Heads up, Apple users! Researchers have caught active exploitation of three zero-day flaws in Apple devices for spyware attacks. Nonetheless, Apple addressed the matter with the latest security updates for iOS, rolling out the patches to eligible devices.
Apple Zero-Day Flaws Exploited Before Patch Releases
According to a recent post from The Citizen Labs, their researchers and Google’s Threat Analysis Group (TAG) observed a tricky exploit chaining three different zero-days in Apple’s iOS devices. Mainly, they noticed that hackers deploying the Predator spyware on target iPhones via this exploit.
Specifically, The Citizen Lab discovered this new exploit while analyzing a victim device. As described, a former Egyptian parliamentarian, Ahmed Eltantawy, contacted the researchers to analyze his phone, suspecting possible intrusion. Consequently, the researchers observed numerous attempts to deploy the Predator spyware on his phone.
Predator is a notorious spyware from the European firm Cytrox, resembling its Israeli counterpart Pegasus. This particular spyware was also used earlier to target Egyptian users’ devices.
The researchers have shared the details about this spyware attempt and their discovery, in their post. In addition, Google TAG has also shared insights about their findings in their report.
Apple Fixed The Vulnerabilities With The Latest Updates
Upon discovering the newly exploited vulnerabilities, the researchers reported the matter to Apple. In response, the Cupertino giant started patching the flaws affecting its iPhones.
Shortly after, Apple released the patches for the three vulnerabilities, which affected iOS versions iOS 16.7 and earlier, with iOS 17.0.1. These flaws include,
CVE-2023-41991: signature validation bypass allowing access to a malicious app.
CVE-2023-41992: privilege escalation vulnerability allowing exploitation from a local attacker.
CVE-2023-41993: arbitrary code execution may become possible upon processing maliciously crafted web pages.
Now that the patches have been released, users must ensure updating their respective devices (iPhone, iPad, Mac, and others) with the latest security fixes at the earliest.
So, you broke your phone. Don’t worry, it happens, but now it’s time to remedy the situation. It’s time for you to do your due diligence and send it off to be repaired. Before you do that, there’s something you need to do first; secure it. Here’s how to secure your Android phone before sending it off.
In this piece, we’ll go over some useful actions you can take to make sure that your phone is safe when you send it off to be repaired. You don’t necessarily have to do all of these methods. However, it’s advised that you do something.
Why should you secure your Android phone?
Securing your phone before sending it to be repaired is an extremely important thing to do. Your phone, especially if you’ve used it for a while, holds a ton of important and sensitive information about you. We’re talking about your email address, home address, phone number, banking information, etc. That’s not to mention the media on your phone like pictures and videos.
When you send your phone to be repaired, you never know if the person taking apart your phone can be trusted. If they manage to gain access to your phone, they could possibly gain access to your sensitive information. You never know if they could steal any of your information or anything else.
Securing your phone makes it so that no one has access to your data when repairing it. It’s not as much of an issue if you’re sending your phone back to the actual OEM to be repaired. However, you’ll want to be careful when you’re sending your phone to independent repair shops.
Remove external storage
People typically keep their files on a micro SD card. Also, people typically forget that it’s in their phone when getting it repaired. It’s extremely easy to forget, and that could be bad if you have sensitive files on your card. The thing is that an SD card is the easiest thing to infiltrate. All the person has to do is pop your SD card out of your phone and copy the files to their device.
Factory reset your device
One recommended way to secure your Android phone is completely erasing all of the data on it. This is called factory resetting it. This means restoring it to the condition that it was in when it left the factory. This way, there’s no way that anyone could gain access to your data. There are a few things to know before factory resetting your phone.
Back up your app data beforehand
The most important thing to know is that factory resetting your phone is not reversible. Once your data is gone, it’s gone for good. This is why you need to back up your data. Doing this will save your data to Google’s cloud servers. After you get your phone back, you can redownload your data and more or less pick up from where you left off.
Depending on what company made your phone, the process could be a little different. Since most Android phones either use stock or near-stock Android, we’ll explain how to do it on stock Android.
Go to your settings and tap on the Google button. On the resulting page, scroll down to the Backup button. On this page, you’ll see how much storage you have left on your Google account. In the middle of the page, you’ll see the Back up now button.
When you press that button, your phone will start uploading your data to the cloud.
Back up your files
The backup feature saves most of your data like your app data, passwords, etc. However, it doesn’t affect your actual files. This means that files like pictures, music, documents, and other files will be deleted. For something like this, you’ll need to save the files in a different location. This could be in the cloud or on an external storage device.
Be careful about the accounts
Android has a security protocol where, when you factory reset the device, you’ll need to sign in with a Google account previously on that device in order to get into it. If you can’t log into that account, the phone is as useful as a paperweight.
So, if you know how to log into your Google account, then you can proceed. This means that if someone turns on your phone while repairing it, they won’t be able to use it. So, it’s highly recommended that you keep your account on the phone.
Just make extra sure that you remember how to log into your account. If you don’t remember, then you’ll want to remove your account from the phone. In the settings, go to the Passwords & accounts button. Find the Google account(s) on your phone and tap on the Remove account button.
When you do that, you’ll get a popup saying that the device’s security will be disabled. Just know that if you remove your account, it makes it possible for anyone to turn on your device and set it up as their own.
Resetting your phone
After your data is completely backed up and your accounts squared away, it’s time to actually reset your phone. Go to your settings and go to the System button. On that page, scroll all the way down to the bottom to the Reset options button.
There, you’ll see some options for things to reset on your phone. On the very bottom, tap on the Erase all data button. The system will ask you if you’re sure. Take this time to make doubly sure that you backed everything up on your phone. Once you press the reset button there’s no going back.
Lock your apps
If you don’t want to bother with setting up your device again, you can simply lock your apps. When you lock an app, you restrict access to that app and only allow people to access it if they put in a password.
This is something that might come with your phone depending on the software you have. For example, phones from Infinix and Tecno both have a function called “App Freezer”. Check to see if you have an app lock function.
If you don’t, then you can look for one on the Google Play Store. A good app to consider is simply called AppLock. You’ll set up a screen pattern when you start up the app. You’ll choose the apps that you want to lock. You can also make it so that you need to enter the pattern just to access the UI.
When you set a pattern for your apps, make sure to use a pattern that’s different from your device’s pattern.
Make sure that the person repairing your phone actually needs to access your UI
If the person repairing your phone asks for access to your UI, make sure that the repair job actually requires access. This is a good way to secure your Android phone. If you’re getting your battery or your screen replaced, chances are that they don’t need access. Make sure you keep an eye on that.
Tech companies aren’t the only ones developing AI chatbots, and intelligence services are also ready to join the race. According to Engadget (via Bloomberg), the CIA is preparing to jump on the AI bandwagon by developing an exclusive AI chatbot.
While you might think a chatbot is useless for the CIA, the agency has much to do with it. Randy Nixon, the CIA’s director of Open Source Enterprise, said the agents and spies would use this chatbot to look up information, ask follow-up questions, and summarize daunting masses of data. The CIA chatbot relies on public data for training and provides agents with sources to help them validate data.
“We’ve gone from newspapers and radio to newspapers and television, to newspapers and cable television, to basic internet, to big data, and it just keeps going,” Nixon said in an interview with Bloomberg. “We have to find the needles in the needle field.”
CIA will develop its own AI chatbot for agents and spies
Nixon further added the US intelligence community will “soon” have access to the tool. This tool won’t be available to lawmakers and the public as expected. Nixon also said such tools allow the agency to grow its collection with no limitations and concern about the costs. “Then you can take it to the next level and start chatting and asking questions of the machines to give you answers, also sourced,” he said.
It remains to be seen which AI tools serve as the foundation of the CIA chatbot. However, it’s more likely to be based on ChatGPT as it’s the most advanced AI chatbot available today. The CIA’s director of Open Source Enterprise insists on AI capabilities for summarizing a big chunk of data and pushing the right information to agents.
Unsurprisingly, the CIA chatbot has been raising concerns about privacy since the beginning. Nixon says their AI tool will follow the US privacy laws. However, using public data for training and the possibility of any data leak are the biggest concerns about the tool. Some US intelligence agencies are already caught buying data, including phone locations.
TCL has made a name for itself over the past couple of years as a reliable smartphone maker. After building phones for Alcatel and Blackberry, TCL established its own unique brand of smartphones. One of the latest phones is the TCL 40XE 5G. This is a mid-range phone that promises to give users a powerful and efficient experience.
Right now, you’re not starved for options when it comes to affordable phones. However, this day and age is much different than years before. Just a few years ago, getting a phone for $100 meant that you were automatically in for a completely terrible experience. However, times have changed, and more phones are filling the “Flagship Killer” shoes that were left behind by OnePlus. The TCL 40XE 5G weighs in at a feather-light $99.99. Will this phone give you a proper bang for your buck, or is it a bust? Let’s find out in this review.
TCL 40 XE 5G Review: Design
TCL is going for a certain look with this phone, and it’s not the kind of look that’s meant to be shown off. However, that’s not a bad thing. The TCL 40 XE 5G has a very straightforward no “BS” design, but it still has certain defining features intrinsic to TCL’s phones.
The back is made from plastic that has a faux brushed-metal design. It’s dark gray, and that gives it a pretty sleek look to it. It’s nice in sort of a heavy-duty way. The main gripe I have with the back panel is the texture. That scratchy back material irritates the skin just a bit, so not everyone will be a fan of it.
The camera package is also made from gray plastic, but it has a different texture. In fact, the blocky look of the camera package adds to the overall heavy-duty look of the phone.
All in all, the design isn’t meant to turn heads, but it’s actually nice in a certain way.
TCL 40 XE 5G Review: Build quality
When you pick up a $100 phone, you expect it to feel like a $100 device; you expect to feel like you’re picking up one of those toy phones on a market shelf. That’s not the case with the TCL 40 XE 5G. Picking up this phone before and after I learned the price, I gave two completely different responses.
This phone is so solidly built that it doesn’t feel like a $100 phone. I’d say it feels like a phone more than twice its price. It sits heavily in the hand, so you know that it can take a couple of falls and keep going. It’s unapologetically thick, and the flat frame makes it feel like a tank in the hand.
TCL didn’t go for a premium feeling with this phone. It’s not meant to be a fashion statement. The statement it’s meant to say is “I am tough!”. I’m not going to say that the phone is well-built for its price; I’m going to say that this phone is well-built in general.
TCL 40 XE 5G Review: Display
TCL is a brand that’s like Samsung in that some people buy their phones for the display. Samsung’s phones have stunning and breathtaking displays while TCL’s don’t aim for quite that. However, TCL is primarily a TV company. It, like Samsung and formerly LG, uses its display expertise to fit its phones with top-notch displays.
In the case of the TCL 40 XE 5G, the display is pretty average. Given the price, it’s actually above average. Last year, I reviewed the TCL Stylus 5G, and that phone blew me away with how nice the display was. It did NOT belong on a phone for only $258. This gave me the expectation that TCL’s phones punch above their weight when it comes to their displays.
The TCL 40 XE 5G’s display is definitely better than what you’d get for most phones in this price range.
Specs
Going over the technical details, this device’s specs are pretty standard for a phone of this price. It has a 6.65-inch LCD display with a resolution of 720 x 1612. This gives it an HD+ resolution and 269ppi. It has a 90Hz refresh rate.
Colors
In the Display settings, you can choose between the different color modes. You have your pick between Natural, Vivid, and Advanced. Natural will give you the most true-to-life colors while Vivid will give you more saturated colors that really push this display to its limits. Advanced has some additional options. You have the option between saturated colors or sRGB colors, and you can also adjust the color temperature. I’m reviewing it in Vivid mode, as that’s the mode that most people would use.
Using the Vivid color mode, the colors popped more than you’d expect from an LCD panel. they’re nicely vivid and they’ll definitely add to your video-watching experience. With the Vivid mode enabled, the colors are also notably warm. This means that yellows and oranges will pop a bit more. If you don’t like the warmer color, you can adjust the color temperature.
If you’re watching a decent video on this phone, you should expect the colors to stick out to you nicely.
Contrast
This isn’t an OLED panel, so the contrast isn’t a shoo-in. You’re going to see gray backgrounds instead of completely black. That being said, the contrast on this display is pretty nice. Darker tones are nicely dark. It’s definitely better than what you’d see on a phone of this price just a few years ago.
Brightness
The TCL 40 XE 5G won’t stand out in this category. Sunlight visibility is pretty subpar. Using this phone in the bright Florida sun, I had a bit of trouble seeing content. I definitely had to block the sun to see some of the finer details. Overall, the brightness is just what you’d expect
NXTVISION
The image quality is nice out of the box, but TCL has an Ace up its sleeve. The company has a proprietary technology called NXTVISION. This basically enhances the colors and contrast of images, videos, and games. It will give you an HDR-like experience without the physical HDR hardware.
The company is not lying about this claim, as turning on the NXTVISION will boost the colors and contrast to a noticeable degree. This makes the picture pop even more. It’s really pleasing to the eye.
Resolution
The one thing that holds this display back is the resolution. It’s rocking a rather large display, but it has a 720p+ resolution. That’s understandable seeing as this is a $100 phone. If it was $100 more, then I’d expect a 1080p display. Be that as it may, you’ll see images and videos with nice colors, but they’ll just lack a bit of clarity.
TCL 40 XE 5G Review: Speaker
Being such an affordable phone, the TCL 40 XE 5G missed out on several features, and that’s evident in the speaker department. Nowadays, it’s not uncommon for a mid-range phone to come out with a set of dual speakers. However, a $100 phone with dual speakers is asking a bit much. Thus, the TCL 40 XE 5G has a single bottom-firing speaker.
Loudness
In terms of pure loudness, the speaker on this phone is pretty powerful. It’s not exceptionally loud, but it can get up to a pretty nice volume. It won’t cut through if you’re in a crowded area, but it’s not bad for personal use.
Low end
When it comes to the low end, this phone is not turning any heads. The sound is about as tinny as any phone in this price range. There’s not much low-end, so it might not be your first choice when listening to music.
Overall audio quality
The sound quality is pretty good for the price. It’s pretty clear overall, so you won’t have an issue watching movies or taking calls using the speakerphone. In the grand scheme of things, however, the speaker isn’t really anything to write home about.
TCL 40 XE 5G Review: Performance
The TCL 40 XE 5G is powered by the MediaTek Dimensity 700 SoC. That’s the same processor that powers the TCL Stylus 5G. Thus, you’d expect a similar performance. That happens the be the case.
When I used the Stylus 5G, I was thoroughly impressed with how TCL optimized the software to work with the chip. The Dimensity 700 is one of the lower-end chips in the Dimensity series. However, that doesn’t mean that it’s not capable of delivering a nice experience.
The TCL 40 XE 5G is a nice performer as well. Navigating the interface, I didn’t notice any lag or stutter. At worst, I noticed a few dropped frames when closing out of an app or summoning the notification shade.
There are devices out there that perform so poorly that the experience, whether or not they’re under a heavy load, shows lag and stutters throughout the software. That was the case with the TCL Tab 8 LE. Thankfully, the company was able to redeem itself after that device.
Using the phone, navigating the interface, flying through apps, and performing other tasks are smooth on the TCL 40 XE 5G. I tried my hardest to get the phone to slow down, but I really couldn’t. TCL did a great job optimizing the software for this chip.
However
Using the phone when it’s cool and using it when the SoC is smoldering hot after an intense gaming session are two different things. Right after running some intense games, I definitely noticed a difference in the performance. It didn’t become unusable or anything. It’s just that some animations were completely dropped, and it took a second for some apps to load.
If the phone is under a heavy load, expect to see some slowdown throughout the software.
TCL 40 XE 5G Review: Gaming
When it comes the gaming, this is where the performance shows some cracks. When you’re playing simple 2D games, you won’t have any issues. Games like Sweet Sins 2 play perfectly smoothly on this phone. One of the 2D games that I tested was Survivor.io. This is a game that gets pretty intense when there are a ton of sprites on the screen, and it will bog down weaker hardware. However, it ran like a dream.
When it comes to 2D games, you won’t have to worry about this phone’s gaming prowess. It will be able to tackle those games without a hitch.
Simple 3D games
Moving onto simple 3D games, the story is much the same. I installed games like Sky: Children of The Light and Dragonball Legends. Both games played perfectly smoothly. While these games aren’t the most graphically intensive, they’re still rather pretty.
Sky is still an extremely pretty game, and it still has the phone rendering large landscapes and environments. The TCL 40 XE 5G runs that game without a hitch. At worst, you can expect the occasional dropped frame. It’s nothing game-breaking, however.
Top-tier 3D games
Now, let’s crank up the graphics. Yes, I’m talking about Genshin Impact. This is one of the best-looking games on the mobile market, and you can bet that it’s cooked a few GPUs thus far. This is about where we see this phone’s limits.
Starting off, this is NOT a game that you’re going to want to play on the highest graphical setting. I turned the graphics up to full, and it is not pretty. The motion blur effect turns the gameplay into a slideshow. Even without rotating the screen and just running straight, the experience is consistently stuttering. Also, it causes the phone to heat up quite a bit. So, Genshin Impact is unplayable at its highest graphical settings.
However, if you crank the graphics down to their lowest settings, it’s like night and day. It runs extremely smoothly with just the occasional dropped frame. It’s nowhere near as laggy as with the highest settings. At their lowest settings, the graphics seem similar to those in Sky, so that could explain why the phone is able to run the game.
Overall, you’re able to play most of the lower-end to mid-tier games without any issues.
TCL 40 XE 5G Review: Battery
There are definitely elements of this phone that are exceptional for the price, but the battery is on par with what you’d expect. It’s very average; enough to get you through the day.
I start off my day with a full charge, and I’d go through a typical day. This consists of checking social media, some casual gaming, and a fair amount of video-watching with the odd snapshot here and there. Using the phone like this, I was able to get to the end of the day with a bit of power left in the tank. More casual users shouldn’t have any issues making it into the next day.
If you’re planning on doing more heavy gaming or binge-watching videos, then you’ll want to keep your charger handy. On heavier days, I was able to get about six hours of screen-on-time. That’s not too bad, but it’s not the greatest.
This shouldn’t come as much of a surprise. This phone is really meant to cover the basics. You’re not expected to do a ton of gaming or video watching, so the battery will serve your needs.
The story is the same when it comes to the charging. You won’t find any high charging speeds; no name-brand fast charging standards. The TCL 40 XE 5G comes with a charger in the box, and it outputs up to 18W of power. This will charge the phone in just over an hour, which isn’t too bad.
TCL 40 XE 5G Review: Camera
When you’re talking about using a phone as inexpensive as this one, you shouldn’t expect much in the camera department. I can say that the camera experience is on par with what you’d expect from a $100 budget phone.
Details
Starting off with the details, the pictures aren’t exactly razor-sharp, but they’re not the worst. You’re given a little bit of wiggle room when you’re zooming in. Just know that once you really start zooming in, things will start to get a bit ugly.
Exposure
When it comes to exposure, the phone tends to lean on the side exposing the picture. This is good when taking pictures in the direct sunlight. The highlights were kept well in line. This helped it avoid blowing out the clouds and creating a more balanced picture.
On the other hand, however, the images tend to look darker than the actual scene. It often makes bright sunny days look overcast. You can throw the picture into a photo editor and boost the exposure a bit, and that should liven up the images.
Colors
In terms of color reproduction, this camera does a nice job of giving me some nice colors. There are shots that gave me some nice and well-balanced colors. This seemed more evident with the blues, greens, and yellows. Taking pictures of the grass and sky gave me some nice and pleasing results.
There’s one issue, however. The color could vary wildly depending on the exposure. I took a picture of a tree that was in the shadow, and I tapped the screen to adjust the exposure compensation for the darker shade. The exposure jumped up, and it gave me some extremely weird colors. The colors took on this almost nuclear quality. It honestly looked like I put some special filter on the picture. That could be an issue, as it looks like a completely different scene.
Contrast
The contrast in the images is about average with some standouts. The images aren’t particularly contrasty, but they’re not exactly dull. Taking pictures in direct sunlight caused a ton of harsh shadows to form under plants, and the camera was able to do a decent job of creating some nice contrast. Overall, the contrast is serviceable.
Low light
Moving onto low light, this phone has a bit of an issue in extreme cases. Starting off with moderately dim scenarios, the camera performs well. Inside with nothing but a common house lamp, the camera is able to lighten up the scene and pull some decent details from the image. Along with that, the colors still remain pretty saturated. So, you shouldn’t have an issue with most inside scenarios with some light.
Lowering the lighting conditions to nothing more than a small LED light, you see the quality drop off a bit. The images are still amply bright thanks to the processing, but you’ll notice a significant degradation in quality and more noise. That’s to be expected from pretty much any camera.
The main issue with low light comes when I activate the dark shot mode. This is the mode that will take an extra long exposure. The thing about it is that it tried to brighten the scene too much. I took a picture of an Edifier speaker that was barely lit by my computer screen. The end result really went overboard with the added lighting, making it look unnatural.
Also, in this mode, The images look to have the worst quality. They’re the blurriest and noisiest. You can use this mode to capture a shot, but it just won’t look picturesque.
Overall
The camera is serviceable, and it’s more than usable for the price. I was able to pull some impressive pictures out of this phone.
TCL 40 XE 5G Review: Software
If you’re used to using stock Android or near-stock Android, then you’re going to be in for quite a different experience. TCL has its own unique Android skin, and it brings its own take on Android.
Aesthetic
The thing with TCL’s software is that it’s about efficiency and proper use of space, and that could be bittersweet. The interface is more efficient than stock Android with its densely packed icons and UI elements. The first page of quick settings shows seven items rather than four, the app icons are smaller and take up less space, etc. The software is for people who want to see more items on their screen at one time.
This could have a bit of a bad side, as it could seem a little cluttered. When I swipe up to access the app drawer, I’m immediately met with a barrage of icons. At the top of the screen, I see search filters. Under that, there are my recent apps. Right under that, We see some specialized carousels of apps. THEN, I actually get to my app drawer. This just makes the interface look a bit cluttered.
That’s not really unfortunate, as it’ll take some getting used to. What’s really unfortunate is the fact that there’s no Dynamic Colors feature. This means that your system’s theme won’t match the colors in your wallpaper. This was one of the more popular features that arrived with Android 12. So, if you’re used to Material You, then you will be missing some things.
Usability
In terms of usability, I didn’t have any issues. I didn’t have any issues getting used to the software, and I didn’t run into any missing fundamental features. You get a full Android experience with TCL’s UI, and it’s easy to pick up and use.
Final Verdict
The TCL 40 XE 5G is not a phone that’s meant to be a game-changer or a flagship killer. It’s just meant to be a good phone for the price, and that’s exactly what it is. This phone has a nice display, solid build quality, and great software. You get all of this for the price of only $100. I think that it should be worth at least $100 more than that. TCL did a great job with this phone, and I highly recommend that you pick one up.
Healthcare has been one of the primary industries targeted by threat actors as part of every malware or ransomware campaign. Many Advanced Persistent Threat (APT) actors are from China due to political reasons between China and the United States.
These threat actors run their cybercriminal groups like organizations in which they recruit, track revenues, and form partnerships. Additionally, there are also cases where large cybercriminal groups act like corporations where there are several departments, staffing, quality control, etc.
Moreover, these threat actors evolve their capabilities and rely on black markets to bring in a new range of features and threat vectors.
DocumentFREE Demo
Implementing AI-Powered Email security solutions “Trustifi” can secure your business from today’s most dangerous email threats, such as Email Tracking, Blocking, Modifying, Phishing, Account Take Over, Business Email Compromise, Malware & Ransomware
An Overview of Cyber Criminals
As per the reports shared with Cyber Security News, threat actors who have more notoriety have been analyzed and gathered information about their types of operation, operational revenue, residing members and their nativity, and much more.
GozNym Network
GozNym was a threat group that had stolen over $100 million, with its members residing in Russia, Georgia, Ukraine, Moldova, and Bulgaria. This threat actor ran a Cybercrime-as-a-service operation offering Bulletproof hosting, money laundering, spamming, and encrypting tools. However, this threat group was busted in 2019.
China (APT41)
China has been known to be powerful in the cyber industry. China also has a five-year plan (2021-2025) that targets clinical medicine, genetics, biotechnology, neuroscience, and general healthcare research and development.
“If each one of the FBI’s cyber agents and intel analysts focused exclusively on the China threat, Chinese hackers would still outnumber FBI cyber personnel by at least 50 to 1.” said the FBI Director, Christopher Wray.
APT41 is also known as the wicket-panda or double dragon and has been active since 2012. This threat actor uses Supply-chain attacks and Bootkit operations for their criminal activity. Moreover, this threat actor has been known to target the U.S. health sector and organizations specifically.
Most countries, including Japan, Australia, the United States, and the European Union, have sanctioned North Korea. In addition, the UN has banned the trade of arms and military equipment, dual-use technologies, and others.
However, North Korea has conducted cyberattacks even as part of retaliation for the insult against its leader Kim-Jong Un, which was the Sony cyberattack in 2014. Sony showed a bad portrayal of their leader in the movie The Interview.
APT43 is known as Kimsuky, Velvet Chollima, and Emerald Sleet (THALLIUM) and is known to conduct social engineering attacks and credential harvesting. Another threat actor from North Korea was the Lazarus group, identified as APT38.
This threat actor has conducted major cyber operations, including Operation Troy, Sony Picture/Operation Blockbuster, GHOSTRAT, Bangladeshi Bank, Wannacry, Various cryptocurrency exchanges/companies, and COVID-19 vaccine data. This threat group was one of the most notorious groups and is known to use the following tools for their operation.
Tools Used
TOOL NAME
DESCRIPTION
BISTROMATH
A multi-functional remote access trojan; part of the HotCroissant malware family
SLICKSHOES
An implant that can transfer files and load and execute files into memory
CROWDEDFLOUNDER
Remote Access Trojan capable of receiving and initiating connections
HOTCROISSANT
Dropper with beaconing, reconnaissance, file transfer, and other capabilities
ARTFULPIE
An implant that can conduct beaconing, file transfers, and execution, as well as Windows command line access, process creation/termination, and system enumeration
BUFFETLINE
Implant that can conduct beaconing, file transfers, and execution, as well as Windows command line access, process creation/termination, and system enumeration
The U.S. Department of Health and Human Services has published a complete report. It provides detailed information about these threat actors, their members, activities, FBI tracking, and defense mitigation.
Protect yourself from vulnerabilities using Patch Manager Plus to quickly patch over 850 third-party applications. Take advantage of the free trial to ensure 100% security.
Samsung seems to be in a hurry to release the stable Android 14-based One UI 6.0 update. It has just rolled out the fifth beta build to the Galaxy S23 series. The latest release comes less than a week after the Beta 4, which suggests a nearing stable rollout.
One UI 6.0 Beta 5 for the Galaxy S23 fixes several bugs
The latest One UI 6.0 beta update for the Galaxy S23, Galaxy S23+, and Galaxy S23 Ultra comes with the build version ZWIK (last four characters). The OTA (over the air) package has a size of 750MB for the Ultra model in the UK. It should be a similar-sized download for the other two models as well. The update is also available in Germany, the US, and other markets.
Since Beta 4 bundled the October security patch, the new release doesn’t bring a newer patch. However, there are plenty of bug fixes to look forward to. The official changelog supplied by Samsung states that the update fixes the problem that blocked users from recording ongoing voice calls. It has also addressed the display issue where the screen occasionally failed to read touch inputs or detected ghost touches.
The previous One UI 6.0 beta build had a camera bug that sometimes froze the camera app after opening it, forcing an unwanted termination of the app. Users couldn’t take pictures. The latest release fixes this issue. Motion photos are also finally available. It was one of the known issues of One UI 6.0 so far. A Maintenace Model bug that sent the device to an infinite rebooting loop has been fixed too.
Samsung says the new update contains many other minor bug fixes as well. With this release, One UI 6.0 should be a lot more stable to use, with fewer known issues and functional anomalies. While the company has yet to announce a stable rollout roadmap, rumors are that the Galaxy S23 series will get it in late October. Other models will follow the new flagships, with most flagship devices making the jump to Android 14 before the end of the year.
The Galaxy A53 5G is also getting Samsung’s Android 14 beta
Samsung opened its first One UI 6.0 public beta for the Galaxy S23 series on August 11. It has now pushed five beta updates to the phones. In the meantime, the company has also launched beta programs for several other devices. The Galaxy S22, Galaxy S21, Galaxy A54, and Galaxy A34 got it over the past few weeks. Today, One UI 6.0 beta expanded to the Galaxy A53 5G. The Galaxy Z Fold 5 and Galaxy Z Flip 5 will probably join this list next week.
You’ve heard it all on the Internet, “it looks the same as my iPhone 11”, in fact you might be one of those that said just that. And it’s true. Apple has kept mostly the same design since the iPhone 11. With the only real changes being the flat sides and ditching the notch for a dynamic island. But that’s not a bad thing. Have you ever heard the saying “if it ain’t broke, don’t fix it”? That’s essentially what Apple is doing here.
It doesn’t make a lot of sense for companies to do a complete redesign of their phone every year, or even every few years. Seeing as most people are keeping their phones for many years now, that’s just wasted R&D money. Not to mention the fact that this is part of Apple’s brand – the same goes for Google Pixel and Samsung Galaxy.
Despite the iPhone 15 Pro Max looking the same, there are quite a few upgrades this year. From the Titanium rails, to the new camera system with 5X telephoto, to USB-C and even the Action Button. But is that enough for you to shell out $1,199 for the new iPhone 15 Pro Max? Let’s find out in our iPhone 15 Pro Max review.
Apple iPhone 15 Pro Max: Hardware & Design
Apple has always used great materials with it’s iPhones. From Aluminum rails and glass backs to the upgrade to Stainless Steel with the iPhone 12 Pro and now the Titanium upgrade on the iPhone 15 Pro series. It definitely feels more premium than a lot of other Android smartphones, except maybe a Galaxy S23 Ultra. But don’t think that Apple was the first to use Titanium. Those that might remember, Essential used Titanium on its PH-1 back in the day (2017). But it is a material that is rarely used on phones, because it is so tough to work with.
In some teardowns, we have seen that the Titanium in the iPhone 15 Pro Max is actually not all that much. JerryRigEverything tore it down and found that there’s about one millimeter of Titanium around the phone, which equates to about $30 worth of Titanium.
Now the real question is, how does the Titanium feel in the hand? Honestly, quite good. This is coming from someone that has been dailying an iPhone Pro model since the 12 Pro in 2020. And the sharp sides of the stainless steel were not comfortable at all, and showed plenty of fingerprints. Titanium is a lot smoother, and those sharp sides are also gone. But the fingerprints are still there. Now it’s not quite as bad as everyone on the internet is making it out to be. Yes, you can see fingerprints, but it’s really only when you’re looking for them. And if that bothers you, put a case on it. Which you probably should do with a $1,199 phone anyways.
With the move to Titanium, Apple also shaved off some weight from the iPhone 15 Pro Max. It’s only about 8% lighter, but it ends up feeling a lot lighter, due to the moment of inertia. Which makes it feel lighter than the iPhone 14 Pro (it’s not, but it does feel like it). Which is pretty impressive, given that the iPhone 14 Pro is a much smaller phone.
Don’t get me wrong, this is still a big phone. But Apple has done a lot here to make this more comfortable to use without a case. Which is so good, because some of us don’t want to use cases – even though we should.
The Action Button
One of the changes to the iPhone 15 Pro Max’s design this year is the Action Button. Apple has removed the Mute Switch from the Pro models. And replaced it with a new button on the side. Which is surprisingly, very customizable.
By default, it still acts as a Mute button, but in the settings there are a bunch of other options you can use it for. This includes toggling a Focus mode, opening the Camera (and going to a specific camera mode), toggling on the Flashlight, starting a Voice Memo, opening the Magnifier, choosing an Accessibility Feature, and finally, you can use a Shortcut from the Shortcuts app. Some have used the Shortcut to do things like remote start their Tesla, or play a Fart sound. While others have created a menu when you tap the Action Button. So you are able to have it do multiple things. As for me, I’m boring and have it set to opening the camera.
Since I have it opening the camera, it can also act as a shutter button. Sort of mimicking what Sony phones have been doing for years. And I really love this feature. It’s something small, and not something I’d switch phones to have, but it is great to have.
Some of you might be worried that you hit the button by mistake and open the camera, or whatever you have it set to. Don’t. You have to press and hold it for a few seconds for it to actually open whatever you have it set to. This is to reduce any sort of accidental presses. Which is really good to have.
The only downside to the Action Button is that it is so high up on the side, that’s hard to use sometimes. But that also helps to reduce those accidental touches.
Apple iPhone 15 Pro Max Review: Display
Apple has always had one of the best displays on the market. Which is interesting since they use Samsung (and sometimes BOE or LG) displays. But Apple is really specific about the displays they buy, and also really good at calibrating them. Here, we have an OLED display, with the Dynamic Island included. It’s a stunning display on this iPhone 15 Pro Max, which makes watching video a real treat. However, when watching an 18:9 video, the Dynamic Island does cut into the video a tiny bit. And the rounded corners start to cut in. Honestly, it’s not a big deal, and I probably wouldn’t have noticed if I wasn’t a reviewer.
Another thing that this display has going for it, that makes it seem like a big upgrade, is the bezels. The bezels are significantly smaller this year. Coming in at around 1mm thick. This is even more noticeable on the bigger iPhone 15 Pro Max, because of that 6.7-inch display. But it does look amazing here.
Because of those smaller bezels, Apple decided to instead of making the screen larger, to shrink the Pro Max’s size altogether. Which is an interesting choice – though rumor has it that the iPhone 16 Pro models will go up in display size to 6.3- and 6.9-inch respectively.
Apple claims that the iPhone 15 Pro Max’s display is able to reach a peak brightness of 2,000 nits. Now, I don’t have a way to test that, especially since you’ll only see that outdoors in direct sunlight. But I can say, using the iPhone 15 Pro Max outdoors in direct sunlight, it looks great. This is the same peak brightness as the iPhone 14 Pro, however. So not really an upgrade here, but still great to see. Since we do tend to use our phones outdoors from time to time.
Apple iPhone 15 Pro Max Review: Performance
For a long time, Apple has been known as the king of mobile silicon, but this year, that crown might be heading to San Diego for Qualcomm. The new A17 Pro chipset in the iPhone 15 Pro Max is the first 3nm chipset to be put into a phone. Now Qualcomm and MediaTek are also working on 3nm chipsets – MediaTek actually announced one, without a name. But the difference between the A17 Pro and the A16 Bionic (from iPhone 14 Pro) is not as big as many thought. With the move to 3nm.
This could be due to diminishing returns now, but the A17 Pro is not as power efficient as the A15 Bionic was in the iPhone 13 series. Which is why the iPhone 14 Pro series had such bad battery life for the past year, and it looks to be the same here with the iPhone 15 Pro Max (but more on that in a minute).
A17 Pro is fast enough for everyday consumers
If you’re wondering whether the A17 Pro is slow, it’s not. It feels just as fast as the A16 Bionic, if not a bit faster. Apple claims about a 10% speed increase, which sounds about right. Some apps are loading much faster on my iPhone 15 Pro Max versus my iPhone 14 Pro. But we did expect more from a 3nm chipset.
What Apple is really touting with the A17 Pro is that you can play console games on your iPhone now. Like Resident Evil Village. Now that game doesn’t come out until October 30, so it’s hard to test that and see how well it plays on the iPhone 15 Pro Max in this review, since we don’t have it. We’ll be sure to update this review once it comes out and we’ve played it a bit.
But other gaming, is perfectly fine. Playing things like League of Legends: Wild Rift, and Candy Crush Saga, the iPhone 15 Pro Max performs as you’d expect. That’s with great graphics, and plenty of speed. It does tend to get a little warm, but this was also the case with older iPhones, so that’s not much to be concerned about. But some are seeing heating issues on their models.
iPhone 15 Pro Max is hot stuff
Pretty much since the iPhone 15 Pro Max was made available on September 22, we started seeing users complaining about the phone being very hot and overheating. Now, in my experience, I did notice it getting pretty hot on the first day. But keep in mind, it was transferring my data, syncing with iCloud and stuff, so that is quite normal. After the first day, it’s been pretty cool, really only showing any sort of heat when wireless charging, gaming or using the camera for a long period of time. You know the normal stuff.
But some users on X have reported that the iPhone 15 Pro/Max has been overheating for them while charging, using the camera and doing other things. While others reported it getting hot when recording ProRes video in LOG and then color-grading it on the phone. Sure that’s something that Apple is promoting with the iPhone 15 Pro series, but it would still get hot from doing that anyways.
It also seems to be that this is happening to Canadian and European variants. Not happening as much with the US models. The obvious difference there is the physical SIM card try not being on the US models, but I highly doubt that is the case. We do know that those models in Canada and Europe (and some in Asia) are being made in India, versus the others being made in China. So that could be a cause, but it is most likely the overpowered A17 Pro chipset, and the fact that Titanium doesn’t help with heat dissipation.
Bottom line is, if you are experiencing overheating, contact Apple. Your iPhone is still under warranty, so Apple does have to fix it. The best bet is to head to an Apple Store.
Apple iPhone 15 Pro Max Review: Battery life & charging
Coming off of the iPhone 14 Pro models, which had pretty bad battery life for their entire lifetime, and that caused the battery health to drop rather quickly. Many of us expected that the 15 series would sport better battery life. Many were even expecting much larger batteries. But none of that happened. Batteries on the Pro models are a little bit bigger, but not much. And the rated battery life from Apple is largely the same as last year.
Now, for me, it is hard to compare my iPhone 15 Pro Max to the iPhone 14 Pro battery life, since they are two different sized phones and the Pro Max has always had much better battery life. So here’s the numbers I’ve been getting.
I’ve been getting about 8 hours of screen on time most days. With around 20% or so remaining. But it’s important to note that every day, the battery has gotten better and better. However, it’s still behind that of my iPhone 13 Pro Max from two years ago, that was a legit two-day phone.
Charging is still slow
Many of us thought that with the move to USB-C, that Apple would increase the charging speed on the iPhone 15 series. Yeah, that didn’t happen. Apple is still marketing it as 20W, though independent testing found that it can charge at up to 27W. This won’t happen for long and only when the battery level is very low.
But let’s face it, for iPhone users, 20W is fine. Remember, iPhones have smaller batteries than Android phones. So charging at 20W on say an iPhone 15 Pro Max is still likely faster than charging at 45W on a Galaxy S23 Ultra. Additionally, iPhone users tend to keep their phones for four, five, six or more years. So keeping that battery health in tip-top shape is huge for Apple. Instead of putting out 100W charging that will likely destroy the battery in two-three years.
I will say, being able to carry one cable around to charge my Pixel Fold, iPhone 15 Pro Max and my laptop, is definitely great. Though, I do tend to use MagSafe most of the time with my iPhone. Because it’s just so good, and the thump you get when the magnets line up, are great.
That said, wireless charging also did not get any faster. MagSafe still does about 15W, and if it’s not MagSafe certified, it’ll be closer to 10W. Not fast, but this does help with the heat. However, if your phone can last you the full day, and you’re only charging at night, the speed is perfectly fine. You can also get a MagSafe Battery Pack to use with your iPhone, which I use mostly on travel days. And that’s by far my favorite feature of the iPhone these days.
So the bottom line here is that charging is still pretty slow, and battery life is good, but not the best. That crown still sits with Samsung on the Galaxy S23 Ultra.
Apple iPhone 15 Pro Max Review: Software
iOS 17 is here on the iPhone 15 Pro Max, and really any other iPhone that’s Xs or newer. Which is quite impressive, considering the iPhone Xs came out in 2018. That means at least five years of software updates. Something that most Android OEMs aren’t able to provide. Which means that when you buy the iPhone 15, you can rest assured that you’ll continue getting updates for many years.
There’s actually quite a bit new in iOS 17 this year, even though it seemed like a down year. You can check out our Best iOS 17 features for more on that. In this part of the review, we’re going to stick to a few of the more impressive features for the iPhone 15.
The first one that we really like is StandBy Mode. This is really nice to have, and it basically allows you to plug in your phone and turn it 90-degrees, making it a smart display of sorts. This works best on a MagSafe dock, since it’ll be easier to put it in landscape. But you can also just plug in via USB-C and do the same thing. StandBy Mode basically uses the Widgets that Apple introduced into iOS a few years ago, but now they are bigger. So you get two widgets, one on either side of the phone. And on something like the iPhone 15 Pro Max, it’s quite large.
My setup for Standby Mode is actually to have the clock on one side and the weather on the other. But you can also add other widgets like a Photo Frame, the calendar and so much more. Making it great to have docked while you’re working or next to your bed.
Another popular feature in iOS 17 is Contact Posters. Which basically allows you to control how you appear on someone else’s phone when you call them. This is a surprising amount of customization here from Apple. You can choose from a photo, a memoji and memoji pose, or just have a colored background. You can also choose the name that appears too. Which is really cool actually.
iOS 17 does fix quite a large number of bugs that were on iOS 16 and took over a year to fix. So it’s more of a bug-fixing update, with a few quality of life features being added in here. But overall, it’s pretty good. And on the A17 Pro, iOS 17 does run really well.
Apple iPhone 15 Pro Max Review: Camera
Apple generally puts its best and newest cameras into the Pro Max model, partly because it’s the largest so it has the space, but also because of the price. And that’s the case this year. Apple added a new tetra-prism camera, which is a 12-megapixel telephoto lens that can do 5x optical zoom, and up to 25x digital zoom. The other cameras here include a 48-megapixel main sensor, and a 12-megapixel ultrawide. There’s also the LiDAR sensor included for better autofocus.
Despite having just three cameras on the iPhone 15 Pro Max, Apple is touting that there are 7 focal lengths and saying “it’s like having 7 lenses”. Basically, what Apple is doing is different focal lengths on these cameras. Particularly on the main sensor, since Apple is able to punch in on that 48-megapixel sensor. Apple is letting you shoot at 24mm, 28mm and 35mm. And surprisingly, Apple is letting you select one as the default, in the settings.
On my iPhone 15 Pro Max, I’ve actually set 35mm as the default for all of my photos. It works out to about 1.5x zoom, but the photos look really great at this focal length. A big reason why many videographers and YouTubers use 35mm lenses, is because you get a natural bokeh effect around your subject. And that is the case here on the iPhone 15 Pro Max. Below, you’ll see a number of images I took at 35mm, none of these have been edited, nor taken in portrait mode.
Then there’s the ultrawide, which I honestly hope is the next camera to get upgraded. Especially since Apple is using this for macro shots. And there’s a clear difference between it and shooting at 35mm for a lot of objects. At 12-megapixels, you do need a good bit of light for taking some nice macro shots. But for ultrawide shots of landscapes and stuff, it works. It’s nothing really good, but it works.
5x telephoto is surprisingly useful
I’ve always been one of those that thought that a good long telephoto lens wasn’t needed on a smartphone. But, I’ve changed my tune over the past year or so. On the Pixel Fold, I use the 5x telephoto quite often, same with the Galaxy S23 Ultra’s 10x telephoto. And so far, that’s been the case with Apple’s 5x telephoto here.
The 5x zoom is quite good here, and in some instances, it produces a sharper image and more true-to-life colors, versus the competition. I don’t 100% prefer the iPhone 15 Pro Max’s telephoto images, but more times than not, I do.
Apple does allow you to do digital zoom up to 25x, which I honestly will never use. A lot like the 100x zoom on Samsung phones, it’s pretty useless. The pictures come out looking pretty watercolored, and not sharp at all. Not to mention that you need to hold perfectly still for the photo to not be blurry. Because the more you zoom in, the more every movement matters.
Portrait Mode on or off, it doesn’t matter
This is one of those features that Android phones have had for many years. But it’s finally here on the iPhone and it’s great. Basically, if you take a photo of a human, dog or cat, Apple is able to separate it from the background so you can change the focus and the bokeh effect after the fact. This means you don’t have to go “oh crap, I forgot to switch to portrait mode” after the fact and take another photo. You can also change the focus to be the background, foreground or really anywhere.
Like I mentioned, this has been available on Android for quite some time. In fact, I remember using it on the Honor 8, which launched way back in 2016. But I have not seen it work this well on anything but a Pixel, recently. So big props to Apple here.
The photos below were taken in normal 35mm or 1.5x (that’s what I’ve set as the default for myself), and then changed the bokeh affect afterwards. Almost better than using regular Portrait Mode. And this works on both pets and humans. See a few examples below.
Overall, the cameras on the iPhone 15 Pro Max are really good. And honestly, it has me super excited for the new Pixel 8 series that Google is announcing very soon.
Should you buy the Apple iPhone 15 Pro Max?
If you’re already on the iPhone, or thinking about ditching Android, then the iPhone 15 Pro Max is a really good option. While the outside appears to be mostly the same as the last couple of years. There are some pretty massive changes that you don’t see right away, as we’ve mentioned in this review. Sure it’s pricey, but you can likely find a really good deal on it at retailers and carriers. Or finance it yourself, and even use the iPhone Upgrade Program, which will let you upgrade every year.
You should buy the Apple iPhone 15 Pro Max if:
You have an iPhone 13 or older.
You want to try out the very best that Apple has to offer.
You want a big screen and big battery life.
You should not buy the Apple iPhone 15 Pro Max if:
You’re an Android user and have no desire to switch.
Though we can’t see it, the world brims with more technology than ever. These days, devices with internet connectivity live within the ever-growing Internet of Things (IoT)—a worldwide “web” where wireless communication and information technology work together. Since the early 2000s, smart cars have appeared within the IoT, sporting more comfortable, efficient, and safer rides. Despite their advancements, they remain constant targets for cyberattacks and hacking.
What is Automotive Hacking?
Functionally, automotive hacking is like traditional cyberattacks; the actor breaks into the system, gaining abilities to change files, open doors to other networks, or harvest unused resources. Automotive hacking occurs similarly, but the target is a car rather than a home computer or business database.
The target is the car’s electronic control unit (ECU), which connects to many communication channels and networks. The ECU is also intimately related to the car itself; hackers can do anything with this access, from changing the radio to steering takeovers. Some may outright steal the vehicle.
What are the Risks of Automotive Hacking?
A stolen car is a problem, but hackers aren’t typically interested in committing glaring crime sprees. They’re more concerned with insidious results. For example, a hacker could break into a car’s ECU to jump to another network. Then, they could access databases or servers as they please. Before jumping to a better vantage point, they could unleash a long list of problems for the car owner:
Broken or destroyed cybersecurity functions: making the car even more vulnerable.
Programmed behaviors: some may remove alarms and notifications from activation.
Data and personal information theft: opening owners to financial issues and fraud.
Forced temperature conditions: causing cars to shut down in high-temp states.
How Hackers Can Gain Access to Vehicles?
A smart car is under threat from many angles. Depending on the end goal of the assailant, the attack may take various forms, from over the internet to physical interaction with the car. Those wanting to access the ECU to jump away are less likely to come in contact with the vehicle. The hacker’s available technology limits their access gateways:
Forced Access
Hackers can break into an ECU by plugging an infected USB data port into the car. Like other computers, cars can suffer from malware and viruses, but their consequences may be more deadly. For this reason, owners of modern cars must be vigilant of what and who is plugging things into their cars.
Extended Key Fob Range
Although fobs are a common feature of many cars, they are also a significant system weakness in smart cars. The more utility the car fob has, the more access the hacker could gain by breaking into it. A hacker’s access lets them start or stop the car, open the windows and doors, and even trigger alarms.
Smartphone Access
Hackers can get smartphone access in many ways; regarding vehicles, hackers can attack from the internet, over applications, or through a network. A corrupt smartphone exposes more than personal and financial information; it also opens any connected devices and networks to the threat. Connected automotive applications are another common access point for skilled hackers.
Telematics
Another weakness is the technology used to gather and analyze data from fleet vehicles. Telematic tech allows for seamless information interaction from any location but is readily exploitable for hackers. Those with a successful attack have network access, organization data, and personal client or consumer information.
How to Prevent Automotive Hacking?
Smart cars, despite being giant, rolling targets, have come a long way since their inception. Car manufacturers invest in more cybersecurity every year. The manufacturers and application developers are only part of the solution, however. Car owners must take proactive steps to help defend their property and network.
Manufacturer-Endorsed Software Only
One can rarely trust third-party applications. Devices that connect to them (or accept their Terms and Conditions) can quickly become infected with problems. Only use reputable applications; Google and Apple Maps are good examples, though cautious consumers may want to read their policies before agreeing.
Smart cars and internet connectivity will further entwine in the coming decades. As fast as cybersecurity tech advances, the faster hackers evolve their attacks. Smart cars and everything they interact with are at risk of falling victim to cyber threats. Taking necessary precautions on time can protect against identity theft and prevent becoming a victim of cyberattacks.
Up-to-Date Software
Gone are the days when consumers could ignore their system updates for weeks (or years). These days, software updates are the most significant protection individuals have against cyber threats. Car owners should check their systems regularly for compliance.
Password Protect
Like cellphones, many smart cars have “About” information that may provide access to the ECU. The only way to prevent its use is by routinely monitoring the accounts and properly configuring access. Administration passwords are not permanent solutions.
Internet Access via VPN
Virtual private networks (VPNs) mask a device’s IP address with an alternative. It allows consumers to have another layer of protection between themselves and the internet. VPNs are crucial to securing vehicle gadgets, engines, and internal components.
Strictly Need-Basis GPS
The Global Positioning System (GPS) of a modern car is one of the car’s most significant weaknesses. GPS opens the system to transmissions, which can lead to direct attacks. Hackers could also target their internal connections if the GPS works through a third party.
Install a Firewall
Removing the connectivity from a modern car is impossible. Consumers must protect the connection to prevent successful cyberattacks. Installing the proper firewall will do more than alert the owner to threats; it will also restrict communications from all unauthorized parties. Firewalls are considered a necessary line of defense.
If you’ve installed Bitwarden Password Manager recently, ensure that you downloaded it from its official website and not from a fraudulent, malicious source.
ZenRAT malware is distributed as an installation package for the widely used Bitwarden password manager.
Malware operators have designed a fake Bitwarden website to deliver the malware.
It specifically looks for Windows-based devices.
ZenRAT is a modular RAT capable of stealing sensitive information.
Enterprise security firm Proofpoint’s cybersecurity researchers have discovered a spooky new malware distributed as an installation package for the popular password manager Bitwarden to deceive users and steal sensitive data from their devices.
This bogus installation package, dubbed ZenRAT, is delivered via a fake Bitwarden website, which looks exactly like the original one but is not legitimate. If a user pays attention, it is easy to catch that malware operators have used the typosquatting technique because the fake website is titled bitwaridencom.
The fake website (Proofpoint)
ZenRAT’s main targets are unsuspecting Windows users. If a visitor clicks on the downloadable link marked for another platform (e.g., Linux or macOS), they are redirected to the original Bitwarden website (vault.bitwarden.com) on the Downloads page. If a Windows user clicks on it, their device will be infected with ZenRAT, and the malware will establish a connection with its C2 server (185.186.7214).
Once this is done, the malware will collect desired data, including system details and stored credentials. ZenRAT can steal information like the CPU and GPU names, OS version, RAM, IP address, and device gateway. It will also extract information about installed antivirus solutions and other apps. It can also steal browser data and passwords. ZenRAT transmits the logs to the C2 server in plaintext.
It redirects the website visitors to a benign website. However, researchers didn’t specify how the visitors are redirected to the website. Previously, the malware was distributed in such campaigns through phishing, SEO poisoning, or malvertising attacks. The payload is titled Bitwarden-installer-version-2023-7-1.exe and downloaded via crazygamescom. This trojanized version of the legit Bitwarden installer contains a .NET executable titled (ApplicationRuntimeMonitor.exe).
According to Proofpoint’s blog post, when researchers examined the malicious installer package’s metadata, they observed that the attacker had masqueraded it as Priform’s Speccy. It is a freeware Windows utility that displays hardware/software-related information.
Moreover, the executable has an invalid signature that seems to be signed by FileZilla fame German computer scientist Tim Kosse. However, this signature is also fake. This modular RAT also runs anti-sandbox and anti-VM checks to determine if it is safe to operate on the device. The checks also include geofencing to ensure it isn’t installed in any Russian-speaking region.
Exercise Caution When Using a Password Manager
Researchers strongly advise users to exercise caution when downloading software and recommend obtaining applications exclusively from official sources. It’s worth noting that password managers have frequently been targeted in cyberattacks and scams, with LastPass being a notable example.
As a safer alternative, the top three browsers—Google Chrome, Mozilla Firefox, and Safari—offer free password manager features. If you’re unsure about which service to use, any of these three options would provide similar benefits and, in some cases, may be more secure than others.
At this point, we already know pretty much everything there is to know about the upcoming Pixel 8 and Pixel 8 Pro. They’ve been the center of a massive leak just a few days ago. While that’s the case, it seems that the leaks won’t stop. Thanks to Evan Blass, we have another leak showing off photos of the Pixel 8 and the Pixel 8 Pro.
First, some leaked specs
Along with the images, we also have a document showing off the specs of these phones. Some of the specs like the Tensor G3 were already obvious. As for the displays, Google is going to unveil a new “Super Actua” display, and both models will get this technology. The Pixel 8 will have a 6.2-inch display that will run at 120Hz. That’s an improvement over the 90Hz display in the Pixel 7 and Pixel 6.
The Pixel 8 Pro will have a larger 6.7-inch Super Actua display with the same refresh rate. We’re also certain that it’s going to have a sharper QHD+ display.
As for the cameras, the Pro will have a 48MP main camera, a 50MP ultrawide camera, and a 48MP 5X telephoto camera. The base model will have a 12MP main camera and the same 50MP ultrawide camera. Both phones will have a 10.5MP selfie camera.
Both phones will share the same software camera features like Macro focus, Best Take, and more. However, the base Pixel 8 will not have a pro mode like the Pro model. Both the phones will have face and fingerprint unlock and IP68 water and dust resistance. The Pixel 8 Pro will have the thermometer feature.
Here’s a leak of Pixel 8 photos
These photos give us a look at what to expect from these phones when they launch. We see the phones next to some accessories. This supports the rumor that Google will bundle accessories with these phones. We see the Pixel 8 Pro in a blue color next to a Pixel Watch of the same color.
The next image shows the Pixel 8 in a grayish color next to a pair of Pixel Buds. Hopefully, this means that the company will give you the choice of what accessory you want. If not, then it appears that you get the watch if you order the Pro variant and the earbuds with the base model.
The remaining pictures show the phones from different angles and in different colors.
The next Google Pixel event is going to be happening on October 4th, so you’ll want to mark your calendars. There will be a bunch of new features coming with these phones including an upcoming face replacement feature for Google Photos.
-1.webp "APT Attack Healthcare Industries")
.webp)
