Spyware disguised as ‘RedAlert’ app targeting Israeli Android users

0
[ad_1]

Security researchers have discovered new spyware targeting Android users in Israel. Threat actors are using a fake version of the “RedAlert – Rocket Alerts” app to steal information from the victim’s phone. The app can collect the user’s contact list, messages, call logs, phone IMEI, logged-in emails, and more data.

Threat actors target Israeli Android users with spyware-laced “RedAlert” app

RedAlert – Rocket Alerts is a genuine open-source app that Israeli citizens use to get real-time alerts about incoming rockets or missiles. The app has been around on the Google Play Store for a long time now but has seen a sudden rise in popularity after the Israel-Gaza conflict escalated earlier this month. Reports say more than 5,000 rockets have been launched into the country by Hamas since October 7.

In the wake of this war, Israeli citizens are relying on the RedAlert – Rocket Alerts app to get timely alerts about airstrikes and seek safety. Developed by Elad‌‌ Nava, the app has already garnered more than one million downloads on the Play Store. It’s also available for iPhones on the Apple App Store. Unfortunately, some people search for apps online rather than in the stores. Threat actors are exploiting this to trick them into downloading spyware.

According to Cloudflare, the people behind this attack created the website “redalerts[.]me” on October 12, 2023, to distribute the spyware-laced app. It includes two buttons to download the app for Android and iOS platforms. The latter button takes users to the genuine app on the App Store. However, the Android download button downloads a fake APK directly onto the user’s device.

Unsuspecting users who visit the website looking for the RedAlert – Rocket Alerts app think they have downloaded the genuine app and proceed to install it. Since the fake version is built using the real app’s source code, it offers the same functionality. So most people don’t notice any anomaly after installation either. However, the fake app requests additional permission from the user to collect data that it doesn’t require.

This attack reminds us about the dangers of sideloading apps

When launched, the spyware version of RedAlert – Rocket Alerts abuses the permissions to steal data and uploads it to servers operated by the threat actors. The app employs anti-analysis tactics such as anti-debugging, anti-emulation, and anti-test to avoid the detection of its malicious activities.  However, anyone can differentiate between the real and the fake app by checking permissions. The latter asks for too many unnecessary permissions.

This attack once again demonstrates the dangers of sideloading apps from unknown sources. You should always download apps from official sources, such as the Google Play Store. The website used to distribute the spyware version of the RedAlert – Rocket Alerts app has been taken down, but the attackers could soon launch a new domain. If you’re using this app, make sure that it’s downloaded from the Play Store and update it to the latest version.


[ad_2]
Source link

New accessibility features coming to Google Maps

0
[ad_1]

Google has just revealed a slew of accessibility features coming to its Maps app in the coming weeks on Android and iOS devices, as well as other platforms. Some of these features are rolling out as we speak, while others are supposed to be released later this year.

Starting today, Google is adding a new identity attribute for the disability community on Maps and Search, which should provide customers with more details about a business. For this particular feature, Google has worked with Lavant Consulting and its internal Disability Employee Resource Group.

Basically, when a business chooses to identify as disabled-owned in its Business Profile, the new attribute will show up on their listings in Maps and Search.

Next, Google announced that it’s bringing screen reader capabilities in Lens in Maps. Although Lens in Maps has been available for quite some time, Google is making this feature more accessible for people who are blind or low-vision by adding screen reader capabilities.

To take advantage of this accessibility feature, simply tap the camera icon in the search bar and lift the phone to receive auditory feedback of the place around you when screen reader is enabled. According to Google, this feature will be coming to iOS today, while Android users will get it later this year.

Another useful accessibility feature rolling out today is the option to request wheelchair-accessible walking routes in Maps. This feature is coming to iOS and Android users globally.

Last but not least, Google is bringing information related to wheelchair-accessible places on Maps to businesses and place pages for Android Auto and cars with Google built in. Starting today, searching for a place in Google Maps and clicking on it will bring up a wheelchair icon if the destination has a step-free entrance, accessible restroom, parking or seating.


[ad_2]
Source link

OnePlus Open display & camera specs appear, along with more images

0
[ad_1]

Even more OnePlus Open info surfaced, as we’re waiting for the official launch. The phone is coming today, and now we get to check out the OnePlus Open display and camera specs, while more images surfaced as well.

Plenty of OnePlus Open info leaked, including display & camera specs

Let’s kick things off with the display info, shall we. The main display on the phone will measure 7.82 inches, while the cover display will measure 6.31 inches (20:9 aspect ratio). Both panels will offer a 120Hz refresh rate, and both will be immensely bright. They’ll peak at 2,800 nits, which will make them the brightest panels in the industry.

The main panel will include UTG (Ultra Thin Glass) protection, while the cover display will come with a ‘Ceramic Guard’. Also, both of these panels will be LTPO displays. OnePlus will call them both ‘ProXDR’ displays.

‘Triple Spatial Speakers’ will be included, and the phone is coming in two color options

Max Jambor, a well-known tipster who shared the display info, also revealed that the device will include 16GB of RAM. It will also ship with ‘Triple Spatial Speakers’, OxygenOS 13.2, and will come in Emerald Dusk and Voyager Black colors. In plain words, those will be green and black colors. The former will include glass on the back, while the latter will feature vegan leather. You can actually check out both of them in the image below.

OnePlus Open image leak 701

What about the cameras? Well, the OnePlus Open will include three cameras on the back, and one on each of its displays. A 48-megapixel main camera (Sony’s LYTIA-T808 sensor, 1/43-inch sensor, f/1.7 aperture, OIS) will be backed by a 48-megapixel ultrawide camera (1/2-inch sensor, f/2.2 aperture). A 64-megapixel telephoto camera (f/2.6 aperture, 3x optical zoom, 145mm lens) will also be included.

OnePlus Open image leak 702

On the main display, OnePlus will include a 20-megapixel selfie shooter. On the cover panel, you’ll find a 32-megapixel unit. Both displays will have camera holes in them.

OnePlus also released a new video teaser

In addition to all this, some images of the phone surfaced too, and the company’s new video teaser. That video teaser got published on X (formerly known as Twitter), and is shown below.

Now, as far as other images are concerned, they were shared by Ishan Agarwal, a tipster. Check out the gallery below, and you’ll see the OnePlus Open from several angles.


[ad_2]
Source link

Caviar intros $9,000 ‘UFO’ iPhone 15 Pro series collection

0
[ad_1]

Caviar has announced its UFS iPhone 15 Pro series collection, which is very pricey, of course. This company is well-known for announcing luxury iterations of the most popular smartphones out there, and its latest series includes Apple’s new flagships.

Caviar announces $9,000 iPhone 15 Pro series ‘UFO’ collection

This is not the first iPhone 15 Pro collection Caviar announced, though. Last month, the company announced several different gold-sprinkled iPhone 15 Pro iterations. Those phones cost over $8,000.

That being said, the new UFO collection is different, and yet it’s also luxurious, and immensely expensive. These devices incorporate materials from outer space, it seems. They come with fragments from the Murchison meteorite containing amino acids.

It is said that this meteorite is likely 7 billion years old, which means it’s older than both Earth and the Solar System. In other words, it’s the oldest material on the planet.

In any case, that material is a part of the so-called Alien chassis design, as Caviar refers to it. You will notice the Alien on the back of this phone. It is joined by two other options, actually.

There are three different versions on offer here

In addition to the ‘Alien’ one, Caviar also offers Astral and Starship variants, both of which are space-themed. The ‘Astral’ model shows you an image of the universe on the back, and offers more flare than the other two variants (color-wise).

For these models, Caviar says that it used meteorites from the Moon and Mars. 24K gold has also been used here, of course, this is Caviar after all. In addition to that, you’re also getting aviation-grade titanium, and stainless steel as build materials.

Yes, all of these models are very expensive. You’ll need to pay $9,000 for one of them, which is something very few people are willing to pay. Caviar makes luxurious devices for a reason, and the company doesn’t make a lot of them.


[ad_2]
Source link

From free to fee: X tests a new $1/year subscription tier in two countries

0
[ad_1]

Last month, Elon Musk spilled the beans on his plans for X (formerly Twitter), hinting at a shift towards an all-paid model. Shortly after, he clarified that there will always be a free option for users. However, recent developments suggest that X is getting closer to a paid structure.

X is currently testing a new subscription tier named “Not A Bot” in two countries— the Philippines and New Zealand. The subscription plan comes at a modest cost of $1 annually, but keep in mind that prices may vary based on the country and currency.

Under the “Not a Bot” plan, new users can enjoy essential features during this trial period. This includes the ability to tweet, retweet, like posts, and respond to posts. Users who choose not to subscribe will be limited to reading posts, watching videos, and following accounts.

To sign up for new accounts, users will need to verify their phone numbers. They will then have three subscription options— the $1/year Not-a-Bot plan, X Premium, and the Verified Organizations plan. It remains uncertain if these terms will stay the same when X introduces the paid-for-all subscription more widely.

In a recent post on X, Musk declared that the platform will remain free for reading but will incur a $1/year fee for writing. According to Musk, this approach is crucial to combating bots without obstructing genuine users, making manipulation of the platform 1000X harder.
X explained that the Not a Bot subscription plan’s purpose is to strengthen existing efforts to curb spam, platform manipulation, and bot activities. This trial aims to assess a potent measure to combat bots and spammers on X while maintaining platform accessibility through a nominal fee. Existing users are not affected by this test.

However, there’s a risk associated with placing X behind a paywall—losing a substantial user base. This potential loss could subsequently impact advertising revenue, which currently forms the bulk of the company’s income.


[ad_2]
Source link

Russian Hackers Bypass EDR to Deliver Weaponized TeamViewer

0
[ad_1]

TeamViewer’s popularity and remote access capabilities make it an attractive target for those seeking to compromise systems for their gain.

Threat actors target TeamViewer for their illicit purposes because it is a widely used remote desktop software with potential security weaknesses. 

Exploiting vulnerabilities in TeamViewer can provide unauthorized access to systems and sensitive data, enabling cybercriminals to carry out various malicious activities, such as data theft, financial fraud, or even using compromised systems to launch attacks on other targets.

In late 2022, QiAnXin Threat Intelligence Center identified a new threat actor group using fake software download sites with manipulated search rankings to distribute unofficial but seemingly valid installation packages created with Inno Setup.

Document
FREE Demo

Implementing AI-Powered Email security solutions “Trustifi” can secure your business from today’s most dangerous email threats, such as Email Tracking, Blocking, Modifying, Phishing, Account Take Over, Business Email Compromise, Malware & Ransomware

Russian Hackers Bypass EDR

Attribution was challenging due to the attackers’ complex attack chain and manual operations. 

In mid-2023, TeamViewer’s DLL Sideloading was delivered via SFTP, hinting at a connection to the attacks on security researchers in 2021.

Phishing activity timeline
Phishing activity timeline (Source – Qianxin)

The execution chain focuses on SSH reverse tunnels, leveraging OpenSSH to bypass EDR endpoint detection. 

Attackers employed sftp-server.exe to deliver the TeamViewer hijacking component, revealing the use of MINEBRIDGE RAT. 

AnyDesk and PsExec were also used for lateral propagation, with data decryption occurring within the victim’s user context.

Attack chain
Attack chain (Source – Qianxin)

In total, four legitimate signatures were used in this phishing operation, some still valid in the report, with an enigmatic use of Amadey Trojan.

  • GUTON LLC: FC2BDF5BD23470669F63B9A5BAE6305160DCBC67
  • NTB CONSULTING SERVICES INC: A05536924F1BA8F99BA6B1AA3C97B809E32A477E
  • OOO RIMMA: A1C753F5271F24B8067AC864BB4192C37265840C
  • KATEN LLC: 9A865A28A85CABC3F79C88BE54AF3B20962BC35C

Researchers uncovered a new MINEBRIDGE RAT variant with LLVM obfuscation, removing old C&C instructions. 

The sample retrieves a DLL from the server to execute PowerShell commands for SSH component download, consistent with previous scripts.

Attribution

The group has been active since 2021 based on domain registration times. They used Cloudflare CDN to obscure their IP, but few OSINT reports on MINEBRIDGE made tracking challenging.

QiAnXin’s data shows that the malicious domains communicated with both corporate dedicated lines and home broadband in mainland China during their Cloudflare CDN phase.

The enterprises involved were in the following sectors:-

  • Cryptocurrency
  • Electronic components
  • Technology
  • Investment
  • Healthcare

Recent findings suggest Storm-0978 (RomCom), TA505, and MINEBRIDGE have strong connections, possibly indicating shared activities beyond economic motivations.

Protect yourself from vulnerabilities using Patch Manager Plus to patch over 850 third-party applications quickly. Take advantage of the free trial to ensure 100% security.


[ad_2]
Source link

Rumors suggest improved screens for entire Galaxy S24 lineup

0
[ad_1]

Samsung is rumored to equip its Galaxy S24 flagships with new and improved screens. All three models will get LTPO (Low-temperature polycrystalline oxide) OLED displays featuring M13 organic material. The company will also offer a higher level of peak brightness across the lineup. Apart from the screen size, the only other difference will be a lower resolution panel on the base model, tipster Revegnus confirms.

The entire Galaxy S24 lineup will get a display upgrade

Samsung’s flagship smartphones have featured M12 OLED displays since the Galaxy Z Fold 4 and Galaxy Z Flip 4 last year (the Galaxy S22 series used M11 panels). The company also made displays for the iPhone 15 lineup using M12 material. However, for the Pixel 8 series, it applied the newer M13 technology. The same display solution is now coming to the Galaxy S24 lineup as well.

M13 OLED panels are thinner and more power-efficient than M12. Samsung is seemingly utilizing these power gains to offer higher brightness. All three Galaxy S24 models will boast an eye-searing peak brightness of 2,500 nits. That’s 750 nits brighter than the Galaxy S23 display. This upgrade will make the new flagships much more usable under direct sunlight, with screen colors appearing less washed out.

Samsung is also upgrading the Galaxy S24+ to a WQHD+ screen resolution (1440 x 3120 pixels). This is something it has reserved for the Ultra model since the Galaxy S20 series. All subsequence Plus models have featured an FHD+ screen (1080 x 2340 pixels), including the Galaxy S23+. So it’s another big upgrade in the pipeline. Unfortunately, the base Galaxy S24 won’t get a higher resolution screen. It is stuck with an FHD+ panel.

The screens are getting bigger too

The Galaxy S24 and Galaxy S24+ are getting slightly bigger screens than their respective predecessors. Rumors say the devices will feature 6.2-inch and 6.7-inch displays, respectively. The Galaxy S23 has a 6.1-inch panel, while the Galaxy S23+ features a 6.6-inch display. The Ultra model’s screen size remains unchanged at 6.8-inch, though the switch from a curved display to a flat one makes it slightly wider.

The smaller two Galaxy S24 models are also getting bigger batteries. We are expecting up to 200mAh additional capacity. Samsung is keeping the charging speed unchanged at 25W for the base model and 45W for the Plus and Ultra models. The other key differentiation between the phones will be the processor. The Galaxy S24 Ultra will ship with the Snapdragon 8 Gen 3 globally, but the other two models will get Exynos 2400 in some markets.


[ad_2]
Source link

Snapdragon 8 Gen 3 could bring massive GPU gains

0
[ad_1]

Qualcomm is gearing up to launch its next-gen flagship smartphone chipset later this month. The Snapdragon 8 Gen 3 will debut at the Snapdragon Summit 2023, which begins on October 24. The new chip is already generating a lot of buzz in the industry thanks to the massive performance gains it brings to the table, particularly the “For Galaxy” version that will be exclusively available to Samsung. Benchmark entries show it exceeds GPU estimates.

Snapdragon 8 Gen 3 For Galaxy exceeds estimates in GPU benchmark

The upcoming Qualcomm processors scored more than 17,000 in Geekbench 6’s Vulkan benchmark. The US version of the Galaxy S24+, which will use the Snapdragon 8 Gen 3 For Galaxy, achieved a score of 17,013, while the Ultra model topped it with a score of 17,134. The same test yielded a score of 9,379 with the Galaxy S23 Ultra, which features the “For Galaxy” version of the Snapdragon 8 Gen 2.

Going by these benchmark scores, the next-gen Qualcomm chip’ Adreno 750 GPU will bring about an 80 percent performance boost over its predecessor. That’s double the early estimates of a 40 percent GPU performance gain. Of course, you won’t see the same level of improvement in every application or test scenario. In fact, we are talking about pre-production units here, so the overall gain may still be lower on the retail units of the Galaxy S24 phones.

However, the Snapdragon 8 Gen 3 should bring a notable GPU performance gain over the Gen 2 chip. The new chip also upgrades to the latest ARM CPUs and replaces one efficiency core with a faster mid-core. Qualcomm has clocked all CPUs at a higher frequency too. With these changes, the CPU performance should also see a massive jump. As usual, the “For Galaxy” version will have a faster CPU than the standard version.

Snapdragon 8 gen 2 Gen 2 Vulkan GPU benchmark

Samsung’s Exynos 2400 is facing a tough fight

Unlike the Galaxy S23, the Galaxy S24 series won’t feature the new Qualcomm chip exclusively. Samsung will ship the Ultra model with it globally, but the base Galaxy S24 and Galaxy S24+ will get the Exynos 2400 in some markets. Early CPU benchmarks have shown mixed results with the new Exynos and Snapdragon processors delivering comparable results.

However, on the GPU side, it looks like a tough fight for the Exynos 2400’s Xclipse 940 GPU. The global version of the Galaxy S24+, which features the new Samsung chip, scored 15,479 in Geekbench 6’s Vulkan benchmark, the same GPU test where the Snapdragon-powered model scored 17,013. If the real-life performances of the two solutions see a similar gap, that would be hugely detrimental to Exynos’ already-ill reputation.

That said, early benchmark scores are never a true measure of a device’s real-life performance. Case in point, the Exynos-powered Galaxy S24+ outperformed the Snapdragon-powered Galaxy S24 Ultra in a recent CPU benchmark run. The Exynos 2400’s Xclipse 940 GPU also yielded a higher score than the Adreno 750 in the OpenCL test (14,908 vs. 14,731). We should get a clearer picture once the new chips are official.


[ad_2]
Source link

Some Pixel 8 Pro units hit by pink text issue

0
[ad_1]

The Google Pixel 8 series was announced quite recently, and initial issues are starting to surface. Some users seem to be reporting a pink text issue on the Pixel 8 Pro. This problem occurs on the always-on display only, though.

Some Google Pixel 8 Pro smartphones got hit by the pink text issue

For some users, the text appears in a pink color, and for others in yellow. Do note that it’s not happening to all units, but just some of them. Such reports have started surfacing on Reddit.

What’s interesting is that it’s not happening to all text on the always-on display. Only a portion of the text is colored, the rest is white (on a black surface) as Google intended. You can see the transition below.

Some users claim that this issue happens only in very dark environments. When they’re in normal light, or when there’s some light around, everything appears to be normal. It sure is an odd problem.

The issue appeared on both stable Android 14, and QPR1 Beta

Yes, this issue is present on stable software, but Pixel 8 Pro users who are on the Android 14 QPR1 Beta are also experiencing it… well, some of them. This is most likely a software issue, but we can’t know for sure. Let’s hope it’s not hardware-related.

Those of you who are wondering if it’s happening on regular Pixel 8 units, well… not yet. We haven’t seen a single report mentioning the Pixel 8, only the Pixel 8 Pro. So, that’s a positive, at least.

Google is likely aware of this issue at this point, but the company has not communicated anything just yet. Let’s see if the next update will fix the issue, or if it’s a deeper problem.

Pixel smartphones are no strangers to odd problems. Both the Pixel 6 and Pixel 7 series flagships had their fair share of problems, mainly with bugs. Let’s hope the same will not be the case with the Pixel 8. The two phones have been faring well thus far.


[ad_2]
Source link

All iPhone 17 models could feature high refresh rate displays

0
[ad_1]

After the launch of the iPhone 15 series, many tech enthusiasts were once again disappointed that Apple was still using 60Hz displays on the non-Pro models. And although their arguments are valid, considering no Android phones in the sub-$800 price range feature a 60Hz display, others argue that regular iPhone buyers do not care about the refresh rate. However, according to a report from Ross Young, CEO of Display Supply Chain Consultants (DSCC), all this could change, as Apple is looking to incorporate 120Hz LTPO displays in the iPhone 17 and iPhone 17 Plus.

At present, the Pro models of the iPhone 15 series boast a 120Hz ProMotion screen, thus giving a smooth and highly responsive display experience. However, as per the report, Apple is on track to introduce the 120Hz in the non-Pro models by the year 2025. Moreover, the company would also include LTPO technology, enabling the phones to adjust their refresh rates based on the displayed content.

Furthermore, Young’s roadmap hints at potential changes in the screen size of the iPhone 17 series. While the iPhone 16 and 16 Plus would retain the familiar 6.12-inch and 6.69-inch displays, the iPhone 17 series will see a slight bump in screen size, with the iPhone 17 and iPhone 17 Plus featuring 6.27-inch and 6.86-inch displays, respectively. Additionally, the new devices will have a slight change in their aspect ratios.

Why would Apple give high refresh rate displays to non-Pro models?

While the iPhone 16 Pro and 16 Pro Max will maintain the same high refresh rate LTPO displays, the iPhone 17 Pro models could undergo significant transformations. This is because Apple is currently working on replacing the Dynamic Island with an under-display Face ID scanner and introducing a punch-hole cutout for FaceTime and selfies, thereby providing Apple with a significant differentiating factor for the Pro series. However, it is important to note that the Dynamic Island will continue for the non-Pro models in subsequent years.

ross young iphone display roadmap


[ad_2]
Source link