A new FakeUpdates campaign targeting WordPress sites has been detected
20/03/2024Over the past few weeks, a new wave of the FakeUpdates malware, also known as SocGholish, has been detected, aimed at WordPress websites. The objective is to lure users into downloading remote access trojans, allowing attackers to take control of their systems. Since its emergence in 2017, FakeUpdates has been one of the most recurring malicious software in the cyber threat landscape. It has previously been associated with cybercriminal groups like Evil Corp, who monetize its use by selling access to infected systems. In this new campaign, cybercriminals are using JavaScript to target WordPress web pages, compromising compromised administrator accounts to introduce altered versions of WordPress plugins. These adulterated versions deceive users into downloading remote access trojans, granting attackers full control over infected devices. What is the most popular type of malware? In addition to the FakeUpdates attack, the threat index from Check Point Research, whose researchers have warned about this new attack, reveals around 200 suspicious content websites directed by ransomware groups. They utilize double extortion tactics to pressure victims into paying immediate ransoms. These attacks have impacted many companies, with the Lockbit3 ransomware being the most utilized by cybercriminals, followed by Play and 8base. The most exploited vulnerabilities by malicious actors include 'Web Servers Malicious URL Directory Traversal,' 'Command Injection Over HTTP,' and 'Zyxel ZyWALL Command Injection,' affecting numerous companies worldwide and allowing attackers to access and manipulate files or execute commands on compromised systems. In Spain, despite a 7% decrease in malware attacks in February, the most sought-after malware includes FakeUpdates, Qbot, and Pandora. In the case of FakeUpdates, it has affected 11.9% of companies in Spain. Mobile Malware In the realm of mobile devices, Anubis remains the most utilized malware in Spain, followed by AhMyth and Hiddad, all designed to compromise the security and privacy of Android device users by collecting confidential information and executing malicious actions.
[ ... ]
How can I hide my IP?
Accessing the Internet involves connecting our computer, smartphone, tablet, etc. to a communications server that is responsible for providing access to the network. This connection involves the identification and exchange of data about our identity, IP address, and online activities that are recorded forever as a trace of our navigation. Can I be tracked through my IP address? Yes, it is possible to trace an IP address and for those who consider privacy a priority, this is a major problem because, in addition to being exposed throughout the network, the increasingly intensive use of the Internet has led to this type of data becoming an object of interest for cybercriminals seeking personal or confidential information that can be used for their benefit. To safeguard against all this, there are several methods to hide the IP address, ensure our online privacy, improve our security on the Internet, and prevent anyone from knowing what pages we visit, the time we have spent on every connection, or what we are downloading. What are the advantages of hiding my IP? Apart from everything related to privacy and security already mentioned, hiding the IP offers different advantages for users in multiple circumstances: There are IP hiding services that prevent IP geolocation when we travel and allow us to connect to the network as if we were doing it from our own country, overcoming, for example, any network access limitations that may exist in the place where we are. We will be able to download files anonymously avoiding that the rest of the users can see our IP location. If our IP is not "in sight", the possible limitations and blockages of the Wi-Fi network and even of our ISP (Internet Service Provider) disappear. Thanks to the data encryption system of the most advanced IP hiding services, our vulnerability in connections to public Wi-Fi networks is minimized. When the system detects a location different from the real one, this can give us advantages to buy in online stores with different offers according to the country or to avoid the blocking of games, maps, and online game add-ons that may have restrictions on our location. How can I hide my IP? IP hiding is achieved through the use of specific services and tools to hide the IP and encrypt our traffic, those services allow us to hide the real communications we make during our navigation. Besides those techniques that are based on the modification of network protocols and require certain skills to carry them out, there are several technologies within the reach of all users: VPN or Virtual Private Network Proxy or Web proxy Tor Public Wifi How to hide the IP address with a VPN? VPNs are services that connect us to the Internet through intermediate servers, in which our original IP address is " masked " by the IP address of that secure server. This concealment ensures that anyone tracing our connection will only see the IP address and location of the VPN server, but not our own. In addition, to safeguard our activity on the network, VPNs use tunneling and data encryption, encrypting the information we exchange with the VPN server, hiding it, and preventing third parties from being able to read it during its transit. The security of VPN connections is determined by proprietary VPN protocols, based on different standards and encryption and authentication methods, which depend on each developer. The range of options is wide and this allows us to choose between, for example, options that prioritize speed over security, options that do the opposite, options with a greater or lesser degree of reliability, etc. VPN applications always run in the background and do not hinder browsing. How to use a proxy server to hide the IP address? Unlike VPN services, proxy servers focus their activity solely on hiding the IP, without performing any type of concealment on our network traffic or any other data that could reveal our identity. Proxy servers act as intermediaries between our device and the destination server to which they transmit our requests on our behalf. Therefore, our IP will be hidden and the only one they will see will be the proxy one. There are different types of proxy services, from the simplest ones that only help us to hide the IP to others with extra functionalities such as blocking cookies, scripts, and other files hosted on websites and sent to the user. Browsers or applications based on the HTTP protocol offer the manual proxy configuration function so that we can indicate the proxy web address and port to which we want to connect before browsing. In this way, any activity that we perform through that browser will always be routed to the proxy. Alternatively, you can also opt for the automatic proxy format that searches through DNS or DHCP for the URL from which to download the wpad.dat file that runs and allows the proxy connection with automatic authentication on your computer. How to hide your IP with Tor? Tor is a free software developed to ensure anonymous browsing of users on the Internet. To mask the IP Tor uses a network of volunteer computers or nodes through which it redirects our traffic and encrypts it before it reaches its destination. At least this redirection goes through three of these nodes, achieving repetitive re-encryptions so that any possible clue about our identity disappears. In this process, Tor assigns a random and geographically different IP to our connection so that the location by third parties is impossible (if you are curious to know the IP you have been assigned you can check it through our tool). This system allows different configurations depending on whether we are using a firewall, if our ISP is blocking Tor connections or if we navigate through proxy for example. Can I hide my IP with a public Wi-Fi connection? The answer is yes. A public Wi-Fi network can also be used to hide our IP address, although if we do not have it constantly at our disposal, the IP hiding is limited to the time we have access to a public network. As this type of network is a connection shared by many other people, this makes it impossible to trace a particular user or identify them on the destination server. However, it is precisely this general access that also makes us more vulnerable. And although through a connection to a public Wi-Fi we will solve the issue of IP hiding, security will never be total, because being an open network, we can be exposed to the will of hackers and other threats, including malware and viruses. And if I want to hide my IP address, how can I change it? It may also be the case that instead of masking the IP all we need to do is change our IP address at a given moment. Then, the solution is as simple as disconnecting the modem from the power supply and restarting it after a few minutes. In that time, if your IP address is dynamic (you can check it through the network connections tab on your computer), it will be deleted and your Internet provider will give you a new one. To make sure that everything went well, we recommend doing something as simple as writing down the IP address before turning off the router and checking it again once it is up and running again. Another possible way to achieve the same result if you have a smartphone with a data plan is to turn this device into a wireless access point to which you can connect your computer, thus hiding your usual connection. There are many options to hide the IP or to change it and now that you know how each of them works you will be able to decide which one suits you best.
[ ... ]
What is Worldcoin and what does scanning the iris involve?
04/03/2024Worldcoin was introduced in summer of 2023 as a revolutionary project with the mission of creating a 100% secure digital identity, essentially a kind of fortified "digital passport," based on the verification of a unique and non-transferable element inherent to each human being—the iris. According to its developers, World ID will help distinguish human online activity from that generated by machines. In the first phase of the project, the creation of this secure digital identity is planned for 2 billion humans. To make this possible, Worldcoin has called on the global population to scan their iris. In return, Worldcoin compensates participants with a few tokens of its successful cryptocurrency, WLD, which has quadrupled in value within a few weeks of its initial launch. The payment in WLD tokens is not coincidental; it is part of Worldcoin's strategy, aiming to leverage the new digital passports to create a comprehensive ecosystem that provides universal and equitable access to advanced financial services for the entire global population. To achieve this, they encourage "iris sellers" to use the Worldcoin cryptocurrency on its fee-free blockchain, unlike Bitcoin, Ethereum, or other cryptocurrencies that do charge transaction fees. How does Worldcoin work? Worldcoin aims to address the issues of bots, rapid creation of fake identities, and content with artificial intelligence. It is designed, according to its developers, to provide every individual in the world with a unique digital identification. Additionally, Worldcoin promises to ensure the financial inclusion of each person in a fair and equitable ecosystem through a universal basic income. Users receive this income in exchange for allowing their iris to be scanned. To create the secure digital passport with Worldcoin, users must undergo an iris scan, which serves as proof of humanity and a unique identity on the blockchain. This process ensures that the individual on the other side of that identity is a human and not a fake profile created with artificial intelligence. In pursuit of the success of their proposal, the company offers users a small amount of their own Worldcoin tokens in exchange for iris scanning. The initial incentive of receiving free cryptocurrency, in the form of a universal basic income, is emphasized by Worldcoin advocates as the basis for the inclusive and universal nature of their initiative. This approach allows anyone to scan their iris, and the WLD tokens received in return can assist people without access to traditional financial services in starting to save and invest. How to Scan the Iris with Worldcoin? The registration process with Worldcoin involves scanning the iris with an orb, the central hardware device of Worldcoin developed by Tools for Humanity. The orb is spherical and processes all the information. Currently, Worldcoin has installed orbs in different countries, including Spain, where users can scan their iris in exchange for Worldcoins. To do this, it is necessary to download the Worldcoin mobile application, World ID, generate a QR code with it, and display it in front of the orb. The orb, upon recognizing it, will scan the user's iris, while a Worldcoin collaborator remotely oversees the operation. The orb takes less than a minute to perform the scan and validate the subject's identity. In exchange for their iris, the user receives a unique number called "IrisHash" and a cryptographic wallet with Worldcoins. "This digital passport is accepted as proof of unique humanity, which people can use in the digital world without the need to share any other data," assure its developers. What happens with my scanned iris in exchange for Worldcoins? Once the iris scan is completed, and digital identity is granted to the user, Worldcoin assures that the orb quickly eliminates the images unless the user requests their preservation. Only the set of numbers called "IrisHash" is stored for identification, without any additional biometric data. Worldcoin also commits to ensuring that users share only the necessary information they wish to share, providing verification options through linked devices or the additional facial authentication orb for high-security cases. Despite these commitments, the collection of biometric data through iris scanning for the unique proof of humanity continues to raise significant questions regarding privacy and information security. Some countries such as Brazil, France, India, or Kenya have halted Worldcoin's iris scanning. How much do you get paid for scanning your iris? Worldcoin pays 25 WLD for scanning your iris, which, according to the cryptocurrency's exchange rate in February 2024, has translated to an average of between 50 and almost €160 for iris sellers, depending on the value of Worldcoin on the day they scanned their iris. At the beginning of February, the value of each WLD unit was around two euros, and by the end of the month, it had risen to nearly seven euros. What can I spend my WLD on? 'Iris sellers' have the freedom to use their Worldcoins from the moment they receive them. They can exchange the payment for other cryptocurrencies, withdraw them in euros from a specialized ATM, or hold onto the tokens in the hope of an increase in their value. Additionally, WLD payments are already accepted on platforms such as Discord, Shopify, Minecraft, Telegram, Mercado Libre, or Reddit, among other places. Who is behind Worldcoin? Worldcoin bears the stamp of two innovative minds: Sam Altman and Alex Blania. Altman is the CEO of OpenAI and a key figure in artificial intelligence development, leading projects like ChatGPT. Blania, on the other hand, is the co-founder of Tools For Humanity, contributing his experience in creating technological tools for a more equitable economic system to this new and successful cryptocurrency.
[ ... ]
Detected a Trojan that emulates the WhatsApp account and fraudulently manages subscriptions to payment sites
17/10/2022Kaspersky researchers has reported that YoWhatsApp advertised on Snaptube and Vidmate, two of the most popular download platforms at the moment, is actually a Trojan capable to issuing paid subscriptions and stealing WhatsApp accounts. YoWhatsApp would act as a mod of the original messaging program, offering new functions that the official service does not allow, such as wallpapers, personalized fonts for chats and password-protected access to conversations, .... As Kaspersky researchers have explained, when a user installs YoWhatsApp on a device, it’s forced to log in to they real application account, and in this moment, Triada Trojan is activated, downloaded and executed on the terminal. Once this is done, the Trojan is capable of accessing the user's real WhatsApp account credentials, steal all the data, having already detected unauthorized subscriptions to paid subscriptions. Kaspersky recommends to install, only, Apps from official stores and reliable sources and they have insisted on the need to check always the permissions granted to each application. Installing an antivirus is another recommended measure.
[ ... ]
Vodafone tests a new technology to identify the activity of their users on Internet
03/06/2022Vodafone has begin to test a new way of tracking the activity of their users on the network. This is an advertising identification system called TrustPid, which works by creating a fixed ID for each customer at the Internet Service Provider (ISP) level. After that, this ID will associates all user activity with it. The objective is to use the data obtained for the distribution of publicity and personalized advertising and to prevent publishers from losing revenue. According to the company, there is no way to circumvent the system at the browser level, blocking cookies or masking the IP address and they assure that it is a simple toll if people want to continue consuming high-quality content on the Internet without paying. “Consumers appreciate the idea of the free internet, but this needs a trade-off: publishers need a sustainable revenue model, which means adding subscription paywalls or relying on advertising to keep free access and ensure high-quality content”, they justify. At the moment, Vodafone is testing advertising identification in Germany with some of the country's largest websites, Bild.de and Deutsche Telekom, the parent company of T-Mobile.
[ ... ]
Madrid taxis already accept payment with cryptocurrencies
24/05/2022From this month of May, Madrid taxi users will be able to pay in cryptocurrencies. The possibility of this new means of payment comes after the agreement between the taxi sector and the Woonkly company, which has distributed dataphones to all taxi drivers so that payment with cryptocurrencies can be made. Madrid is the first city in Spain to introduce this means of payment in taxis, which is also contemplated by various municipalities in the United Kingdom and the Scandinavian countries. At the moment, the cryptocurrencies accepted in Madrid taxis are Ethereum, Bitcoin BEP2, Woonkly Power, Binance Coin, Cardano, Avalanche, Binance USD, Polkadot, USD Coin, Tether and Wrapped BN. The technology of the dataphones that are prepared to print the proof of the operation once the payment has been made, belongs to Waynance, a firm from Alicante, whose payment gateway has become the first universal payment system for cryptocurrencies. It allows payments done from any payment platform (POS, e-commerce, etc.), with any cryptocurrency, through any decentralized wallet and, above all, instantly.
[ ... ]
New Wifi technology to accurately count seated people
27/09/2021Small natural gestures such crossing your legs, checking your mobile, or scratching your nose are enough to count the number of people sitting in certain space. A group of researchers from the University of California have developed a system that overcomes the precision problems that the lack of movement during most of the time in seated people caused in this type of counting operations. This new system also allows those seated behind a wall to be counted. The new technology that is suitable for Wi-Fi devices is based on a mathematical model that, in a similar way to how the queue management theory works, relates the total number of gestures to the number of people sitting in the same space. Accuracy is 96.3, based on tests performed during the study. In addition, the researchers say, the system offers an accuracy of almost 90%, in the detection of people behind the walls or dividing columns of any space.
[ ... ]
Ransomwhere, new platform to track cyberattack payments
13/07/2021This week was made known the unveiling of Ransomwhere, a new collaborative data platform born with the intention of being able to track 'ransomware' ransom payments to cybercriminals wallets. The platform launched by cybersecurity researcher Jack Cable, allows data to be entered into the Ransomwhere website in an open and transparent format, so that users can easily report on the cryptocurrency wallets used in their ransomware attack payments, often included in the ransom notes of the attacks, and through this data the figure obtained in extortion payments to cybercriminals is obtained. As these payments are made with cryptocurrencies, the transactions can be traced as they are opened by the use of the blockchain or Blockchain. According to the first data obtained in these first weeks of operation, Ransomwhere has reported that it has already recorded more than $33 million paid this past year in ransomware and accumulated data of about $28 million more satisfied previously. This information also shows that the ransomware with the highest income so far is Netwalker, with more than 27 million dollars, followed by REvil / Sodinokibi, with more than 11 million.
[ ... ]