Monday, March 9, 2020
Holi 2020: Five Free Apps To Help Brighten Up Your Celebrations
Apple sells fewer than 500,000 smartphones in China in February amid coronavirus
Samsung Display asks Vietnam not to quarantine 700 engineers from virus-hit South Korea
Coronavirus : Apple reopens 90% of retail stores in China
Hackers are targeting other hackers by infecting their tools with malware
A newly discovered malware campaign suggests that hackers have themselves become the targets of other hackers, who are infecting and repackaging popular hacking tools with malware.
Cybereason’s Amit Serper found that the attackers in this years-long campaign are taking existing hacking tools — some of which are designed to exfiltrate data from a database through to cracks and product key generators that unlock full versions of trial software — and injecting a powerful remote-access trojan. When the tools are opened, the hackers gain full access to the target’s computer.
Serper said the attackers are “baiting” other hackers by posting the repackaged tools on hacking forums.
But it’s not just a case of hackers targeting other hackers, Serper told TechCrunch. These maliciously repackaged tools are not only opening a backdoor to the hacker’s systems, but also any system that the hacker has already breached.
“If hackers are targeting you or your business and they are using these trojanized tools it means that whoever is hacking the hackers will have access to your assets as well,” Serper said.
That includes offensive security researchers working on red team engagements, he said.
Serper found that these as-yet-unknown attackers are injecting and repackaging the hacking tools with njRat, a powerful trojan, which gives the attacker full access to the target’s desktop, including files, passwords, and even access to their webcam and microphone. The trojan dates back to at least 2013 when it was used frequently against targets in the Middle East. njRat often spreads through phishing emails and infected flash drives, but more recently hackers have injected the malware on dormant or insecure websites in an effort to evade detection. In 2017, hackers used this same tactic to host malware on the website for the so-called Islamic State’s propaganda unit.
Serper found the attackers were using that same website-hacking technique to host njRat in this most recent campaign.
According to his findings, the attackers compromised several websites — unbeknownst to their owners — to host hundreds of njRat malware samples, as well as the infrastructure used by the attackers to command and control the malware. Serper said that the process of injecting the njRat trojan into the hacking tools occurs almost daily and may be automated, suggesting that the attacks are run largely without direct human interaction.
It’s unclear for what reason this campaign exists or who is behind it.
Coronavirus: National helpline, email ID and names of 52 testing sites in India
Here's How to Restore Your Disabled iPhone or iPad
Iran's official app for tracking COVID-19 infections removed from Play Store; sources: app was likely removed due to misleading claims about detecting COVID-19 (Catalin Cimpanu/ZDNet)
Iran's official app for tracking COVID-19 infections removed from Play Store; sources: app was likely removed due to misleading claims about detecting COVID-19 — Google removes Iran's official COVID-19 detection app from the Play Store. — Google has removed today an Android app …
Ed-tech firms go on hiring spree, look at creating 3,000 new jobs next year
Transport experts want BMTC to act like an aggregator and not a mere operator
Smartphone companies warn India of looming WTO probe into duty format
Poco X2 Set to Go On Sale Today at 12 Noon via Flipkart
Microsoft details techniques of ransomware including REvil, Samas, Doppelpaymer, Bitpaymer, and Ryuk, which are manually controlled by humans, not automated (Liam Tung/ZDNet)
Microsoft details techniques of ransomware including REvil, Samas, Doppelpaymer, Bitpaymer, and Ryuk, which are manually controlled by humans, not automated — Ransomware attackers are using common tools to take down big enterprise with ‘human-operated’ attacks.
PayPal CTO says in for the long haul in India, to back UPI soon
BMW axes plans to bring electric iX3 SUV to US
BMW will not bring the iX3, the automaker’s first electric crossover, to the U.S., the latest automaker to shift its EV strategy to Europe and China.
BMW told Automotive News, the first media outlet to report the change, that at this time, it doesn’t have plans to bring iX3 to the U.S. market. The change is notable because the iX3 is based off of the X3, the most popular BMW model in the U.S.
The BMW iX3, which will be manufactured in China, is scheduled to come to market in the first half of 2021.
BMW unveiled the iX3 concept at the Auto China 2018 show in Beijing. The automaker is targeting the U.S., Europe and China for its broader EV strategy. However, the realities of the U.S. market, where automakers with the exception of Tesla have faced a tepid response to EVs, mixed with stricter emissions regulations in Europe, are now hitting home for BMW.
BMW isn’t the only automaker to pull back plans to bring upcoming electric vehicles to the U.S. Mercedes-Benz has delayed the U.S. launch of the electric EQC SUV by a year. The EQC is now scheduled to come to the U.S. in 2021.
Volkswagen has also tweaked its sales strategy for its upcoming ID electric lineup. The company will keep its compact hatchback, the ID.3, out of the U.S. Instead, VW plans to bring the ID.4, (otherwise known as the ID. Crozz) to the U.S., although even this vehicle will first launch in Europe.
Anthropic cuts its list of unauthorized secondary market sellers from eight to four after the initial notice caused panic and pushback from investors (Yazhou Sun/Bloomberg)
Yazhou Sun / Bloomberg : Anthropic cuts its list of unauthorized secondary market sellers from eight to four after the initial notice cau...
-
Sohee Kim / Bloomberg : South Korean authorities are investigating a data leak at e-commerce giant Coupang that exposed ~33.7M accounts; ...
-
The first project we remember working on together was drawing scenes from the picture books that our mom brought with her when she immigrate...
