Home - h4ckers-news

A firsthand perspective on the recent LinkedIn account takeover campaign

Malware

andreasc

-

September 2, 2023

0

A firsthand perspective on the recent LinkedIn account takeover campaign

[ad_1]

It started with a password reset email in the middle of the night.

Not long ago I wrote about a recent campaign to hold LinkedIn users’ accounts to ransom. Shortly after I published the article, a co-worker, Peace, reached out to me told me they’d been a target of the campaign.

His story begins with an SMS text from LinkedIn telling him to reset his password. He found this confusing: It arrived in the middle of the night, and he hadn’t asked for a password reset. Since he doesn’t use the LinkedIn app on his mobile he checked his account on his laptop first thing in the morning. The current sessions (Profile Picture > Settings > Sign in & security > Where you’re signed in) showed an unknown IP address in Texas logged into his account.

Frustration #1: The promised “Sign out of all these sessions” option is nowhere to be found. I double checked in a browser session on Windows and in the app on Android. It’s not there.

Pearce then found out that there was at least one person in his Connections that he did not invite or accept an invitation from. This person also hails from Texas.

screenshot of the location of the new connection

Pearce is a security professional so as soon as he was convinced there was someone else with access to his LinkedIn account, he took action.

A reset of the account’s password worked, but failed to remove the unwanted active session.

Pearce had already set up multi-factor authentication (MFA) on his account, but changed this from SMS to an authenticator app. As I stated in my previous blog, “Setting up MFA for LinkedIn with Okta turned out to be painful because LinkedIn does not provide a QR code but a secret key which is so long that it’s hard to get it right the first, or second time.”

But despite his troubles this didn’t remove the unwanted active session either.

Frustration #2: Changing security and sign in settings is a pain, but has no effect on currently logged in users on other devices.

Frustration #3: LinkedIn Support is overwhelmed and takes quite some time before you get actual help.

Pearce opened a support ticket with LinkedIn. As we mentioned before, the campaign appears to have completely overwhelmed LinkedIn Support. The LinkedIn Help account on X (formerly Twitter) has pinned a message to say:

“Hey there! 👋 We’re experiencing an uptick in questions from our members, causing longer reply times. Rest assured, we’re doing our best to assist you! For account-specific inquiries, please DM us the details and your email address. We appreciate your patience. Thanks! 🙌”

It took them 3 to 4 days to reply with the following message:

Status: Closed

…

Hi Pearce,

Thanks for contacting us about this. To secure your account, we’ve taken the following actions:

We signed you out of your account from every computer or mobile device it has been accessed on. Note: This will now prompt a new login for your account.

We sent a password reset link to the primary email address listed on your account.

There are a few scenarios that could explain the possibility of unauthorized access to a LinkedIn account:

If you’ve recently signed into your account from a public computer or a shared device at your workplace or home, and didn’t completely sign out of your account, the next person to access the site on that device may have unintentionally signed in to your account.

An email or phone number registered in your account is outdated and access to the email or phone number has been recycled or compromised.

If the same password is used in multiple websites, this could have been compromised through unaffiliated sites or a phishing attack.

We’d recommend these best practices for your online privacy:

If you continue to see anything suspicious, please report it to us immediately.

Regards,

LinkedIn Member Safety and Recovery Consultant

Fortunately this worked and Pearce has regained control of his account. But this ordeal could have been much worse than with just a few added new connections. Had the account been taken over, it could have been used for malicious activities, damaging Pearce’s reputation in the process.

Note: LinkedIn has added an option to end individual sessions since this incident, but a few quick tests showed that this doesn’t always work as advertised. We may dive into that at a later point.

Malwarebytes EDR and MDR removes all remnants of ransomware and prevents you from getting reinfected. Want to learn more about how we can help protect your business? Get a free trial below.

TRY NOW

[ad_2]
Source link

Best of IFA 2023: Lenovo Legion Go

Android

andreasc

-

September 2, 2023

0

[ad_1]

The Lenovo Legion Go will be the best handheld for first-person shooters

This week, Lenovo officially revealed the Legion Go, its handheld gaming PC, and wow is this going to be one of the best handhelds on the market when it launches. First of all, it’s packed with features. A high-performance CPU and GPU option, three different storage configurations, a large 8.8-inch display with a 2,560 x 1,600 resolution and up to a 144Hz refresh rate. And that’s just the tip of the iceberg.

Where it really gets cool is with the ‘FPS mode.’ This is a special dedicated mode you can enable when you want to play first-person shooter titles. Like Overwatch, Destiny 2, Valorant, Counter Strike 2 and more. And this is what sets it apart. Lenovo designed the Legion Go to have detachable controllers. And when you detach them, you can pop out the Legion Go’s kickstand and prop up the handheld.

Now, you can play games like this and go no further. But if you’re playing a first-person shooter, you can flip a switch on the bottom of the right controller that says “FPS” and this will turn on ‘FPS mode.’ But there’s one more cool feature to this.

The Legion Go comes with a tiny base you can slot the right controller into. This turns the right controller into a sort of vertical mouse for higher precision aiming. And this is all thanks to the optical eye on the bottom next to that toggle. The left controller meanwhile continues to be for your movement. The whole thing is a game changer. And if you’re a fan of first-person shooters, this is absolutely the handheld for you.

Lenovo promises extended gaming sessions without frequent recharges

One of the biggest issues with handheld PC gaming is battery life. Lenovo is promising that players will have less of an issue with this thanks to its 49.2Whr battery capacity. What’s more, you’ll be able to get extended play without compromising too much on performance or visuals, and if you do need to juice it back up, the Legion Go supports a Super Rapid Charge Express feature. So it charges the battery up lightning fast. Specifically, up to 70% in just an hour.

It also features thermal throttling and a power bypass mode that lessens battery degradation while it’s plugged in. Plus, the Legion Go’s multiple modes of play make this a pretty versatile little PC. You’re going to want one. And so will we. And that’s precisely why we gave the Lenovo Legion Go the Best of IFA 2023 award this year. Lenovo earned it.

[ad_2]
Source link

The new JBL Soundgear Sense earbuds feature an impressive design

Tech

andreasc

-

September 2, 2023

0

The new JBL Soundgear Sense earbuds feature an impressive design

[ad_1]

At the IFA tech event, JBL showed off their new Soundgear Sense earphones which are a showstopper. This pair of earphones comes with an impressive design that allows users to hear the world around them while listening to music. In addition to the open-ear design, this pair of earphones offers users a detachable neckband for extra functionality.

According to JBL, this new pair of earphones is a better option for transparency mode on most competing brands. The open-ear design of these new pairs of earphones makes them great for transparency while listening to music. However, this design is not the only feature that stands out about this new JBL product that’s making the headlines.

This is not the only audio product that JBL is bringing to their fans around the world. The Soundgear Sense earphones launched alongside the new Live 770NC and 670NC headphones and the PartyBox Ultimate speaker. In this article, you will find out more details on the new open-ear earphones that JBL will soon be retailing to its fans around the world.

Specifications and details on the new Soundgear Sense earphones

One of the top features of this pair of earphones is its design, which allows users to interact with the world around them. For this feature, JBL put their OpenSound Technology, which uses air conduction for an impressive listening experience. With this technology, JBL is setting a new audio standard for products that make use of this form factor.

Users of this product will be able to stay in touch with their environment even while listening to music. Listening to music with this pair of earphones won’t get any interference from outside noise and sounds. To do this, JBL uses its 16.2mm drivers on the new Soundgear Sense earphones along with a bass-enhancing algorithm.

The earphones also come with 4 microphones that help users enjoy clear and crisp calls. For connectivity, the new Soundgear Sense earphones use Bluetooth 5.3 technology and LE audio support. With a single charge, these earphones can last up to 24 hours, which is impressive.

Those looking to purchase a new pair of earphones for workouts would benefit from the IP54 sweat, splash, and dust resistance this product offers. Its hybrid design is also very impressive as it gives users options while listening to music. Users can hang the JBL Soundgear Sense earphones on their necks or put them over their ears.

This is possible thanks to the optional neckband and the ear hooks that come as standard. Lots of customizations can be done to the audio quality on these earphones directly from the JBL Headphones app. All these features make the new open-ear earphones from JBL a true stunner.

Sales of this product are already live in Europe, but fans in America would need to wait. For them, sales will kick off next year, which is a bit late and annoying. However, fans can now purchase the new JBL speakers regardless of the region they live in.

[ad_2]
Source link

Threads finally gets a search function, but it’s pretty basic

Android

andreasc

-

September 1, 2023

0

[ad_1]

Meta’s X (formerly Twitter) rival Threads is getting an important new feature. The company has finally added a search function to the new social media app. The feature is still barebones though, only allowing you to look up profiles. You can’t search posts using keywords or phrases.

Meta launched Threads in early July as an alternative to Twitter, which recently rebranded to X. It debuted as an Instagram app and immediately gained millions of users. One can log into Threads using their Instagram credentials, so users of the latter platform thronged the latest offering from Meta. The new app surpassed 100 million users just a few days after its launch.

However, Threads quickly lost its charm and half of its users. Much of this downfall was due to the lack of features on the platform. It lacked basic features like search and reposting. Early last month, Meta announced that these features would arrive soon. It rolled out reposting last week. Meta also launched a web version of the platform around the same time. It’s now adding a search function too.

Meta adds a search function to its Threads social media app

“Get excited — search is coming to Threads,” Meta CEO Mark Zuckerberg announced via a post on the platform on Thursday. His post was accompanied by a GIF featuring Vin Diesel saying “I bet you gonna enjoy this.” It’s a clip from the Fast and Furious film franchise. The way Mark presented his announcement, it’s evident that Threads users highly wanted a search function. Thankfully, it’s now available.

The search button sits next to the home button on the bottom navigation bar of Threads. Tapping it presents you with a search bar at the top, followed by accounts that you may want to follow. Unfortunately, as said before, you can’t search for posts yet. The search function only lets you find accounts. You can follow accounts directly from search results or select an account to see its page and posts.

Hopefully, Meta will make the function more robust soon, something akin to X’s search feature. The latter platform lets you search accounts and posts using keywords, hashtags, and more. You can also sort search results using chips like Top, Latest, People, Media, and Lists. X offers location-based and follow-based filters as well. While we wait for Meta to add these features to Threads, you can click the button below to download the latest version of the app.

DOWNLOAD THREADS

[ad_2]
Source link

Best of IFA 2023: TECNO MEGABOOK T1 2023

Tech

andreasc

-

September 1, 2023

0

Best of IFA 2023: TECNO MEGABOOK T1 2023

[ad_1]

The TECNO MEGABOOK T1 2023 is the ultra-portable laptop you’ll want to take everywhere

Laptops come in all shapes and sizes, and the MEGABOOK T1 from TECNO announced at IFA 2023 aims to be the best combination of a laptop you can easily take with you anywhere without compromising on display size and functionality.

At a svelte 14.8mm thick and just 1.39kg in weight (that’s just over 3lbs.), the TECNO MEGABOOK T1 is ultra slim and ultra portable. That means you shouldn’t have any trouble whatsoever fitting it in any backpack or laptop bag or sleeve. So long as they can fit laptops with a 14-inch display. Plus, at 1.39kg, this thing is so light you’ll probably forget it’s in your backpack. And that will mean wonders for anyone that needs or wants to carry a laptop around with them all day. As it will lead to less strain on your shoulders and back from added weight.

To top things all off in the design department, the laptop is built with an aluminum body. Giving it that extra premium look thanks to the use of metal. It comes in two colors as well. Monet Violet, and Space Gray.

It has a laptop battery that can last you all day and then some

When it comes to being portable, you don’t just want your laptop to be thin and lightweight. You also want it to last you as long as possible without a charger. The MEGABOOK T1 2023 will do just that for you. TECNO designed it with a 75Wh battery and boasts that it can last on a single charge for up to 18.5 hours. Considering there are only 24 hours in a day, this battery will most certainly last you all your waking hours, unless you’re staying up beyond a full 24.

For students and working professionals, this presents the opportunity to leave the charger at home if the laptop already has a full battery. Shaving even more weight off the entire package since you won’t need to bring the charger. TECNO says this is the largest battery of any laptop in its price range. That, in addition to the sleek design and ultra-portability is why the TECNO MEGABOOK T1 2023 earned our Best of IFA 2023 award.

[ad_2]
Source link

Meta may let you avoid ads on its apps for a fee

Android

andreasc

-

September 1, 2023

0

Meta may let you avoid ads on its apps for a fee

[ad_1]

A large part of the social media experience is wading through advertisements. They’re a blessing and a curse depending on what’s being sold to you. If you don’t like seeing ads while using Meta’s social media platforms, then you might be able to skip them. According to The New York Times (via The Verge), Meta might let you avoid ads while using its social media platforms.

Now, this is a big if, as details on this are very scarce. The report states that Meta could be planning on letting users in Europe pay a fee to stop seeing ads on Facebook and Instagram. This would be similar to how YouTube cuts the ads when you sign up for Premium.

Meta may let you avoid ads, but it’s not likely

For the time being, we don’t know what the company is planning right now. There’s not much information supporting this leak, and there’s a chance that the company won’t do it.

If Meta does decide to bring this change, we expect it to stay in Europe. That sounds like a bummer to other people around the world who’d happily pay to avoid seeing ads. However, there’s a reason.

The EU is passing some strict data regulations that compel big companies like Meta and TikTok from collecting data from their users to create targeted ads and content. This is why TikTok brought a chronological feed in Europe.

This could be Meta’s way of keeping the peace with the EU’s regulatory body. Letting people pay to eliminate ads gives them a way out of the company’s data collection vacuum.

Meta has been on the EU’s bad side for years for how adamantly it collects its users’ data. A big part of Meta’s income comes from selling advertisements to users. Collecting data on its users helps its algorithm optimally target ads at people who are more likely to click on them. The more people click on the ads, the more money Meta gets.

At this point, we’re not sure whether Meta will go through with this. Only time will tell.

[ad_2]
Source link

Pixel 8 series will retain the physical SIM slot and come with new Night Sight video

Tech

andreasc

-

September 1, 2023

0

Pixel 8 series will retain the physical SIM slot and come with new Night Sight video

[ad_1]

The Pixel 8 series is on the horizon, and rumours about the new device have been circling throughout the internet. Among these rumours was the possibility that Google might adopt Apple’s approach and ditch the physical SIM slot altogether. However, according to a new report from 9to5Google, the Pixel 8 series will keep the physical SIM slot while also incorporating an eSIM expansion, similar to the older Pixel devices.

New Night Sight video

Video capture has consistently been one of the Pixel series’ major drawbacks, partly due to the processor’s limitations in post-processing. However, with the new Tensor G3, featuring new Arm cores across the board and the addition of UFS 4.0 storage, Google is looking to make a significant leap in video capturing capabilities with the introduction of a new Night Sight video mode. This feature would not only help solve the current problem of lower frame rates in nighttime videos but would also enable users to capture exceptional videos in even the most challenging lighting conditions.

However, it is important to note that Google isn’t the only smartphone maker with this feature. Oppo, for instance, has been offering a 4K night video mode on its premium smartphones for some time, albeit with the help of its custom image-processing chip.

Improved camera hardware

When talking about the camera hardware, the Pixel 8 series will feature the new Samsung ISOCELL GN2 50MP sensor as the main camera, marking an improvement over the GN1 used in the Pixel 7. Additionally, the Pixel 8 series will introduce a new 64-megapixel ultrawide camera powered by Sony’s IMX787 sensor, while the 10.8MP telephoto lens will remain unchanged, retaining its 5x optical zoom capability.

Furthermore, Google is also revamping the user interface of the Pixel camera app, as leaked screenshots indicate that the interface for photo and video controls will vary depending on the selected mode.

The Pixel 8 series will launch on October 4th.

[ad_2]
Source link

Forever 21 Systems Hacked: 500,000+ Users Affected

Hacking

andreasc

-

September 1, 2023

0

Forever 21 Systems Hacked: 500,000+ Users Affected

[ad_1]

In a recent development, Forever 21 disclosed a cyber incident that came to light on March 20, 2023, affecting a limited number of its systems.

Forever 21 is a multinational fast fashion retailer headquartered in Los Angeles, California, United States. Originally founded as the store Fashion 21 in Highland Park, Los Angeles, in 1984, it is currently operated by Authentic Brands Group and Simon Property Group, with about 540 outlets worldwide.

The clothing retailer took swift action upon discovering the breach, launching an immediate investigation and enlisting the support of prominent cybersecurity firms.

Furthermore, law enforcement agencies were promptly notified and have been working alongside the company’s internal investigation.

Affected individuals were notified through written communications, with the notification process taking place between August 29, 2023, and August 31, 2023.

Investigation of the Breach

The investigation’s findings have revealed that an unauthorized third party gained access to select Forever 21 systems, affecting a staggering total of 539,207 individuals over a period spanning from January 5, 2023, to March 21, 2023.

Among those affected, 1,139 are residents of the state of Maine. During this time frame, the unauthorized party managed to obtain specific files from these systems.

The investigation determined that the files involved contained some personal information, such as name, Social Security number, date of birth, bank account number (without access code or pin), and information regarding your Forever21 health plan, including enrollment and premiums paid.

Fortunately, at this point, there is no concrete evidence to suggest that the compromised data has been exploited for fraudulent activities or identity theft, and there’s no reason to believe it will be in the future.

Forever 21 has taken substantial measures to prevent further unauthorized access to the breached data, and there is no indication that the third party made additional copies or shared the compromised information.

As a result, the company believes that the risk to individuals whose personal data was exposed during this incident is relatively low.

However, as a precautionary step, Forever 21 provides affected individuals a complimentary 12-month membership of Experian’s IdentityWorksSM.

This service offers advanced identity protection and assistance in case of identity theft. It’s worth noting that enrolling in this program will not have any adverse effects on your credit score.

To prevent similar incidents in the future, Forever 21 has initiated and continues to evaluate and implement additional security measures to safeguard its systems and data.

Further, they added, “If you believe your information might be affected or have any questions regarding this breach, you can contact Forever 21’s dedicated helpline”.

Keep informed about the latest Cyber Security News by following us on Google News, Linkedin, Twitter, and Facebook.

[ad_2]
Source link

Best of IFA 2023: HONOR Magic V2

Android

andreasc

-

September 1, 2023

0

[ad_1]

A foldable phone that feels like your regular smartphone, when folded.

The HONOR Magic V2 was originally announced in July, but it made its first global appearance at IFA 2023 in Berlin. We’ve decided to give HONOR one of our IFA 2023 awards for the Magic V2, as it truly is an intriguing smartphone, based on my hands-on time with the device. Foldables have been getting thinner and thinner, lighter and lighter, and HONOR really managed to push both those areas to the limit.

It feels like a regular smartphone, but it’s not

From the hardware standpoint, the HONOR Magic V2 is truly intriguing. It really does feel like you’re holding a regular smartphone when it’s closed. It’s also a lot lighter than I thought it would be. The in-hand feel is premium, and so on. Why am I raving on about how thin and light it is? Well, because those are two areas it really has the edge on compared to the competition.

The HONOR Magic V2 is 9.9mm thick, and it weighs 231 grams. That goes for the eco-leather model, the glass model is slightly thicker and heavier. Some of its closest competitors are over 3mm thicker, which is a big deal when you’re talking about foldable smartphones. Also, the HONOR Magic V2 is considerably lighter than most of its competitors, some of them weigh over 20 grams more.

The company used titanium for the hinge, and two Silicon-Carbon batteries

HONOR had to think outside of the box in order to achieve this, though. First and foremost, the company redesigned the hinge entirely. On top of that, it’s now made out of titanium. The redesign helped with the thickness, and titanium with the weight, and, of course, the quality of the hinge itself. On top of that, HONOR is using two Silicon-Carbon batteries here, to achieve a combined rating of 5,000mAh. Those batteries are immensely thin, at 2.72mm of average thickness.

The phone is also really well-equipped in terms of specs. The Snapdragon 8 Gen 2 is here, Qualcomm’s most powerful chip to date. HONOR also included LPDDR5X RAM and UFS 4.0 flash storage. Two 50-megapixel cameras sit on the back, in addition to a 20-megapixel one. Some of you will also be glad to hear that 3,840Hz PWM Dimming tech is also included, and much more. On top of all that, the HONOR Ultra-thin Bionic VC Cooling System is also implemented here. Ultra-thin vapor chamber (VC) is used, and the same goes for ultra-high thermal conductivity graphite, thermal conductivity gel, copper foil, and more. HONOR wanted to ensure that the phone remained cool despite the fact it had very limited space in there.

[ad_2]
Source link

Chromebook users can get 3 months of GeForce Now for free

Tech

andreasc

-

September 1, 2023

0

[ad_1]

Cloud gaming is gaining traction with more companies running their own services. One of the more prominent services is NVIDIA GeForce Now. Well, if you own a Chromebook, then you can get a free trial of GeForce Now for free with no strings attached, according to The Verge.

Chromebooks have gotten much more powerful and useful since they were introduced. Now, Google is working on increasing the gaming capabilities of Chromebooks, and this includes cloud gaming. So, this is a move to raise awareness about the fact that Chromebooks could be gaming machines through cloud gaming.

Chromebook users can get a subscription to GeForce Now for free

This is a heck of a deal, as the “no strings attached” part is extremely accurate. Firstly, you’ll need to be using a Chromebook that was released during or after 2017. That’s the only main caveat to this deal.

As for the trial, if you own an eligible Chromebook, then you’ll get, not one, not two, but three months of GeForce Now access for free. That’s a great deal.

A great thing about this deal is that you won’t need to hastily unsubscribe the day before the trial ends. When you activate the trial, you won’t put in any credit card information. This means that it won’t auto-renew after the trial ends. When the trial ends, the service ends. Obviously, if you fall in love with the service, you can sign up for a membership when the trial expires.

In order to take advantage of this deal, you’ll need to go to the Google Chromebook Perks page. Scroll down until you find the GeForce Now section. Click on the Get Perk button. When you do that, you’ll activate your trial and start gaming.

While you’re there, you’ll be able to check out some other perks that you get as a Chromebook user. There are a handful of perks that you can choose from, and they could grant you some free stuff.

[ad_2]
Source link