Apple Defends Selling a “Pro” Laptop with 8GB of RAM in 2023

0
[ad_1]

After Apple debuted the new M3 series of MacBook Pro’s last week, there was quite an uproar about the entry-level MacBook Pro. Apple got rid of the 13-inch model and moved it into the 14-inch model which brings in that stunning display and the redesigned body. But what caught everyone’s is that at $1,599, Apple is giving you 8GB of RAM (or unified memory) on the M3 MacBook Pro. Naturally, that made quite a few people upset.

Selling a “pro” laptop in 2023 with only 8GB of unified memory to start is not a good idea. Sure it might be enough for a lot of things, but “pros” are usually those doing some video editing, maybe some coding, and such, and 8GB of unified memory is not enough.

Apple, however, disagrees that it is not enough. In an interview spotted by MacRumors, the company’s product marketing lead Bob Borchers argued that 8GB of unified memory is equivalent to a 16GB RAM Windows PC.

Comparing our memory to other system’s memory actually isn’t equivalent, because of the fact that we have such an efficient use of memory, and we use memory compression, and we have a unified memory architecture.

Actually, 8GB on an M3 MacBook Pro is probably analogous to 16GB on other systems. We just happen to be able to use it much more efficiently.

While macOS is a lot more optimized compared to Windows, and Apple does use it a lot more efficiently, let’s remember that this is unified memory and not just RAM. Meaning it is used for more than just the CPU.

What is unified memory on a Mac?

In talking about Apple’s laptops and desktops, you’ll notice that the term “RAM” is not mentioned much. In fact, Apple uses “unified memory” because that is a more appropriate name for what this is. With the new M-series of chipsets that Apple debuted in 2020, they have essentially a pool of memory that is used for the CPU and GPU. So when you see a maxxed out MacBook Pro that has 128GB of unified memory and think that’s way to much, remember the GPU is also using that memory.

Unified memory is also soldered to the chipset, which makes it faster, as it has less to do. That does also mean that you can’t upgrade your system after the fact, however. Which is not great for repairability, nor the environment. Two things that Apple are big on these days. But the trade-offs do seem to be worth it.


[ad_2]
Source link

Waze launches new safety feature for drivers

0
[ad_1]

Waze announced this week that a new safety feature is now making its way to the navigation app’s users on both iOS and Android devices. The especially important new feature will allow drivers to see a road’s crash history before they start their journey.

Unsurprisingly, the safety feature is powered by AI (artificial intelligence), but the Waze community does have a contribution in this too. According to Waze, the crash history alerts provided by its app combine historical crash data and important information about route.

Depending on typical traffic levels, whether it’s a highway or local road, elevation, and more, a road can be more or less prone to crashes. Thankfully, Waze’s new feature takes into consideration all these aspects and provides you with an alert in case it decides that the road you are going to drive on is dangerous.

The new safety feature has been implemented in a way that allows drivers to keep their eye on the road all the time, even when they receive an alert from the app. In fact, Waze announced that it has limited the number of alerts drivers see, and they aren’t shown at all on roads they regularly navigate.

Crash history alerts should now be available for all Waze users on mobile, regardless of their location.

[ad_2]
Source link

YouTube TV stands against cable TV providers amid FCC battle

0
[ad_1]

YouTube TV and Hulu joined the Preserve Viewers Choice Coalition to prevent streaming services from turning into outdated cable TV companies. The shift in the streaming services, if it happens, might need you to increase your budget to stay entertained.

In a recent development, local station owners of major networks like ABC, CBS, FOX, and NBC have been pushing the Federal Communications Commission (FCC) to categorize streaming services, including popular platforms like YouTube TV and Hulu, as cable TV companies. The potential consequences of this regulatory change have sparked concerns among many users. It prompted streaming services to band together in a bid to resist this transition.

The heart of the matter revolves around increased fees imposed by the FCC. Streaming services would then pass them down to consumers. This shift could translate into higher costs for streaming services and potentially burden users with increased subscription fees.

The battle of streaming platforms like YouTube TV, Hulu with Cable TV providers may hold a story for the future of television

YouTube TV and Hulu have now officially joined (via CCN) forces with the Preserve Viewer Choice Coalition. It further amplifies the coalition’s message and commitment to ensure a diverse range of choices for consumers. Bryce Harlow, the spokesperson for the coalition, expressed their shared belief in the importance of maintaining a competitive streaming market. Their goal is to keep it free from burdensome regulations.

The media landscape has undergone a monumental transformation in recent years. Streaming services like Fubo TV, YouTube TV, and Hulu Live have gained widespread popularity and have reached nearly 14 million households since 2014. This understanding is driving the mission of the local TV station owners to ask for an implementation of FCC policies on the streaming services. 

The battle between local TV station owners and streaming platforms could have profound and lasting effects on the television industry. It grants the FCC increased authority over streaming services. Additionally, it opens the door for local stations to demand higher compensation from these platforms.

The outcome of this conflict remains uncertain. So the implications for consumers and the streaming landscape remain yet to be determined. As the industry evolves, stakeholders on both sides of the debate continue to advocate for their interests and influence the future of television in the streaming era.


[ad_2]
Source link

Apple temporarily paused macOS 15 and iOS 18 development

0
[ad_1]

Apple’s development procedure for macOS 15 and iOS 18 has reportedly faced a setback. XDA (via Bloomberg) reports that the tech firm paused the development of its upcoming operating systems due to a plethora of bugs found in current versions.

Bloomberg’s Mark Gurman first reported that Apple sent an internal message to employees last week to notify them of a one-week pause in developing the following operating systems. Craig Federighi, Apple’s senior vice president of software engineering, reportedly requested the break as too many bugs were found.

Apple might delay the macOS 15 and iOS 18 release

The company has yet to stay tight-lipped about how many bugs were found on current versions. But it must have been enough to force Apple to prioritize solving iOS 17 and macOS 14 issues. Then task its employees with working on future operating systems.

Given the one-week break, the tech firm might also delay the macOS 15 and iOS 18 releases as many of its employees are working on bug fixing. Until now, we don’t have any confirmed report about the delays that might hit the next operating system. The good news is that Apple developers reportedly finished working on the initial development for macOS 15 and iOS 18. We hope the following operating systems don’t face a delay.

The iOS 17 and macOS 14 are currently out. Meanwhile, users are raising their voices about weird bugs that came to their devices after updating to the latest version. For example, a Reddit user wrote, “Apple Music widget does not have enough padding around it, and it’s really bothering me.”

It remains to be seen which bugs will be addressed in Apple’s upcoming updates. The tech firm already confirmed its iOS 17.2 could fix the Wi-Fi slowdowns and other connectivity issues. The update is now available in beta.

Apple has just released iOS 17.1.1 to fix some notable bugs, including the wireless connectivity issues on some BMW cars that caused NFC features like Apple Pay to break. Another bug fixed in the new release is the snow icon on the Weather Lock Screen widget.


[ad_2]
Source link

If you’re on Spotify Premium in the US, you get free 15 hours/month of audiobooks (not enough for Dostoevsky)

0
[ad_1]

Hit that pause button and move over to Spotify’s audiobook catalog!

If you’re a Premium user (or the plan manager for a Family/Duo account), you won’t even have to pay. Spotify is providing 15 hours of free audiobooks for its Premium users in the US.

A little over a month ago, paid subscribers in two countries got the same bonus from Spotify – UK and Australia (via 9to5Mac). The streaming giant said it would roll out the free 15-hour/month access to audiobooks for US users at a later date – and the date has come.

An official communiqué from Spotify says US readers can now access 200,000 titles in their catalog and, actually, not only Premium accounts could get the 15 free hours per month:15 hours may be enough to fit two audiobooks in some cases, but clearly not enough for Dostoevsky’s Crime and Punishment, audio recordings of which can be over 20 hours.

Per Spotify, their audiobook catalog has “something for everyone, including over 70% of bestselling titles: from of-the-moment sensations like Britney Spears’ The Woman in Me and Jesmyn Ward’s Let Us Descend, to beloved classics like Paulo Coelho’s The Alchemist and Emily Brontë’s Wuthering Heights”.

The genres span from “cozy mystery” to “historical romance”, as they put it.

Spotify is providing some interesting insights and statistics. According to a survey they ran, the younger generations in the USA are keen on listening to their books instead of reading them: Gen Z and millennials lead in audiobook listening, with 72% of 18-to-34-year-olds reporting that they listen to audiobooks.


[ad_2]
Source link

Galaxy A25 5G shows up at FCC, reveals charging speed and more

0
[ad_1]

Yesterday, we gave the world an exclusive look at Samsung‘s upcoming mid-range smartphone, the Galaxy A25 5G. While we didn’t have a launch date to share with you and still don’t, we now have more information about the device. The handset recently picked up the FCC certification, revealing its connectivity features and charging speed.

Samsung’s Galaxy A25 5G receives FCC approval ahead of launch

The FCC has certified the Galaxy A25 5G with the model number SM-A256U (via MySmartPrice). This is the US version of the device (the global version has the model number SM-A256B). The documents uploaded to the FCC’s website reveal that the phone will support 11 5G bands in the US: n2, n5, n25, n29, n30, n41, n48, n66, n70, n71, and n77. This is in addition to about 20 2G, 3G, and 4G bands.

The device will be available in an unlocked version with dual-SIM support. It boasts NFC, Bluetooth 5.2, Wi-Fi 5, and GPS. The FCC has also revealed that the Galaxy A25 5G will come with a microSD Card slot, allowing users to expand the device’s storage space externally. It’s unclear how much built-in storage will be available. There’s little hope that Samsung will offer more than 128GB of internal storage.

This certification listing has confirmed the phone’s charging speed as well. As expected, Samsung will provide 25W wired charging support here, unchanged from the Galaxy A24. Don’t expect wireless charging, though. Rumors have it that the handset will pack a 5,000mAh battery. It will be powered by Samsung’s Exynos 1280 processor with up to 8GB of RAM and Android 14-based One UI 6 software out of the box.

The Galaxy A25 is expected to feature a 6.44-inch display with a U-shaped notch at the center, which reportedly houses an unchanged 13MP selfie camera. The primary camera on the back could be an unchanged 50MP sensor too, flanked by an ultrawide lens and a macro camera. The phone has a side-mounted capacitive fingerprint scanner but may lack stereo speakers.

The new mid-range Samsung phone will come in four colors

As we exclusively revealed, the Galaxy A25 5G will be available in four colors: black, blue-grey, lime green, and light blue. Samsung launched the Galaxy A24 in April this year, so its successor should arrive around the same time next year. However, considering the recent developments, it could go official earlier. We should have more information about the new mid-range phone in the coming months.


[ad_2]
Source link

Holiday Gift Guide 2023: Best Gifts Under $500

0
[ad_1]
Holiday Gift Guide best under 500 2023 AH

As part of our gift guide series, we bring you some of the best gifts under $500. Well, some of our favorites below that level, as there are a ton of products out there to consider. All of the products on this list are techie, one way or the other. We did our best to compile a diverse list, so that there’s something for everyone here. We’ll focus on 5 products here, but below them, you’ll also find some honorable mentions to check out. Another thing to note is that we’re focusing on products between $250 and $500, as we have a separate list for things under $250. Having said that, let’s get going…

Best tiny fitness tracker: Ultrahuman smart ring

Ultrahuman smart ring image 1

A great fitness-tracking option for people who don’t like watches

There are a ton of different smartwatches on offer these days, the same goes for fitness bands. Not everyone wants to wear a smartwatch, though, and yet may want to keep track of their fitness and sleep quality. Well, there’s a solution for that. Smart rings have been on the rise for years now, and they can replace your smartwatch, to a degree. They may not be able to show you notifications, allow you to control music, and so on, but they can certainly keep track of your fitness.

When you think of smartwatches, you probably think of Oura, but there are other really compelling offerings out there Ultrahuman is actually a company that offers a very compelling product in that domain. The Ultrahuman Ring Air is the “world’s lightest sleep-tracking wearable”, says the company. This small ring packs a ton of sensors inside. It can track your heart rate and temperature, it has sleep tracking capabilities, and more. It is also water resistant up to 100m, so you can easily keep it on your finger at all times, other than the times you have to charge it.

Speaking of which, the company claims that this ring can offer 6 days of battery life, so chances are it’ll need a top-up once a week. This ring can also track calories, metabolic equivalents (METs), steps, and more. It’s impressive how many features Ultrahuman managed to stuff into a small product. This smart ring is thinner than many others we’ve seen, and it comes in four color options. Matte Black, Aster Black, Bionic Gold, and Space Silver options are on offer. The ring is, of course, available in a range of different sizes too. It is priced at $349, so it’s not exactly cheap, but it can be a great replacement for a smartwatch.

Ultrahuman smart ring (Amazon)

Best vertical ambient light: Philips Hue smart floor lamp

Philips Hue smart floor lamp image 1

A good floor lamp can bring some life into your living space

Having great lighting at home can really liven up the living space. There are all sorts of different lights on offer in the market, for different purposes. Philips actually has a great lineup of Hue lights on offer, ranging from regular smart light bulbs, to various fancy offerings. The company actually offers a rather nice floor lamp that we’ll talk about in this article, as it fits this price bracket perfectly. This floor lamp has a base onto which a rather thin light strip is attached, and oriented vertically.

The base itself is wider, of course, to keep the balance. This is a wired floor lamp, by the way, just in case that wasn’t clear enough. It’s meant to be used indoors, and it does offer compatibility with voice assistants, including Google Assistant, Alexa, and it also works with Apple HomeKit integration. The light is available in black and white variants, depending on what color is your room/furniture. Chances are that one of these two colors will fit perfectly, as the base itself will likely be hidden either way. These are also rather base colors.

The wattage we’re looking at here is 29W, and this light is dimmable. It can be great for mood lighting in any room, pretty much. You can choose between millions of colors, or shades of colors, from warm to cool tones. All that can be customized via Philips’ app that many of you are already familiar with. It’s even possible to connect this light to other lights from the company and connect up to 10 at the same time. It’s a great gift for both minimalists, and otherwise, as it’s a type of product that fits basically anywhere. The price tag here is $289 (down from $329.99), and the link is placed below.

Philips Hue smart floor lamp (Amazon)

Best & most versatile action camera: Insta360 GO3

Insta360 GO3 image 1

Action cameras have become very popular over the years. Companies are trying to trump each other with new designs, features, and so on. Well, Insta360 usually succeeds in that regard. The company released quite a few small cameras thus far, and the Insta360 GO3 is the cream of the crop. This camera is tiny, truly tiny, and yet it offers a ton of versatility, and can shoot really nice-looking content. The use cases for it are vast. This package consists of the camera itself, its down/charger/viewfinder, and some accessories that will come in quite handy.

There are various different setups with this camera offered on Amazon, with varying price tags, but we’re focusing on the ‘Travel Kit’, with 128GB of storage. This tiny camera magnetizes inside a charging case, when needed, and you can use it on its own too. When it’s on its own, it’s truly time, and can magnetize itself to metallic surfaces. In the package, you’ll also get a bracelet with some metal on it, so you can basically place it under your shirt, and then magnetize the camera over it.

In addition to that, a couple of more cases come in this particular package, that can be attached to things, or magnetized to surfaces. As if that’s not enough, a small tripod is also included here, along with a carrying case for all that. The camera on its own weighs only 35 grams, and shoots 2.7K videos. It is also waterproof up to 5m below the water surface, while the Action Pod is splashproof. Insta360 also has rather nice AI editing tools in its app, which complete the experience. If you, or someone you know, need a small camera to have on the go, for whatever purpose, the Insta360 offers great value. The ‘Travel Kit’ with 128GB of storage is priced at $479, but there are other choices available on Amazon (link below).

Insta360 GO3 (Amazon)

Best wireless microphones: DJI wireless mic pack

DJI Mic pack image 1

Good wireless microphones go a long way, especially if they come in pairs

Built-in microphones on smartphones are usually plenty good for voice calls, but for video recording, not so much. You usually need something better if you plan on recording videos with your phone, at least if you want them to sound professional. That is especially true if you’re not right next to your phone when you do it. That’s where wireless microphones can be of great use, but some of them can be quite finicky. So, if you’re looking for actually good wireless microphones, for yourself or for a gift, DJI has something to offer.

DJI offers wireless lavalier microphones in an all-in-one package. Not only will you find two wireless microphones here, which are really good, but a receiver as well. All that is placed into a charging/carrying case, which will keep them both safe and charged when you’re not using them. The design of these mics is really nice too, and both of them come with a clasp, so that you can attach them to a piece of clothing. They have a range of up to 250m (820ft), which is also one of the advantages here.

This setup is ideal for vlogging, interviews, outdoor recording, and so on. The transmitters will offer 5.5 hours of battery life, while the receiver offer 5 hours of battery life. That goes up to 15 hours with the charging case. All in all, that should be plenty for regular video-shooting scenarios. There’s also a magnetic attachment included in the package, so you can magnetize the transmitters, if you want. The receiver also comes with a built-in OLED touchscreen for added control. This package can record 48kHz 24-bit audio without compression, and it’s priced at $249 (down from $329).

DJI wireless mic pack (Amazon)

Best mixed reality headset: Meta Quest 3

Meta Quest 3 image 1

Dive into the virtual world with one of the most advanced mixed reality headsets

Mixed reality headsets are getting more and more traction these days. They can change your perspective on gaming, basically, and could end up having more uses down the line. Nowadays, however, they’re mostly focused on gaming. That being said, the Meta Quest 3 is one of the best offerings on the market and it just fits in our price bracket here at $499. This offering on Amazon brings not only the headset itself, but also the Asgard’s Wrath 2 game with it. Other bundles are available too, however, and you can check them out on Amazon.

The Meta Quest 3 has double the processing power the Quest 2 offered, which offered a lot of new doors for the gadget. The 4K+ Infinite Display is set right in front of you, and proper audio too. Touch Plus controllers provide a lot more control, and a better feeling than ever before. There are also over 500 apps available for the device as we speak, ranging from games, fitness apps, entertainment ones, wellness apps, and so on. That library keeps on growing by the day, by the way.

The Meta Quest 3 offers up to 2.2 hours of usage on average, though you can extend that if you fire up the Battery Saver mode. Plenty of interesting games are available for this thing, and chances are most of you will opt to get it because of that factor. That’s why it can be a great gift for someone who wants to dabble in mixed reality headsets. This is one of the best on the market, and some games are really next level. Things will only get better from this point on. Games like Assassin’s Creed Nexus VR will really push things forward, and chances are many more like it will arrive in the next couple of years. Follow the link below to check out this bundle, and see what else is on offer, if this one doesn’t suit you.

Meta Quest 3 (Amazon)

Honorable mentions

Here are a couple of more products in this price bracket that you may like…

Sony PlayStation 5

PlayStation 5 image 1

One of the easiest recommendations at this price tier is the PlayStation 5. It’s a rather obvious one, so we’ve pushed it down to the ‘honorable mentions’ category. This console grants access to a ton of games, if whoever is using it is willing to pay for those games, of course. It’s the most popular gaming console in the market, and it comes with a single gamepad. As many of you know, the device comes in a standard white color with black accents, and includes rather powerful internals as well. You’ll get all the necessary cables here too. Sony’s gaming console costs $499.99.

Sony PlayStation 5 (Amazon)

Sony WF-1000XM5

Sony WF 1000XM5 image 1

If you know someone who needs a really great pair of truly wireless earbuds, the Sony WF-1000XM5 earphones fit the bill. These are some of the best truly wireless earbuds on the market, and they are now available for $298. They come in black and white colors, and do include noise cancelling too. Sony’s AI-based noise cancelling algorithm is great, and the ‘Speak-to-Chat’ option is also quite useful. Needless to say, these earbuds also offer quality build, and are a full package, basically.

Sony WF-1000XM5 (Amazon)

Cubii GO

Cubii GO image 1

The Cubii Go is the least techy product on this list, and yet it can be immensely useful for some. This is an under-desk elliptical. Why would anyone need it? Well, sitting at a desk for longer periods of time is not healthy, so if you can get your feet moving while you work on something, that is welcomed. Getting this elliptical, plus perhaps a standing desk, and a proper ergonomic chair can save you a lot of hassle down the road. The Cubii Go comes with an illuminated LCD display, and offers adjustable push resistance. It has built-in wheels too, and the same goes for a handle. The Cubii Go is priced at $279.99.

Cubii GO (Amazon)

The post Holiday Gift Guide 2023: Best Gifts Under $500 appeared first on Android Headlines.


[ad_2]
Source link

US consumer watchdog wants Apple Pay, Google Pay, and PayPal to be regulated as banks

0
[ad_1]

The rise of mobile payment apps like Apple Pay and Google Pay is undeniable, with statistics showing that the global mobile payment market reached a staggering $53 billion in 2022. These apps have become ubiquitous, with the top 10 mobile payment apps, including Apple Pay and PayPal, accumulating a combined user base of 3.37 billion. Despite being in the top 10, Apple Pay, with an estimated 507 million worldwide and 43.9 million people in the United States regularly using it, still has many mountains to climb.

However, amidst this surge in popularity, the US Consumer Financial Protection Bureau (CFPB) has proposed a significant regulatory shift (via Reuters). The CFPB aims to subject tech giants’ digital payment and smartphone wallet services, including Google, Apple, PayPal, and Block’s CashApp, to bank-like supervision.


This means that these companies will be subject to scrutiny from CFPB examiners, who will review their privacy protections, executives’ conduct, and adherence to regulations prohibiting unfair and deceptive practices.


If implemented, this proposal would encompass approximately 17 companies collectively handling over 13 billion payments annually. While GooglePay, ApplePay, PayPal, and CashApp are specifically mentioned, the CFPB has declined to disclose the identities of the other platforms that would fall under this regulatory umbrella.


In a recent speech, CFPB Director Rohit Chopra highlighted the agency’s findings regarding tech giants’ data collection practices. According to Chopra, these companies amass vast amounts of consumer payment data with minimal restrictions, insufficient transparency, and confusing corporate policies, potentially exposing consumers to the risk of “Chinese-style surveillance.”


The new proposal, applicable to companies processing more than five million transactions per year, aims to address these concerns by ensuring both traditional financial players and the tech sector are subject to equivalent oversight.

 
This approach is welcomed by consumer banks, with the Consumer Bankers Association commending the proposal as “a step in the right direction.” However, tech giants have expressed apprehension, arguing that the proposed regulations would stifle innovation and harm consumers.

 
Regarding a similar case in Australia last month, both Google and Apple have said that customers only use their phones to use cards issued by banks to make payments. This implies that the tech giants do not store or process payment data themselves, and any concerns about data collection should be directed towards the respective banks.


The proposal is currently subject to a notice-and-comment period expected to conclude in early 2024. Following this review period, the CFPB will assess the feedback received and determine whether to finalize the rule.


[ad_2]
Source link

Lazarus-Linked BlueNoroff APT Targets macOS with ObjCShellz Malware

0
[ad_1]

Jamf Threat Labs’ security experts have discovered a new malware variant attributed to the BlueNoroff APT group. According to the company’s blog post published on 7 November 2023, this campaign, like BlueNoroff’s previous campaigns, seems to be financially motivated.

The threat actor has a history of targeting cryptocurrency exchanges, venture capital firms, and banks. BlueNoroff is a subgroup of the larger North Korean state-backed group called Lazarus.

The malware, dubbed ObjCShellz, is part of the RustBucket campaign, researchers believe. It is a later-stage malware variant of BlueNoroff’s RustBucket malware, because of their similar characteristics.

For your information, a later-stage malware is one that’s executed after the attacker has gained initial access and used for data exfiltration, lateral movement within the network, or maintaining persistence.

The malware was discovered while performing routine threat hunting. Further probing revealed that it was a Mach-O universal binary communicating with a domain (swissborgblog registered on May 31, 2023) that the company had previously classified as malicious because it was a fake version of the original domain (swissborg.com). The attackers created a fake crypto exchange website on this fake domain to trick users.

The malware is ad-hoc signed and can split its C2 URL into two different strings to evade detection. The IP address researchers detected (104.168.214151) was also linked to the same APT actor from their previous campaigns.

 “We have observed submissions to VirusTotal from countries such as Japan and the US in September and October” researchers noted.

ObjCShellz is written in Objective-C, a programming language used for macOS applications. It is used as a macOS implant that establishes C2 communication after infiltrating the device and downloads/executes multiple payloads. It is a lightweight malware featuring advanced obfuscation features. It operates as a simple remote shell and executes shell commands received from the C2 server. The malware sends a POST message to the fake URL version and gains information about the malware process before retrieving the operatingSystemVersionString to find out the macOS version.

Researchers could not determine how initial access was achieved. However, they are sure that this is a later-stage malware used in this multi-stage attack to run remote shell commands manually on Intel and Arm Macs.

The threat actor generally reaches out to victims as an investor or creates domains belonging to a legitimate crypto exchange. In this campaign too, the attacker contacts the victims as a head hunter.investor, offering them something beneficial or a partnership. Despite being simple, this malware is very functional and can allow threat actors to carry out a range of malicious objectives.

Hackread.com has observed a continuous surge in attacks against macOS devices and BlueNoroff’s activities. Earlier in November, Elastic Security Labs detected Lazarus group using a new macOS malware dubbed KandyKorn, targeting cryptocurrency users and blockchain engineers. Back in 2021, AT&T Alien Labs researchers discovered that threat actors were harnessing malware-infected Macs and Windows devices as proxy exit nodes to reroute proxy requests. In December 2022, Kaspersky researchers reported that BlueNoroff is targeting cryptocurrency-related financial entities worldwide with new, sophisticated malware strains and 70 fake domains of venture capital firms and banks.

To protect against ObjCShellz malware, organizations must keep software and operating systems patched against new security flaws, use EDR (endpoint detection and response) solutions to monitor network activities, and employ network segmentation strategies to limit malware distribution by isolating critical systems.

Cybersecurity expert at the California-based Menlo Security browser security provider firm, Mr. Ngoc Bui, shared his findings on the BlueNoroff APT actor exclusively with Hackread.com. Bui noted that it has been active since 2016-2017 and its key targets are financial entities in Europe and North America. 

“BlueNoroff is a North Korean-backed advanced persistent threat (APT) group that has been active since at least 2016/2017. The group is known for targeting cryptocurrency exchanges, venture capital firms, and banks in North America and Europe. BlueNoroff’s attacks are typically financially motivated, and the group has been known to use a variety of malware and techniques to steal sensitive data and funds from its victims.”

About their malware RustBucket, Bui noted that this backdoor is written in rust and collects basic system details before contacting the C2. 

“RustBucket is a backdoor written in rust. The backdoor collects basic system information and communicates to the URL provided via the command line. Supported backdoor commands include file execution and exit. RustBucket is a malware campaign also attributed to BlueNoroff, first uncovered in 2021. It uses phishing emails posing as job recruiters to infect targets with backdoor malware that can steal data and remotely control infected systems,” Bui explained.

Bui believes that Jamf Threat Labs’ discover holds significance because it highlights that the actor is continually improving its malware strains. 

“The discovery of the new malware strain by Jamf Threat Labs is significant because it shows that BlueNoroff is continuing to develop new and sophisticated malware. The fact that the malware was undetected by VirusTotal at the time of uploading suggests that BlueNoroff is taking steps to evade detection. For North Korea, this is a big deal if you have been following the different APTs and activities from that country.”

 Bui noted that ObjCShellz is a big threat for macOS users “because it is disguised as legitimate software and can be difficult to detect. The malware can also steal sensitive data, such as cryptocurrency wallets and passwords. And a low detection rate means it may get past AV.”

Colorado-based cybersecurity advisory services provider Coalfire’s vice president Andrew Baratt told Hackread.com that it is hard to draw definite linkages between malware.

“It’s hard to really draw official linkages between malware that shares commonalities as many disparate threat actors borrow and steal from other malware campaigns. Copying legit sites is a fairly common tactic to evade detection on the C2 side of a malicious capability.” 

“We’ve been pointing out for some time that VirusTotal (VT) is only as good as its first observation time, and if malware authors are building up offline testing capabilities, the time it takes for detection is going to be much more significant. We also potentially have the signs of AI usage creeping into malware development. Historically, it can be seen in VT as it has been used as a test run for a piece of malware – as a cross over for detection -then multiple iterations are used until evasion is achieved. The challenge for the malware is that this creates a timeframe and VT, now owned by Google, has a window of advantage to do further analysis. If they’re using generative AI to help modify the malware, there is a real potential for new evasion techniques to be used with a reasonably high degree being under the purview of VT,” Baratt stated.


[ad_2]
Source link

Google could soon let you uninstall apps remotely

0
[ad_1]

Google introduced its latest Play Store v38.3 (2023-11-06), with a changelog that includes, a “New feature to help you uninstall apps on connected devices” to help you uninstall apps remotely. You might see the ability to do so in the near future.

Android powers a wide range of devices ranging from smartwatches to Android TVs. Talking about the Play Store, it works on all of the platforms. However, the experience you get, is not quite as seamless as on your phone or computer.

Not all of them with different form factors can seamlessly access the installation or uninstallation process of an app. They have different characteristics to how you interact with them for certain tasks. For example, typing in the TV or navigating through your watch to find out the app you want.

Thankfully, you could already install an app on one of your devices (such as your Wear OS watch) remotely from your phone or computer. It works via the Play Store, when connected to the same Google account.

Notably, it was only the installation process. There was no support for remote uninstalls up until this point. As Android Police put it, there’s very little chance that you will need Netflix on your TV after you cancel the subscription and uninstall the app from your phone.

Improved integration for ‘connected’ Android devices to let you uninstall apps remotely

Now, the company has revealed a new feature to help you easily uninstall apps on your connected devices via the Play Store.

Google didn’t provide many details about this feature, leaving users in suspense regarding which device categories it would support. However, it’s reasonable to assume that this feature will have a significant impact on Wear OS smartwatches at the very least. Moreover, tablet and TV apps could theoretically also be uninstalled via your phone using this method.

This feature should be considered as a welcome addition to the ecosystem, even if it remains limited for the smartwatches in the beginning.

Either way, this development showcases Google’s efforts to create tighter integration between phones and connected devices inside the Android ecosystem.


[ad_2]
Source link