A new FakeUpdates campaign targeting WordPress sites has been detected
20/03/2024Over the past few weeks, a new wave of the FakeUpdates malware, also known as SocGholish, has been detected, aimed at WordPress websites. The objective is to lure users into downloading remote access trojans, allowing attackers to take control of their systems. Since its emergence in 2017, FakeUpdates has been one of the most recurring malicious software in the cyber threat landscape. It has previously been associated with cybercriminal groups like Evil Corp, who monetize its use by selling access to infected systems. In this new campaign, cybercriminals are using JavaScript to target WordPress web pages, compromising compromised administrator accounts to introduce altered versions of WordPress plugins. These adulterated versions deceive users into downloading remote access trojans, granting attackers full control over infected devices. What is the most popular type of malware? In addition to the FakeUpdates attack, the threat index from Check Point Research, whose researchers have warned about this new attack, reveals around 200 suspicious content websites directed by ransomware groups. They utilize double extortion tactics to pressure victims into paying immediate ransoms. These attacks have impacted many companies, with the Lockbit3 ransomware being the most utilized by cybercriminals, followed by Play and 8base. The most exploited vulnerabilities by malicious actors include 'Web Servers Malicious URL Directory Traversal,' 'Command Injection Over HTTP,' and 'Zyxel ZyWALL Command Injection,' affecting numerous companies worldwide and allowing attackers to access and manipulate files or execute commands on compromised systems. In Spain, despite a 7% decrease in malware attacks in February, the most sought-after malware includes FakeUpdates, Qbot, and Pandora. In the case of FakeUpdates, it has affected 11.9% of companies in Spain. Mobile Malware In the realm of mobile devices, Anubis remains the most utilized malware in Spain, followed by AhMyth and Hiddad, all designed to compromise the security and privacy of Android device users by collecting confidential information and executing malicious actions.
[ ... ]
Ethernet cables
Ethernet cables are a must if we want to have a good internet connection, enjoy a good browsing experience, access content quickly, work and transfer files immediately, enjoy online entertainment, etc. Therefore, beyond looking for the best offer on the internet, it is important to choose the best ethernet cable to make the most of our connection
[ ... ]
How can I hide my IP?
Accessing the Internet involves connecting our computer, smartphone, tablet, etc. to a communications server that is responsible for providing access to the network. This connection involves the identification and exchange of data about our identity, IP address, and online activities that are recorded forever as a trace of our navigation. Can I be tracked through my IP address? Yes, it is possible to trace an IP address and for those who consider privacy a priority, this is a major problem because, in addition to being exposed throughout the network, the increasingly intensive use of the Internet has led to this type of data becoming an object of interest for cybercriminals seeking personal or confidential information that can be used for their benefit. To safeguard against all this, there are several methods to hide the IP address, ensure our online privacy, improve our security on the Internet, and prevent anyone from knowing what pages we visit, the time we have spent on every connection, or what we are downloading. What are the advantages of hiding my IP? Apart from everything related to privacy and security already mentioned, hiding the IP offers different advantages for users in multiple circumstances: There are IP hiding services that prevent IP geolocation when we travel and allow us to connect to the network as if we were doing it from our own country, overcoming, for example, any network access limitations that may exist in the place where we are. We will be able to download files anonymously avoiding that the rest of the users can see our IP location. If our IP is not "in sight", the possible limitations and blockages of the Wi-Fi network and even of our ISP (Internet Service Provider) disappear. Thanks to the data encryption system of the most advanced IP hiding services, our vulnerability in connections to public Wi-Fi networks is minimized. When the system detects a location different from the real one, this can give us advantages to buy in online stores with different offers according to the country or to avoid the blocking of games, maps, and online game add-ons that may have restrictions on our location. How can I hide my IP? IP hiding is achieved through the use of specific services and tools to hide the IP and encrypt our traffic, those services allow us to hide the real communications we make during our navigation. Besides those techniques that are based on the modification of network protocols and require certain skills to carry them out, there are several technologies within the reach of all users: VPN or Virtual Private Network Proxy or Web proxy Tor Public Wifi How to hide the IP address with a VPN? VPNs are services that connect us to the Internet through intermediate servers, in which our original IP address is " masked " by the IP address of that secure server. This concealment ensures that anyone tracing our connection will only see the IP address and location of the VPN server, but not our own. In addition, to safeguard our activity on the network, VPNs use tunneling and data encryption, encrypting the information we exchange with the VPN server, hiding it, and preventing third parties from being able to read it during its transit. The security of VPN connections is determined by proprietary VPN protocols, based on different standards and encryption and authentication methods, which depend on each developer. The range of options is wide and this allows us to choose between, for example, options that prioritize speed over security, options that do the opposite, options with a greater or lesser degree of reliability, etc. VPN applications always run in the background and do not hinder browsing. How to use a proxy server to hide the IP address? Unlike VPN services, proxy servers focus their activity solely on hiding the IP, without performing any type of concealment on our network traffic or any other data that could reveal our identity. Proxy servers act as intermediaries between our device and the destination server to which they transmit our requests on our behalf. Therefore, our IP will be hidden and the only one they will see will be the proxy one. There are different types of proxy services, from the simplest ones that only help us to hide the IP to others with extra functionalities such as blocking cookies, scripts, and other files hosted on websites and sent to the user. Browsers or applications based on the HTTP protocol offer the manual proxy configuration function so that we can indicate the proxy web address and port to which we want to connect before browsing. In this way, any activity that we perform through that browser will always be routed to the proxy. Alternatively, you can also opt for the automatic proxy format that searches through DNS or DHCP for the URL from which to download the wpad.dat file that runs and allows the proxy connection with automatic authentication on your computer. How to hide your IP with Tor? Tor is a free software developed to ensure anonymous browsing of users on the Internet. To mask the IP Tor uses a network of volunteer computers or nodes through which it redirects our traffic and encrypts it before it reaches its destination. At least this redirection goes through three of these nodes, achieving repetitive re-encryptions so that any possible clue about our identity disappears. In this process, Tor assigns a random and geographically different IP to our connection so that the location by third parties is impossible (if you are curious to know the IP you have been assigned you can check it through our tool). This system allows different configurations depending on whether we are using a firewall, if our ISP is blocking Tor connections or if we navigate through proxy for example. Can I hide my IP with a public Wi-Fi connection? The answer is yes. A public Wi-Fi network can also be used to hide our IP address, although if we do not have it constantly at our disposal, the IP hiding is limited to the time we have access to a public network. As this type of network is a connection shared by many other people, this makes it impossible to trace a particular user or identify them on the destination server. However, it is precisely this general access that also makes us more vulnerable. And although through a connection to a public Wi-Fi we will solve the issue of IP hiding, security will never be total, because being an open network, we can be exposed to the will of hackers and other threats, including malware and viruses. And if I want to hide my IP address, how can I change it? It may also be the case that instead of masking the IP all we need to do is change our IP address at a given moment. Then, the solution is as simple as disconnecting the modem from the power supply and restarting it after a few minutes. In that time, if your IP address is dynamic (you can check it through the network connections tab on your computer), it will be deleted and your Internet provider will give you a new one. To make sure that everything went well, we recommend doing something as simple as writing down the IP address before turning off the router and checking it again once it is up and running again. Another possible way to achieve the same result if you have a smartphone with a data plan is to turn this device into a wireless access point to which you can connect your computer, thus hiding your usual connection. There are many options to hide the IP or to change it and now that you know how each of them works you will be able to decide which one suits you best.
[ ... ]
Roku warns of unauthorized access to hundreds of its customers' accounts
19/03/2024A Roku investigation, the company that manufactures media streaming devices running Roku software to access all kinds of streaming content, has revealed unauthorized access to hundreds of its users' accounts, "likely due to compromised login credentials obtained from third-party sources unrelated to Roku," they said. According to the company itself, these credentials were used to access Roku accounts, where changes were made, including attempts to purchase streaming subscriptions. However, in an official statement, Roku said that any sensitive personal data such as full payment account numbers could not be accessed. The affected accounts were secured and required password resets, as well as the cancellation of unauthorized subscriptions. Roku has announced that it will refund its users for all unauthorized charges. "What can I do if I can't access Roku? Roku has reset all passwords for accounts affected by these unauthorized accesses, so if we are holders of one of them, we may not be able to access it in the usual way. To regain access, we should go to my.roku.com and use the "Forgot your password?" option. Additionally, the company recommends reviewing subscriptions and devices linked to the Roku account from the Roku account Dashboard."
[ ... ]
Google Business will display recent company posts on social media
18/03/2024Google has introduced a new feature in its Maps app and search engine that allows owners of Google Business profiles (GBP) to showcase the latest posts from their social media accounts. These business profiles are used by companies and organizations to manage their online presence and gather reviews of their services and products. Now, profile owners can add links to various social media platforms, including Facebook, Instagram, LinkedIn, Pinterest, TikTok, X (formerly Twitter), and YouTube to improve their online presence. How to add links to social networks in Google Business To add links to social networks in Google Business, you need to go to the profile editing menu and select the "Social Profiles" option within the Contact tab. Additionally, Google may automatically add social media links to business profiles that meet certain criteria, which can be edited or removed. This update, as explained by Google, aims to provide internet users with a more comprehensive view of company activities beyond the usual reviews and contact information.
[ ... ]
Samsung launches a microSD card that can record data for 16 years in a row
09/05/2022The new Samsung Pro Endurance microSD card that multiplies the normal life cycle of memory cards by more than 30 times, is now on sale. Samsung Pro Endurance can work continuously 140,160 hours or what is the same, 16 years, a period significantly higher than the average life of 5 years of a standard microSD card. Exclusively designed to cover the needs of video surveillance cameras, the memory card offers enhanced endurance and superior performance for continuous, smooth and reliable capture and playback. “Both consumers and business users can rest assured that our new memory card will ensure continuous recording in high resolution, even under extreme conditions,” said KyuYoung Lee, Vice President of Memory Brand Product Biz, Samsung Electronics Team. Samsung's new memory card offers read and write speeds of up to 100MB/s and 40MB/s, respectively, and a rated Video Speed Class 10 up to U3 and V30 According with Samsung, this makes this micro SD card ideal for handling large high-resolution files while allowing perfect Full HD and 4K recording and playback. The new Samsung Pro Endurance microSD is available in four different storage capacities, 32GB, 64GB, 128GB and 256GB.
[ ... ]
Chrome flies on Mac
16/03/2022New features introduced in the las version of Chrome browser have made it up to 43% faster on Mac computers, according to Apple's Speedometer browser responsiveness benchmark. The M99 version of Chrome introduces, as main change, the use of the “ThinLTO” build optimization technique, which has integrated parts of the base code that are critical for speed, even when they span multiple files or libraries. This integration, according to the Speedometer comparison, has meant that the new Chrome is generally 7% faster than Safari, and that its graphic performance is up to 15% higher. In addition, Google ensures that the loading time of web pages has been reduced by 15% on Android, where the introduction of the 'freeze-dried' tab loading process in the browser has also reduced the startup times by 13%.
[ ... ]
How to keep your Mac safe?
28/06/20215 things you should do to protect your Mac How many times have we heard that Mac is a more than secure and unbreakable system? For years, Apple has made its security through obscurity, or in other words, its proprietary software, flagship and brand guarantee. Today, however, just when Mac is no longer a minority option, Steve Jobs' system has become another favorite target for hackers and cybercriminals. The market has responded to this with the development of specific protection tools for Mac, while Apple works on optimizing its system in each version. Knowing what kind of tools exist for Mac and which ones are already included in our computer will help us to stay safe and choose the best strategy that fits our needs and use of the equipment. 1. Use computer security tools Cybersecurity is a universal and necessary practice in all operating systems today. The objective is to ensure protection against attacks and theft by cybercriminals who are looking for personal or confidential information stored on our computers or that enters or leaves them, in order to use it for their own benefit. What is VPN security? Cybersecurity tools help us to minimize our footprint on the Internet and thus increase our privacy and security. In this regard, VPN services for Mac stand out, as they incorporate advanced protection technologies capable of connecting to the Internet through intermediate servers, so that our IP address - our identification on the network - is replaced by the IP address of this secure server, without anyone being able to trace our connection. This type of VPN service also encrypts any information leaving our computer, thus preventing it from being accessed on its journey to its destination. This is essential, for example, when using public Wi-Fi networks to connect to the Internet. 2. Keep the operating system and software up to date As simple as it may seem, one of the best and easiest ways to protect a Mac is to always have the latest version of the operating system installed and to work with updated software downloaded from the Mac App Store. System updates usually include security patches, among other things. How do I update my Mac? Through the System Preferences Panel of our computer we can set that when there are available updates we receive a notice from MacOs warning us of it or that these updates, whether system data files, security updates or official software are installed automatically. To check if we are working with the latest versions available and our Mac is up to date we can do it by checking through this same panel if there are updates available at that time. If we have checked the automatic updates option, Mac will do this task for us routinely. 3. Use secure settings Mac's default security settings can be greatly enhanced by manually configuring the security and privacy terms of our computer. How to change the Privacy and Security preferences on the Mac? By accessing the "Privacy" tab of the "Security and Privacy" option of the Control Panel we will have the option to manage what information we allow our computer to make available to others over the Internet or on a network and what applications we allow access to our data and files. In the same way, but through the "Security" tab, we will be able to incorporate passwords for the access to different tasks and operations of the computer and through the "FileVault" tool we will be able to ensure the encryption, for example, of our personal information or certain documents for which a password will be required to unblock them. 4. Use an Antivirus for Mac There are antivirus programs developed specifically for Mac. Some of them are special for certain threats, although in general most of them offer a wide range of services to help us keep our computers safe. Which is the best antivirus for Mac? The range of antivirus for Mac, free and paid, is nowadays much wider than a few years ago, highlighting among the most complete and advanced, antivirus with malware protection functions in real time, tools against digital identity theft, protection against spyware or advanced detection and removal of blackmail programs. 5. Make regular backups Apple has a native function, Time Machine, which makes backup copies of our hard disk on a separate secondary disk, so that if for any reason we suffer an attack or a breakdown we can recover all the information. Many antiviruses offer a backup service, backup or backup similar but in the cloud, as a preventive measure against writing errors on the disk, theft of devices or even against data hijacking or ransomware.
[ ... ]
How to sign a PDF document with electronic signature?
24/06/2021When a document needs to be signed by one or more people, the usual thing, until now, has been to print it and stamp by hand the necessary signatures to validate or make its content official. This requires paper, printer, ink, but above all access to the document by all signatories, which is not always easy due to geographical location, availability, timing, etc. With teleworking on the rise and a growing globalization of business, these drawbacks have become more evident than ever, although they have found a quick and effective solution in electronic signatures. What is an electronic signature for? The electronic signature is a digital validation system for documents that unequivocally identifies the signatory. The electronic signature is assimilated to the handwritten signature and therefore its digital stamping on a document gives it the same validity, as it would have had with a handwritten signature. What are the advantages of electronic signatures? Electronic signatures simplify document management processes that require the validation of documents such as pdf signatures, facilitating remote signing by one or more people regardless of where they are located, or the situation or time of day they receive them. This flexibility contributes to the efficiency and agility of this type of procedure and being a secure signature system, it is suitable and useful in many areas related to business management, administrative management, e-commerce, informed consent and many other procedures. In addition to the versatility, practicality and security of the online PDF signature, we must also point out, as a great advantage of this process, its contribution to paperless. How to sign electronically? The electronic signature is easy to implement through tools specifically designed to guarantee not only the correct validation of the cryptographic signature or signatures included in a PDF document, but also that it cannot be altered and that all the necessary signatures required by each situation can be added. Within the framework of this type of tool, the most advanced ones, in addition to being compatible with any browser and accessible from any type of device - computer, tablet, Smartphone,... -, make it easy to convert PDF any Word, Excel, JPG, PowerPoint... file for signing. They also allow users to request a verifiable digital signature, view the properties of the digital signature and send the document directly by email to the signatories and once signed, forward it to all parties to download it. In addition, to guarantee the privacy of the documents and the security of the online signatures, these transfers are made through encrypted files with TLS encryption. Also, when we sign documents using this type of tool, they offer the option of including a LTV (Long Term Validation) time stamp that certifies the validity of the signature in the long term. For all these reasons, tools for signing PDF documents with electronic signatures are now a must for companies and businesses in all areas where process optimization, security and sustainability are a priority.
[ ... ]