s do-it-yourself (DIY) repair service. The Korean firm has also added support for a bunch of other devices, including the Galaxy S23 series and the Galaxy Tab S9 series. The program is open in more markets too.

Samsung expands its self-repair service to more regions and devices

Launched in April 2022, Samsung’s self-repair program empowers DIY enthusiasts to repair their damaged Galaxy devices on their own. The company offers step-by-step repair guides, tools, and genuine replacement parts for several components, including the back glass, screen, charging port, speaker, SIM tray, and physical buttons of smartphones and tablets.

For laptops, it supports self-repairing of the front and rear case, screen, touchpad, power key (with fingerprint scanner), battery, fan, speakers, and rubber feet. Debuted in the US, Samsung initially offered repair guides and parts for the Galaxy S20, Galaxy S21, and Galaxy Tab S7 series. It later added support for the Galaxy S22 series, 15-inch Galaxy Book Pro, and 15-inch Galaxy Book Pro 360.

Earlier this year, Samsung launched the self-repair program in South Korea, Brazil, Mexico, and nine European countries, namely France, Germany, Italy, Spain, Belgium, Poland, Sweden, the Netherlands, and the UK. The company has now expanded coverage to pretty much the entirety of Europe. The Korean behemoth might launch the program in more regions in the coming months. It says the service is part of its efforts to reduce e-waste.

Meanwhile, the firm has made its self-repairing service available for more Galaxy devices. Along with the aforementioned devices, the program is also available for the Galaxy S23 FE, Galaxy A05s, Galaxy Tab S9 FE series, Galaxy Tab A9 series, 15-inch Galaxy Book 2 Pro, and 15-inch Galaxy Book 2 Pro 360. As usual, support for some devices may be limited to select markets.

Samsung collaborates with various distributors for the program

Samsung runs its self-repair program in collaboration with various regional distributors and service providers such as iFixit in the US and ASWO and 2Service in Europe. You can shop for repair kits on the company’s official website and partner sites. Prices of repair kits vary depending on the device model and replacement component. For example, a kit containing the screen and battery for the Galaxy S22 Ultra costs $240. It includes the necessary repair tools.

Samsung Galaxy Z Fold 5 Flip 5 foldables self repair 2


[ad_2]
Source link

Huawei Kirin 9000 from 2020 outgunned the new Kirin 9000s

andreasc
-
0
Huawei Kirin 9000 from 2020 outgunned the new Kirin 9000s
[ad_1]

Huawei managed to raise a lot of eyebrows when it announced the new Kirin 9000s, a 7nm processor. That’s a different story, though, let’s focus on the matter at hand here. The “old’ Huawei Kirin 9000 from 2020 managed to outperform the new Kirin 9000s, on benchmarks.

The Kirin 9000 from 2020 actually managed to outgun the new Kirin 9000s

Based on the findings of Nanoreview.net, the Kirin 9000s tested slightly better in the CPU section, but the Kirin 9000 won in basically every other way. On Geekbench, the Kirin 9000s scored 1,315 points in a single-core test, and 4,078 in a multi-core test. The Kirin 9000 reached 1,259 points in a single-core test, and 3,486 in a multi-core test.

On AnTuTu 10, the Kirin 9000s barely beat the Kirin 9000 overall, with a score of 897,496 to 894,530. When we look at the GPU section, however, the Kirin 9000 wiped the floor with the Kirin 9000s. It scored 315,801 points, compared to the 200,982 points of the Kirin 9000.

On 3DMark Wild Life the Kirin 9000 was 20% faster than Huawei’s new processor. That is not all that surprising considering that the Kirin 9000 was made using a 5nm TSMC node, while the Kirin 9000s was built by SMIC using its second-gen 7nm node. Either way, you can check out all the benchmarks conducted in the gallery below.

SMIC & Huawei are rather limited when it comes to SoC development due to US sanctions

There’s only so much SMIC and Huawei were able to do with their limited hardware. SMIC used the deep ultraviolet lithography (DUV) machine that it can import. For anything under 7nm, something more advanced is needed. To be more specific, they need Cannon’s nanoimprint lithography (NIL) tech.

It is worth noting that Huawei did submit an interesting patent application regarding EUV components a year ago. That could turn into something really interesting for Huawei, and allow the company to catch up.

In any case, we’ve used the Kirin 9000s in Huawei’s new tablet, and that chip performed great. It may not do great in benchmarks, but when it comes to performance, it does a great job.


[ad_2]
Source link

Hackers Leveraging GitHub Platform for Hosting Malware

andreasc
-
0
Hackers Leveraging GitHub Platform for Hosting Malware
[ad_1]

Researchers have discovered two novel techniques on GitHub: one exploits GitHub Gists, while the other involves sending commands through Git commit messages.

Malware authors will occasionally upload samples to services such as Dropbox, Google Drive, OneDrive, and Discord to host second-stage malware and avoid detection techniques.

Nevertheless, the threat research team at ReversingLabs has recently noticed a rise in the hosting of malware on the open-source development GitHub platform.

Abusing GitHub Gists

Gists is a GitHub feature that allows developers to share code snippets easily. They can be shared publicly or privately.

“Secret gists don’t show up in Discover and are not searchable unless you are logged in and are the author of the secret gist. Secret gists aren’t private. If you send the URL of a secret gist to a friend, they’ll be able to see it”, reads Gists documentation.

They never make an appearance on the author’s GitHub profile page. This enables them to be used as a form of anonymous Pastebin service, which doesn’t trigger warning signs for an attacker.

“In this incident, several PyPI packages presented themselves as libraries for handling network proxying, and contained a Base64 encoded string, allegedly related to telemetry data, but containing a URL, pointing to a secret Gist”, ReversingLabs shared in a report with Cyber Security News.

To hide this string’s true purpose and make it more difficult for security technologies to flag it as suspicious, malware developers employed Base64 encoding. Before being sent over a network, binary data is frequently encoded using Base64 encoding.

Fetching and executing commands from a Base64 encoded URL
Fetching and executing commands from a Base64 encoded URL

The setup.py file contained hidden malicious code. The setup tools commands were extended to implement it.

Sending Commands Through git Commit Messages

Researchers discovered a sample in the easyhttprequest PyPI package that exploits characteristics of version control systems. Once more, the malicious code was built by extending the egg_info setuptools command and concealed it within the setup.py file.

“After installation on the victim’s machine, the malicious code from this package clones a specific git repository from GitHub and checks if the “head” commit of this repository contains a commit message that starts with a specific string”, researchers said.

Fetching and executing commands from a Base64 encoded commit message
Fetching and executing commands from a Base64 encoded commit message

Recommendation

Developers and application security teams must be able to distinguish between harmful and legitimate packages on these platforms, as attackers are getting more proficient in their malware deployment. 

For this reason, software developers should make use of cutting-edge tools that use intricate binary analysis to offer complete software supply chain security.


[ad_2]
Source link

OPPO confirms main camera sensor of its Find X7 flagship(s)

andreasc
-
0
OPPO confirms main camera sensor of its Find X7 flagship(s)
[ad_1]

We basically already knew what camera sensor will the OPPO Find X7 Pro and Find X7 Ultra feature, thanks to leaks. However, OPPO just went ahead and officially confirmed the main camera sensor of its Find X7 flagship(s).

OPPO just confirmed the main camera sensor of its upcoming Find X7 flagship(s)

The OPPO Find X7 Pro and/or Find X7 Ultra will feature the Sony LYT-900 sensor. That is the best sensor from Sony’s new LYTIA lineup. It’s a step above the LYT-808 that the OnePlus 12 utilizes.

Having said that, do note that some rumors are saying that the OPPO Find X7, Find X7 Pro, and Find X7 Ultra are coming. Others, however, claim that the ‘Pro’ model will not be released at all this year.

From what we’ve seen, all three are coming. The OPPO Find X7 Ultra will, however, differentiate in one way only, satellite connectivity. If OPPO aims to launch these devices globally, chances are that the ‘Ultra’ model will not be available. We presume that the satellite connectivity will be a China exclusive, but we’ll see.

The Sony LYT-900 is not official yet, but some info did surface

In any case, the Sony LYT-900 sensor is not yet official, so we don’t have all the details just yet. The leaks are suggesting that it’s a 16.384mm in diagonal and that it’s a 50-megapixel sensor with 1.6um pixels. This sensor is expected to be an upgrade over the Sony IMX989, which is also a 1-inch camera sensor.

OPPO is promising advanced processing, increased light sensitivity, and image clarity. On top of that, a broader dynamic range was also mentioned. To cap things off, OPPO also said that this camera will deliver an “unparallel photography experience”.

The OPPO Find X7 series is coming in the first quarter of next year. The OPPO Find X7 Pro and Ultra are tipped to include two periscope telephoto cameras on the back. One will offer 3x optical zoom and the other 6x optical zoom.

Both of those smartphones will also have four 50-megapixel cameras on the back. That’s something the OPPO Find X6 Pro offered as well. The seemingly final design of the device(s) also surfaced already.

Sony LYT 900 sensor image 11


[ad_2]
Source link

Why is low risk tolerance a red flag for Bitcoin investment?

andreasc
-
0
Why is low risk tolerance a red flag for Bitcoin investment?
[ad_1]

Exploring the intersection of risk tolerance and Bitcoin investment, this article delves into why a low tolerance for risk is particularly concerning for those considering investing in Bitcoin, a realm marked by volatility and uncertainty. For those in search of educational support, Immediate XP Evex provides a user-friendly website with essential resources for investors. Given the inherent risks associated with investments, entering the market without thorough research can be a significant disadvantage.

Detailed analysis of the risks associated with Bitcoin

In delving into the risks associated with investing in Bitcoin, it’s crucial to understand the complex, multifaceted nature of these risks, which go beyond mere price volatility. Bitcoin’s position as a relatively new asset class brings inherent uncertainties, primarily due to its nascent and evolving regulatory environment. Governments and financial institutions worldwide are still grappling with how to regulate cryptocurrencies, leading to potential legal and policy shifts that can significantly impact Bitcoin’s value and legality.

Another critical risk factor is the technology underpinning Bitcoin. While blockchain technology is celebrated for its security and decentralization, it is not immune to technological challenges. Issues like scaling, transaction speed, and energy consumption continue to be subjects of intense debate and development within the crypto community. Any significant technological failure or breakthrough in blockchain technology can drastically influence Bitcoin’s value.

Moreover, the market for Bitcoin is still developing. Unlike traditional asset markets, which have undergone decades of regulation and structuring, the cryptocurrency market is relatively unstructured. This lack of structure can lead to higher susceptibility to market manipulation and fraud. High-profile hacking incidents and scams in the cryptocurrency space have led to substantial financial losses for investors, highlighting the security risks in digital wallet and exchange platforms.

Another aspect to consider is the influence of media and public perception on Bitcoin’s value. Cryptocurrencies, in general, are highly sensitive to public sentiment, often driven by social media, news coverage, and influencer opinions. This can lead to rapid, speculative swings in price, driven more by hype and speculation than traditional market fundamentals.

Finally, the broader acceptance and adoption of Bitcoin play a crucial role in its risk profile. While Bitcoin has gained significant traction as an alternative investment and a potential medium of exchange, it’s still far from universally accepted. Many businesses and financial institutions remain wary of Bitcoin, and its acceptance as a payment method is not widespread. This uncertainty regarding its future adoption adds another layer of risk for investors.

How Bitcoin’s characteristics align with high-risk investment profiles

Bitcoin’s alignment with high-risk investment profiles is primarily due to its unique characteristics that distinguish it significantly from traditional investments. One of the most prominent features of Bitcoin is its extreme price volatility. Unlike established markets like stocks or bonds, Bitcoin can experience dramatic price swings within very short periods. This volatility is partly due to its relatively small market size compared to traditional markets, making it more susceptible to large trades impacting the price. Additionally, Bitcoin’s price is heavily influenced by speculative trading, where investors often buy and sell based on short-term price movements rather than the asset’s fundamental value.

Another characteristic that places Bitcoin in the high-risk category is its lack of intrinsic value. Traditional assets like stocks, real estate, or commodities have underlying values derived from company performance, physical properties, or utility. Bitcoin, however, doesn’t have such intrinsic value; its worth is largely determined by supply and demand dynamics and investor sentiment. This absence of a fundamental anchor can lead to significant uncertainty and contributes to its price volatility.

The regulatory environment surrounding Bitcoin also contributes to its risk profile. Cryptocurrency regulation varies widely across different countries, ranging from full acceptance to outright bans. This regulatory uncertainty can lead to substantial risk for Bitcoin investors, as changes in laws or policies can have immediate and significant impacts on its value and legality.

Technological risks are also inherent in Bitcoin investments. The entire Bitcoin network relies on blockchain technology, which, while secure and innovative, is still relatively new and untested compared to traditional financial systems. Issues like scalability, cyber-attacks on exchanges, or potential vulnerabilities in the technology itself pose significant risks.

Lastly, the market maturity of Bitcoin must be considered. Being a relatively new asset class, the cryptocurrency market lacks the depth, breadth, and stability of traditional financial markets. This immaturity leads to issues such as lower liquidity, less regulatory oversight, potential for market manipulation, and fewer investor protections.

Conclusion

In summary, low risk tolerance and Bitcoin investment are incongruent. This article has highlighted the inherent risks of Bitcoin, underscoring the need for investors to carefully assess their risk appetite before venturing into this volatile and unpredictable market.


[ad_2]
Source link

If these 3 points matches you

andreasc
-
0
If these 3 points matches you
[ad_1]

Exploring the suitability of Bitcoin as an investment, this article addresses key factors to consider before diving into the world of cryptocurrency. Providing easy access to vital educational resources, Immediate Bitwave is a website designed with investors in mind. Given the inherent risks of investments, entering the market without sufficient research can prove to be a disadvantage.

Lack of Investment Knowledge

In the rapidly evolving world of cryptocurrency, Bitcoin stands as a prominent figure, drawing the attention of both seasoned and novice investors alike. However, the complex nature of Bitcoin and the underlying blockchain technology it relies on necessitates a thorough understanding before any investment decision is made. This section delves into the crucial aspect of investment knowledge, specifically targeting those considering Bitcoin as a potential addition to their portfolio.

The journey into cryptocurrency investment is not one to be taken lightly. Unlike traditional stocks or bonds, Bitcoin operates on a decentralized ledger system known as blockchain. This technology, while innovative and disruptive, comes with a unique set of characteristics and risks that are often not found in other investment forms. The price of Bitcoin is known for its volatility, with dramatic fluctuations that can occur in very short periods. This unpredictability is part of what makes Bitcoin an exciting investment for some, but it also underscores the importance of understanding the market and the technology before investing.

A common misstep for many new investors is diving into Bitcoin investment without a solid foundation of knowledge. This lack of preparation can lead to hasty decisions, influenced more by market hype or fear of missing out, rather than a reasoned assessment of the investment’s potential risks and rewards. The world of cryptocurrency is rife with technical jargon and complex concepts that can be daunting for those not well-versed in the field.

Risk Aversion

When considering an investment in Bitcoin, it’s essential to take into account one’s personal risk tolerance. Risk aversion, a fundamental aspect of individual financial psychology, plays a pivotal role in shaping investment decisions. For those who identify as risk-averse, the inherent volatility of Bitcoin might present a significant deterrent, making it a less-than-ideal choice for their investment portfolio.

Risk aversion is characterized by a preference for certainty and a tendency to avoid options that could lead to significant losses, even if they offer substantial potential gains. This cautious approach is often rooted in a desire to preserve capital and ensure financial stability. Bitcoin, with its history of rapid and unpredictable price fluctuations, stands in stark contrast to the preferences of risk-averse investors.

For those with a low tolerance for risk, these fluctuations can be unsettling, leading to stress and anxiety over potential losses. This emotional response is not just a matter of discomfort; it can lead to impulsive decisions, such as selling at a loss during a downturn or missing out on potential gains due to fear. Investing in Bitcoin, or any highly volatile asset, requires a level of comfort with uncertainty and the possibility of experiencing significant fluctuations in the value of one’s investment.

Short-Term Investment Goals

Aligning one’s investment choices with their financial goals is a cornerstone of wise financial planning. This alignment becomes particularly crucial when considering short-term investment goals. Bitcoin, with its characteristic volatility and long-term growth potential, often does not align well with short-term objectives, making it a less-than-ideal choice for those with immediate financial aims.

Short-term investment goals are typically defined by a timeline ranging from a few months to a few years. These goals might include saving for a large purchase, creating an emergency fund, or accumulating capital for a near-future expense. The primary concern in such scenarios is capital preservation and liquidity – ensuring that the investment not only remains safe but is also readily accessible when needed.

Bitcoin, in contrast, is better suited to long-term investment strategies. The cryptocurrency market is known for its rapid and significant price swings, which can be driven by a range of factors from global economic trends to regulatory changes and market sentiment. This volatility, while potentially lucrative over the long term, poses a considerable risk for short-term investments. The value of Bitcoin can drastically decrease within a short period, which is a risky proposition for those who may need to access their funds on short notice.

Moreover, the true potential of Bitcoin as an investment often lies in its long-term growth. Historically, despite its volatility, Bitcoin has shown a general trend of appreciation over extended periods. This long-term growth is often linked to its increasing adoption, technological advancements, and its evolving perception as a store of value.

Conclusion

This article emphasizes the importance of aligning investment choices with personal financial strategies, especially when considering Bitcoin. It’s crucial for investors to understand their risk profile, investment knowledge, and short-term goals to make informed decisions in the dynamic world of cryptocurrency.


[ad_2]
Source link

Some Google Play Store changes we might see in light of the $700 million settlement

andreasc
-
0
Some Google Play Store changes we might see in light of the $700 million settlement
[ad_1]
Earlier this morning we updated a story we wrote on Monday evening about the $700 million settlement that Google parent Alphabet made with 50 states, the District of Columbia, and two U.S. territories. Among the issues was the 15%-30% cut that Google takes on in-app purchases made in the Play Store and the complexity of sideloading on Android. While the settlement was originally agreed to in September, the terms of the agreement were announced yesterday.

Play Store shoppers between 2016-2023 could be entitled to at least $2 each from the settlement

$630 million of the settlement will be handed out to consumers who will receive at least $2 each based on the amount of money they spent in the Play Store between Aug. 16, 2016, and Sept. 30, 2023. $70 million goes to the states for penalties, restitution, disgorgement, and fees.

Big-time changes are coming to the Google Play Store thanks to the $700 million settlement between Alphabet and the States - Some Google Play Store changes we might see in light of the $700 million settlement

Big-time changes are coming to the Google Play Store thanks to the $700 million settlement between Alphabet and the States

Google also promised to make changes to the Play Store and based on court documents (via 9to5Google) we have an idea of what to expect. One of the possible changes will run for at least five years from the effective date and allow consumers to choose between using an alternative in-app billing system provided by the app developer or Google’s in-app payment processing platform when paying for the purchase of in-app digital goods and services.
Note that the decision of which payment processing service to you won’t belong to either Google or the developer, but will be the choice of the consumer. For six years, Google will be forced to allow developers to list the price of a digital good that can be bought outside of the app. Google won’t have to allow developers to put up a link to a site where the digital good could be bought, but developers will be allowed to write in the Play Store that the digital good is “available on our website for $9.99” or whatever price it is.
For example, let’s say that digital currency for a particular game is priced lower on the app developer’s site since there is no 30% Google Tax for the developer to pay if the purchase is made on the developer’s website. While there can’t be a link to that item outside if the Play Store, the developer can mention that it is available for a lower price from the developer’s site.

Android devices must support automatic background updates for apps installed from third-party sites

Again, based on court documents, Google will aim to make sideloading on Android easier. Sideloading, the process of installing apps from a third-party app storefront, will be reduced to a single page “by combining certain warning screens and updating user interface language, for at least five years.” The warning could say, “Your phone currently isn’t configured to install apps from this source. Granting this source permission to install apps could place your phone and data at risk.” 

And to make sure apps that are sideloaded by an Android user remain up-to-date, for at least four years, Android devices will have to support automatic background updates of apps installed from third-party app stores.

The settlement prevents Google from entering into deals or enforcing deals with Android device manufacturers that would require the Play Store to be the exclusive Android app storefront preloaded on the home screen of devices. Google won’t even be allowed for five years to demand that it give consent before manufacturers pre-install third-party app stores on Android phones.
It should be pointed out that the settlement still requires approval from a judge. The States are trying to get a particular judge to sign off on the settlement by February 8th. That judge is the one who recently presided over the Epic v. Google suit that resulted in a federal jury calling the Play Store a monopoly.

[ad_2]
Source link

Mr. Cooper leaks personal data of 14 million loan and mortgage customers

andreasc
-
0
Mr. Cooper leaks personal data of 14 million loan and mortgage customers
[ad_1]

A major mortgage and loan company based in Dallas, working under the name Mr. Cooper Group Inc. has released more information on a recent breach. In a data breach notification, the company didn’t say what type of cyberattack caused the compromise of customer data, calling it a rather non-descriptive “External system breach (hacking).”

For those unfamiliar with the name, Mr. Cooper is a rebranding of Nationstar Mortgage, and reportedly some 14.7 million homeowners may be affected by the data breach.

A month ago, in November 2023, the company stated that the number of affected customers was limited to around 4 million, because banking information related to mortgage payments is hosted with a third-party provider, whose systems were believed not to be compromised.

As it turns out, all current and former customers, amounting to over 14 million people had their personal data stolen. Mr. Cooper shut down multiple systems after it discovered the cyberattack on October 31, 2023 and started its investigation.

The data accessible during the attack included the names, addresses, phone numbers, Social Security numbers, dates of birth, and bank account numbers of Mr. Cooper’s customers.

One the page dedicated to the incident, Mr. Cooper states:

“To help support our customers, we are offering two years of free credit monitoring and identity protection services through TransUnion to any former or current (as of Oct. 31, 2023) Mr. Cooper customer or customers whose loans we service on behalf of our servicing partners. We will be directly notifying customers and providing them with enrollment instructions for the free identity protection services.”

Mr. Cooper says it is actively monitoring the dark web without any evidence that the data related to this incident has been further shared, published, or otherwise misused. This may however change if it turns out that any ransomware demands are made and not met. At some points the data thieves may want to cash in for the stolen data.

Data breach

There are some actions you can take if you are, or suspect you may have been, the victim of a data breach.

  • Check the vendor’s advice. Every breach is different, so check with the vendor to find out what’s happened, and follow any specific advice they offer.
  • Change your password. You can make a stolen password useless to thieves by changing it. Choose a strong password that you don’t use for anything else. Better yet, let a password manager choose one for you.
  • Enable two-factor authentication. Where possible, use a FIDO2 2FA device. Some forms of two-factor authentication (2FA) can be phished just as easily as a password. 2FA that relies on a FIDO2 device can’t be phished.
  • Watch out for fake vendors. The thieves may contact you posing as the vendor. Check the vendor website to see if they are contacting victims, and verify any contacts using a different communication channel.
  • Take your time. Phishing attacks often impersonate people or brands you know, and use themes that require urgent attention, such as missed deliveries, account suspensions, and security alerts.
  • Consider investing in an identity monitoring solution which will alert you if your personal information is found being illegally traded online, as well as help you recover.

We don’t just report on threats – we help safeguard your entire digital identity

Cybersecurity risks should never spread beyond a headline. Protect your—and your family’s—personal information by using Malwarebytes Identity Theft Protection.


[ad_2]
Source link
1...594595596...1,482Page 595 of 1,482