Home - h4ckers-news

Samsung’s future foldables may feature full-screen fingerprint sensors

Android

andreasc

-

July 1, 2024

Samsung’s future foldables may feature full-screen fingerprint sensors

[ad_1]

Samsung could be working towards full-screen fingerprint sensors for smartphones. A newly discovered patent application from the company describes a display setup comprising a full-screen fingerprint recognition layer. The new technology allows users to unlock their devices by touching any display part. This solution could be particularly beneficial for foldable and rollable smartphones. The Galaxy Z Fold 7, anyone?

Samsung’s patent describes a full-screen fingerprint recognition sensor

Despite being a global leader in the foldable industry, Samsung has yet to implement under-display fingerprint scanners on its foldables. From the first-gen Galaxy Fold (2019) to the upcoming Galaxy Z Fold 6 and Flip 6, every model features a side-mounted capacitive sensor embedded into the power button. The company likely sees this as a more logical solution since a single sensor allows you to unlock the device in folded and unfolded states.

However, the size of the Fold sometimes makes it inconvenient to reach the power button when unfolded. Considering the device’s price, consumers deserve better. The Fold lineup should boast the best of everything the smartphone industry has to offer (it lags S series in cameras too, but that’s a different story). Some rival companies have already introduced under-display fingerprint scanners to their foldables, so that’s an added reason.

Samsung foldable rollable full screen fingerprint technology patent 4

It appears Samsung has a plan to one-up its rivals, at least in terms of fingerprint recognition on foldables. Noted leakster David Kowalski (aka xleaks7) recently collaborated with Thenerdstash to bring a Samsung patent for a full-screen fingerprint recognition technology for smartphones. It uses a layer of specialized sensors under the display. This layer is capable of reading fingerprints across the display and not just over a designated place on the screen.

While the patent documents describe its applications across a wide range of display products, this solution may be best suited for foldable and rollable smartphones. A confined fingerprint sensor doesn’t quite complement the big screens on these devices. It would be much better if we could unlock the device by placing our fingers anywhere on the screen. No need to carefully look for the fingerprint scanner’s location on the display.

Samsung foldable rollable full screen fingerprint technology patent 3

Could we see this technology on the Galaxy Z Fold 7?

Like with any other patent application, there is no way to tell if Samsung is actively working on this full-screen fingerprint recognition technology. It may be something the company has in the pipeline for the future. As far as its implementation on the Galaxy Z Fold 7 is concerned, we have doubts that will happen. The technology sounds too futuristic today. Rumors about the next-gen foldable should start coming in once the Galaxy Z Fold 6 and Flip 6 are out of the way. The sixth-gen models arrive on July 10.

Samsung foldable rollable full screen fingerprint technology patent 2

[ad_2]
Source link

Hacker Group Attacking Systems With 10 Malware At Same Time

Hacking

andreasc

-

July 1, 2024

0

Hacker Group Attacking Systems With 10 Malware At Same Time

[ad_1]

A malware campaign of huge magnitude, and perhaps run by just one group, is using artificially nested files for distribution named ‘WEXTRACT.EXE .MUI’.

More than 50,000 files worldwide featuring this method are delivered by different stealers and loaders such as Redline, RisePro, and Amadey.

Several samples are associated with an Eastern European cybercriminal-linked Autonomous System.

Cybersecurity researchers at OutPost24 recently detected that a new hacker group has been attacking the system with 1o malware at the same time.

10 Malware At Same Time

The “WEXTRACT.EXE .MUI” malware distribution system is one that makes use of nested cabinet files to distribute a number of malware samples such as stealers and loaders.

This method’s complex execution sequence drops and runs malware in reverse order, which may result in bypassing security measures.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo

The technique could cause multiple infections as the loaders may download more malware.

From February 2023 through the start of 2024, a massive malware distribution campaign nested multiple malware families, such as Redline, Mystic Stealer, RisePro, Amadey, and SmokeLoader.

The campaign developed over time, incorporating obfuscation tools and different distribution methods.

An examination of over two thousand one hundred examples showed some malware combinations in which victims might be infected by several stealers and loaders simultaneously.

This suggests that there was a single actor behind the infrastructure and tactics for this campaign.

Distribution steps of one sample of WEXTRACT (Source – OutPost24)

It is likely that the campaign to distribute malware called “Unfurling Hemlock” buys distribution services from other actors.

Its earliest phases were in email attachments and downloads from hacked or hoax websites.

The infrastructure, mostly based on AS 203727, uses both exclusive and shared IPs for distributing WEXTRACT and other malware.

This indicates one actor or entity that is responsible for the campaign but delegates some of its distribution aspects to others.

The malware campaign uses different C2 URLs and IP addresses, some of which are specific to the WEXTRACT-related malware and others that are common to other campaigns.

The diversity in infrastructure supports the insight that this actor could be supplying samples from other campaigns, possibly encouraged by financial interest.

While the upload locations may not indicate the actual infection sites, the infection sources cut across several countries.

Here below we have mentioned the countries:-

Origin of the samples (Source – OutPost24)

Unlike the usual trend, this huge malware attack mainly targets Western institutions, including Russia.

This operation launched different types of malware simultaneously to increase the possibilities of infection and diversify potential paybacks.

Though not highly developed, this “cluster bomb” method may be adopted by threat actors in the future.

Researchers recommended using the latest anti-malware tools, performing analysis of packed files, and user alertness to be cautious about suspicious downloads and emails.

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files

[ad_2]
Source link

Here’s what the canceled Pixel Fold prototype looked like

Android

andreasc

-

July 1, 2024

0

Here’s what the canceled Pixel Fold prototype looked like

[ad_1]

Google boarded the foldable smartphone bandwagon by launching the Pixel Fold at the I/O event 2023. By then, major brands like Samsung had already released multiple generations of their foldable smartphones. Although Google was late to the party, it already had a foldable phone in the pipeline since 2019.

The first-gen Google foldable smartphone was allegedly in active development under the codename “Passport” in 2020 and “Pipit” in 2022. Unfortunately, the first Google foldable prototype never saw the light of the day. However, nearly a year after the Pixel Fold’s launch, alleged photos of the canceled Google Pixel Fold prototype have appeared online.

The canceled Google Pixel Fold prototype had a familiar design

The photos of the alleged first-generation Google Pixel Fold prototype first appeared in an XDA forum thread last month. The original images have since been deleted. However, Android Authority managed to get copies of the images. Furthermore, the source claims that these images are indeed of the canceled Google Pixel Fold prototype. These photos are of the prototype, which was in development under the codename “Pipit” (Passport earlier).

The leaked images show that the first-generation Google Pixel Fold smartphone’s prototype had a familiar design. It appears to be eerily similar to the final Pixel Fold. The major difference between their design is a Pixel 6-like seamless glass bar running through the entire width of the prototype offering. The final product sports a smaller camera module made of polished metal, just like the Pixel 7 Pro.

Apart from the aforementioned differences, the Pipit prototype is almost similar to the final product. It has a similar aspect ratio, frame, and hinge design. Although it’s not visible in the images, the prototype model even had a matte back glass like the final phone. There appears to be a skin applied to the back of the prototype version.

Notably, the source claims that the Pipit foldable prototype even had support for a stylus. If launched, it would’ve arrived with the first-gen Tensor chipset, two 12MP primary Sony cameras, and an 8MP selfie snapper. Furthermore, the report suggests that the Pipit prototype had a smaller display at 66 x 128mm as compared to 67 x 130mm on the final Pixel Fold.

The Pixel Fold 2 is likely launching on August 13 alongside the Pixel 9 series

Google is now all set to host its annual “Made by Google” event on August 13. At the event, the company is expected to introduce a couple of new Pixel 9 series flagships. In addition, the Mountain View-based tech giant could also unveil the Pixel Fold 2 at the same event. Some reports suggest that the second-gen foldable offering from Google could be called the Pixel 9 Pro Fold instead.

Recently, a few leaked case render images suggested that the Pixel Fold 2 will be taller and narrower than the first-gen model when folded. The device will sport a much different primary camera island at the rear. It will be placed in the top-left corner of the handset’s backside as compared to the middle on the Pixel Fold.

The rumor mill indicates that the Pixel Fold 2 or Pixel 9 Pro Fold will be powered by the Tensor G4 chipset. It could be offered with up to 16GB of RAM and the upgraded UFS 4.0 faster storage solution. The new foldable is also expected to flaunt some AI-powered camera enhancements and more. We can expect official details about the phone in a matter of weeks, so stay tuned.

[ad_2]
Source link

Hackers Using Google Ads To Deliver ‘Poseidon’ Mac Stealer

Hacking

andreasc

-

July 1, 2024

0

Hackers Using Google Ads To Deliver ‘Poseidon’ Mac Stealer

[ad_1]

Hackers abuse Mac Stealer to covertly extract sensitive information such as passwords, financial data, and personal files from macOS devices.

Besides this, macOS users or Mac users are considered valuer targets.

On June 24th, Malwarebytes researchers identified another Mac-specific stealer campaign named Poseidon. This campaign used Google malicious ads for the Arc browser.

This is the second instance of Arc being used as a lure by OSX in recent times. RodStealer is distributing malware.

Created by Rodrigo4, a threat actor who competed with Atomic Stealer, this tool is more developed and can steal VPN configurations.

Hackers Using Google Ads

The ad for this malware was found on the XSS underground forum and it offers similar functionalities to Atomic Stealer such as file grabbing, extraction of crypto wallets, and theft of password managers.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo

What this campaign shows is that attackers responsible for Mac-related malware have started using new strategies while always exploiting popular software.

A Google ad campaign for the Arc browser that maliciously redirects people to a fraudulent site (arc-download[.]com) that offers a Mac-only version is connected to “Coles & Co” and arcthost[.]org.

Malicious ad for Arc browser via Google search (Source – Malwarebytes)

The downloaded DMG file uses a right-click bypass for security to make it seem like a genuine Mac application installation process.

This recent malware called “Poseidon,” which builds on previous ones, has incomplete code for stealing VPN configurations from Fortinet and OpenVPN.

Malware exfiltrates data to a specific IP address leading to a Poseidon-branded control panel, implying a sophisticated and evolving risk to MacOS users.

An active Mac malware development scene focuses on stealers like Poseidon. Threat actors advertise feature-rich products with low antivirus detection to potential customers.

The observed campaign confirms the active targeting of new victims. Protection requires vigilance when installing new apps.

Malwarebytes continues detecting this threat as OSX.RodStealer and has informed Google about the malicious ad.

Users are advised to employ web protection tools like Malwarebytes Browser Guard to block ads and malicious websites as a primary defense against such evolving Mac-targeted threats.

IoCs

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files

[ad_2]
Source link

HONOR Magic V3 camera, battery & more details appear

Android

andreasc

-

July 1, 2024

0

HONOR Magic V3 camera, battery & more details appear

[ad_1]

New HONOR Magic V3 details have just appeared, following the phone’s teaser that surfaced not long ago. This information comes from Teme, who shared some camera, battery, hinge, and other details.

Some HONOR Magic V3 details have just appeared

We still do not have exact specs for the device, but let’s see what the tipster said. He says that the phone will be fueled by the Snapdragon 8 Gen 3. That makes sense, the Magic V2 was fueled by the Snapdragon 8 Gen 2.

The tipster also says that the phone will support satellite connectivity, but only in China. It will also support 5.5G connectivity. It was already revealed that it will be 9.Xmm thick when folded, so possibly thinner than its predecessor (9.9mm).

The HONOR Magic V2 will weigh 22X grams. So somewhere between 220 and 229 grams. Its predecessor’s weight was 231 or 237 grams, depending on which model we’re talking about.

In regards to battery, the tipster says it will be 5xx0mAh, in other words, at least 5,000mAh. That was the battery capacity of the HONOR Magic V2, and that phone offered really good battery life.

The phone will feature a 50-megapixel camera & 66W charging

The device will also support 66W wired charging. Wireless charging likely won’t be a part of the package yet again. A 50-megapixel ‘Eagle Eye’ camera will also be a part of the package.

The phone will also include an ultra-thin Type-C connector and an upgraded hinge. That hinge will include some sort of water resistance, last year’s did not.

That is pretty much everything that the tipster shared. The HONOR Magic V2 launched on July 12, so we’re expecting its successor to arrive in the near future too. HONOR still didn’t reveal its launch date, however.

Let’s just hope that the global model will arrive sooner this time around. It took HONOR around 6 months to deliver the Magic V2 global model following the China launch.

[ad_2]
Source link

Samsung Health may be getting two helpful medication-related features in a future update

Apps

andreasc

-

July 1, 2024

0

Samsung Health may be getting two helpful medication-related features in a future update

[ad_1]

Samsung Health might be getting some notable improvements in the near future. Code discovered by the folks at Android Authority suggests that the app will be getting medicine scanning and drug-allergy interaction in a future update.

Samsung Health is Samsung’s platform for health and fitness monitoring, which powers the health-tracking features of Galaxy Watches and soon, the Galaxy Ring. The new features were discovered hidden in the code for the app, which means they’re currently in development and not officially available yet.

The first one will allow you to scan your medication and add its information automatically. Probably, data like the name of the medication, the mg dose (strength), and whether it’s a tablet or a capsule will be able to be added automatically.

In 2023, Samsung announced medication tracking for Health. Basically, it helps you track your medications and provides tips about them, as well as general descriptions and possible side effects from the medication added.

The second feature that’s currently in the works is drug-allergy interactions. You will be able to select from some common allergies or add your own and Samsung Health may be informing you whether a drug can cause you an allergic reaction.

Image Source – Android Authority

The way this warning will work is similar to how drug-to-drug interactions show up.

View Full Bio

Izzy, a tech enthusiast and a key part of the PhoneArena team, specializes in delivering the latest mobile tech news and finding the best tech deals. Her interests extend to cybersecurity, phone design innovations, and camera capabilities. Outside her professional life, Izzy, a literature master’s degree holder, enjoys reading, painting, and learning languages. She’s also a personal growth advocate, believing in the power of experience and gratitude. Whether it’s walking her Chihuahua or singing her heart out, Izzy embraces life with passion and curiosity.

[ad_2]
Source link

Microsoft Alerts More Users in Update to Midnight Blizzard Hack

Hacking

andreasc

-

July 1, 2024

0

Microsoft Alerts More Users in Update to Midnight Blizzard Hack

[ad_1]

Microsoft has issued a new alert to its users, updating them on the continued threat posed by Midnight Blizzard, a Russian state-sponsored hacking group also known as NOBELIUM.

The alert follows the initial detection of the attack by Microsoft’s Security Team on January 12, 2024.

The attack, which targeted Microsoft’s corporate email systems, prompted an immediate response from the company.

Subsequent investigations have revealed that Midnight Blizzard has been using information exfiltrated from these systems to attempt unauthorized access to other areas, including some of Microsoft’s source code repositories and internal systems.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo

Increased Attack Volume and Sophistication

In recent weeks, Microsoft has observed a significant increase in the volume and sophistication of Midnight Blizzard’s attacks.

The group has ramped up its efforts, with password spray attacks increasing tenfold in February compared to January 2024.

This escalation underscores the group’s sustained commitment and coordination, reflecting a broader trend of sophisticated nation-state cyber threats.

Despite these efforts, Microsoft has found no evidence of compromised customer-facing systems.

“Midnight Blizzard increased the volume of some aspects of the attack, such as password sprays, by as much as tenfold in February compared to the already large volume we saw in January 2024, Microsoft said.

However, the company remains vigilant and proactive in its defense strategies.

In response to the ongoing threat, Microsoft has bolstered its security investments and cross-enterprise coordination.

The company has implemented enhanced security controls, detections, and monitoring to protect its environment against this advanced persistent threat.

Microsoft is also actively contacting customers whose information may have been compromised to assist them in taking mitigating measures.

The Midnight Blizzard attack highlights the evolving and increasingly complex global threat landscape.

Microsoft remains committed to transparency and will continue to share updates as its investigations progress.

The company’s ongoing efforts to secure its systems and protect its users reflect a broader industry need for heightened vigilance and robust cybersecurity measures in the face of sophisticated nation-state attacks.

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files

[ad_2]
Source link

Juniper Releases Out-Of-Cycle Critical Update for Smart Routers

Hacking

andreasc

-

July 1, 2024

0

Juniper Releases Out-Of-Cycle Critical Update for Smart Routers

[ad_1]

Juniper Networks has released an out-of-cycle critical update to address a severe vulnerability affecting its Session Smart Router, Session Smart Conductor, and WAN Assurance Router products.

The security flaw, identified as CVE-2024-2973, allows network-based attackers to bypass authentication and gain full control of the affected devices.

This vulnerability is particularly concerning due to its high severity, with a CVSS score of 10.0 under both CVSS 3.1 and CVSS 4.0 metrics, indicating the maximum level of risk.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo

Products Affected

The vulnerability impacts the following products:

Session Smart Router: All versions before 5.6.15, versions from 6.0 before 6.1.9-lts, and versions from 6.2 before 6.2.5-sts.
Session Smart Conductor: All versions before 5.6.15, versions from 6.0 before 6.1.9-lts, and versions from 6.2 before 6.2.5-sts.
WAN Assurance Router: Versions 6.0 before 6.1.9-lts and versions 6.2 before 6.2.5-sts.

The vulnerability is classified as critical because it could allow attackers to bypass authentication and take complete control of the device.

This issue specifically affects routers and conductors operating in high-availability redundant configurations, which are commonly used in mission-critical network infrastructures such as large enterprises, data centers, telecommunications, and government services.

Juniper Networks has released updates to mitigate this vulnerability. The fixed versions are:

Session Smart Router: SSR-5.6.15, SSR-6.1.9-lts, SSR-6.2.5-sts, and subsequent releases.
Session Smart Conductor: Same versions as the Session Smart Router.
WAN Assurance Router: Automatically patched when connected to the Mist Cloud.

Administrators are advised to upgrade to these versions to secure their systems. In Conductor-managed deployments, upgrading the Conductor nodes will automatically apply the fix to all connected routers.

However, upgrading the routers to the fixed versions is still recommended to ensure complete protection.

Juniper’s Security Incident Response Team (SIRT) has not observed any malicious exploitation of this vulnerability. The issue was discovered during internal security testing and research.

There are no known workarounds for this issue. The only recommended action is to apply the available updates.

The fix’s application is designed to be non-disruptive to production traffic, with only a brief downtime (less than 30 seconds) for web-based management and APIs.

Juniper Networks’ prompt response to this critical vulnerability underscores the importance of maintaining updated security measures in network infrastructure.

Administrators should prioritize applying these updates to protect their systems from potential exploitation.

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files

[ad_2]
Source link

A week in security (June 24 – June 30)

Malware

andreasc

-

July 1, 2024

0

[ad_1]

[ad_2]
Source link

Sony Enters Crypto Exchange Arena with Acquisition of Amber

Hacking

andreasc

-

July 1, 2024

0

Sony Enters Crypto Exchange Arena with Acquisition of Amber

[ad_1]

Sony Group, the Japanese conglomerate renowned for its gaming, music, and camera prowess, has officially entered the crypto exchange market.

According to crypto reporter Wu Blockchain, Sony has acquired Amber Japan, a regulated digital asset trading service provider.

Amber Japan, previously known as DeCurret, is the Japanese subsidiary of the global Amber Group.

This acquisition marks Sony’s significant step into the burgeoning world of cryptocurrency.

Amber Group’s Journey and Challenges

Amber Group, a global digital asset company, expanded its operations into Japan by acquiring and rebranding the Japanese crypto exchange DeCurret to Amber Japan in 2022.

"Is Your System Under Attack? Try Cynet XDR: Automated Detection & Response for Endpoints, Networks, & Users!"- Free Demo

However, the company faced substantial financial challenges due to its trading capital exposure to the now-defunct crypto exchange FTX.

According to Crypto Briefing reports, The collapse of FTX prompted Amber Group to pivot its fundraising strategy, leading to a successful $300 million Series C round in December 2022.

Fenbushi Capital led this round, which also saw participation from notable investors such as Temasek, Sequoia China, Pantera, Tiger, and Coinbase.

The funds were aimed at protecting customers who lost money due to the FTX debacle.

Sony’s Blockchain and NFT Ambitions

Sony’s acquisition of Amber Japan is part of its broader strategy to diversify its portfolio, which already boasts a market value exceeding $100 billion.

For several years, the company has been exploring the potential of non-fungible tokens (NFTs) and blockchain technology in gaming.

In March 2023, Sony filed a patent for an “NFT Framework for Transferring and Using Digital Assets Between Games Platforms.”

This patent outlines a system for using NFTs across different platforms, including features like NFT-locked gameplay, limited-use in-game tasks, and rewarding players with NFTs.

This move into the crypto exchange market aligns with Sony’s vision of integrating blockchain technology into its diverse range of products and services.

Are you from SOC/DFIR Teams? - Sign up for a free ANY.RUN account! to Analyse Advanced Malware Files

[ad_2]
Source link