A new FakeUpdates campaign targeting WordPress sites has been detected
20/03/2024Over the past few weeks, a new wave of the FakeUpdates malware, also known as SocGholish, has been detected, aimed at WordPress websites. The objective is to lure users into downloading remote access trojans, allowing attackers to take control of their systems. Since its emergence in 2017, FakeUpdates has been one of the most recurring malicious software in the cyber threat landscape. It has previously been associated with cybercriminal groups like Evil Corp, who monetize its use by selling access to infected systems. In this new campaign, cybercriminals are using JavaScript to target WordPress web pages, compromising compromised administrator accounts to introduce altered versions of WordPress plugins. These adulterated versions deceive users into downloading remote access trojans, granting attackers full control over infected devices. What is the most popular type of malware? In addition to the FakeUpdates attack, the threat index from Check Point Research, whose researchers have warned about this new attack, reveals around 200 suspicious content websites directed by ransomware groups. They utilize double extortion tactics to pressure victims into paying immediate ransoms. These attacks have impacted many companies, with the Lockbit3 ransomware being the most utilized by cybercriminals, followed by Play and 8base. The most exploited vulnerabilities by malicious actors include 'Web Servers Malicious URL Directory Traversal,' 'Command Injection Over HTTP,' and 'Zyxel ZyWALL Command Injection,' affecting numerous companies worldwide and allowing attackers to access and manipulate files or execute commands on compromised systems. In Spain, despite a 7% decrease in malware attacks in February, the most sought-after malware includes FakeUpdates, Qbot, and Pandora. In the case of FakeUpdates, it has affected 11.9% of companies in Spain. Mobile Malware In the realm of mobile devices, Anubis remains the most utilized malware in Spain, followed by AhMyth and Hiddad, all designed to compromise the security and privacy of Android device users by collecting confidential information and executing malicious actions.
[ ... ]
What is Worldcoin and what does scanning the iris involve?
04/03/2024Worldcoin was introduced in summer of 2023 as a revolutionary project with the mission of creating a 100% secure digital identity, essentially a kind of fortified "digital passport," based on the verification of a unique and non-transferable element inherent to each human being—the iris. According to its developers, World ID will help distinguish human online activity from that generated by machines. In the first phase of the project, the creation of this secure digital identity is planned for 2 billion humans. To make this possible, Worldcoin has called on the global population to scan their iris. In return, Worldcoin compensates participants with a few tokens of its successful cryptocurrency, WLD, which has quadrupled in value within a few weeks of its initial launch. The payment in WLD tokens is not coincidental; it is part of Worldcoin's strategy, aiming to leverage the new digital passports to create a comprehensive ecosystem that provides universal and equitable access to advanced financial services for the entire global population. To achieve this, they encourage "iris sellers" to use the Worldcoin cryptocurrency on its fee-free blockchain, unlike Bitcoin, Ethereum, or other cryptocurrencies that do charge transaction fees. How does Worldcoin work? Worldcoin aims to address the issues of bots, rapid creation of fake identities, and content with artificial intelligence. It is designed, according to its developers, to provide every individual in the world with a unique digital identification. Additionally, Worldcoin promises to ensure the financial inclusion of each person in a fair and equitable ecosystem through a universal basic income. Users receive this income in exchange for allowing their iris to be scanned. To create the secure digital passport with Worldcoin, users must undergo an iris scan, which serves as proof of humanity and a unique identity on the blockchain. This process ensures that the individual on the other side of that identity is a human and not a fake profile created with artificial intelligence. In pursuit of the success of their proposal, the company offers users a small amount of their own Worldcoin tokens in exchange for iris scanning. The initial incentive of receiving free cryptocurrency, in the form of a universal basic income, is emphasized by Worldcoin advocates as the basis for the inclusive and universal nature of their initiative. This approach allows anyone to scan their iris, and the WLD tokens received in return can assist people without access to traditional financial services in starting to save and invest. How to Scan the Iris with Worldcoin? The registration process with Worldcoin involves scanning the iris with an orb, the central hardware device of Worldcoin developed by Tools for Humanity. The orb is spherical and processes all the information. Currently, Worldcoin has installed orbs in different countries, including Spain, where users can scan their iris in exchange for Worldcoins. To do this, it is necessary to download the Worldcoin mobile application, World ID, generate a QR code with it, and display it in front of the orb. The orb, upon recognizing it, will scan the user's iris, while a Worldcoin collaborator remotely oversees the operation. The orb takes less than a minute to perform the scan and validate the subject's identity. In exchange for their iris, the user receives a unique number called "IrisHash" and a cryptographic wallet with Worldcoins. "This digital passport is accepted as proof of unique humanity, which people can use in the digital world without the need to share any other data," assure its developers. What happens with my scanned iris in exchange for Worldcoins? Once the iris scan is completed, and digital identity is granted to the user, Worldcoin assures that the orb quickly eliminates the images unless the user requests their preservation. Only the set of numbers called "IrisHash" is stored for identification, without any additional biometric data. Worldcoin also commits to ensuring that users share only the necessary information they wish to share, providing verification options through linked devices or the additional facial authentication orb for high-security cases. Despite these commitments, the collection of biometric data through iris scanning for the unique proof of humanity continues to raise significant questions regarding privacy and information security. Some countries such as Brazil, France, India, or Kenya have halted Worldcoin's iris scanning. How much do you get paid for scanning your iris? Worldcoin pays 25 WLD for scanning your iris, which, according to the cryptocurrency's exchange rate in February 2024, has translated to an average of between 50 and almost €160 for iris sellers, depending on the value of Worldcoin on the day they scanned their iris. At the beginning of February, the value of each WLD unit was around two euros, and by the end of the month, it had risen to nearly seven euros. What can I spend my WLD on? 'Iris sellers' have the freedom to use their Worldcoins from the moment they receive them. They can exchange the payment for other cryptocurrencies, withdraw them in euros from a specialized ATM, or hold onto the tokens in the hope of an increase in their value. Additionally, WLD payments are already accepted on platforms such as Discord, Shopify, Minecraft, Telegram, Mercado Libre, or Reddit, among other places. Who is behind Worldcoin? Worldcoin bears the stamp of two innovative minds: Sam Altman and Alex Blania. Altman is the CEO of OpenAI and a key figure in artificial intelligence development, leading projects like ChatGPT. Blania, on the other hand, is the co-founder of Tools For Humanity, contributing his experience in creating technological tools for a more equitable economic system to this new and successful cryptocurrency.
[ ... ]
Google Integrates Gemini AI into Google Ads
29/01/2024Google has commenced the integration of Gemini's Artificial Intelligence (AI) into the conversational experience of its Google Ads service. This integration aims to assist marketing professionals in creating more effective advertising campaigns through the generation of specific content. Conversational Experience Empowered by Gemini Initially available for English-speaking advertisers in the United States and the United Kingdom in beta, this expansion will roll out globally in the coming weeks, with plans to include other languages in the near future. By providing the website's URL, the AI generates relevant advertising content, including creative pieces and keywords, facilitating the creation of optimized campaigns. Suggestions for Tailored Images in Captivating Visual Campaigns In an upcoming development, Google Ads' conversational experience will also include the ability to suggest images tailored to the campaign through the use of generative AI and materials from the advertiser's landing page. This feature, scheduled for implementation in the coming months, will provide advertisers with a comprehensive solution for creating visually appealing campaigns. Google has emphasized that all images generated by AI in Google Ads will be clearly identified, thanks to the SynthID technology that places an invisible watermark accompanied by open standard metadata.
[ ... ]
Where can I watch the Spanish Soccer League, on TV or via Streaming?
16/06/2023This new season of LaLiga Santander will be again, at least for the time being, a competition marked by restrictions on access to stadiums and that is why more than ever, watching LaLiga on television will become the main option for many fans to follow soccer from home. If you are one of those who do not want to miss the LaLiga Santander matches live, then find out here where to watch the Spanish League on TV or via Streaming. How to watch LaLiga on TV? Once again this season, Gol TV repeats as free-to-air soccer and sports channel on DTT. This channel offers one free match per day, which can be watched by tuning in to the channel on television or through Gol's website. You can access this channel completely for free and although the teams that play each day's match always vary, there are no matches involving FC Barcelona, Real Madrid, or teams playing in European competitions. How to watch soccer on Movistar+? So if this deal doesn't suit our needs and what we are looking for is a channel where we can watch all the LaLiga matches (or almost all of them), Movistar+ offers 9 of the 10 matches of each day, always one involving Real Madrid or Barcelona. In order to watch LaLiga Santander matches live on Movistar+ we must be subscribed to a Movistar package containing "Movistar LaLiga": Fusión Selección with LaLiga, Fusión Selección Plus with Fútbol and Fusión Total Plus. Watching soccer on Movistar+ offers practical functionalities such as being able to activate the channel on any of our devices or use the live control to replay any play whenever we choose, return to the beginning of the match or return to the live broadcast whenever we want. What can I watch on Orange TV? Another network that offers LaLiga on television is Orange TV, which after reaching an agreement with Telefónica, owner in Spain of the television broadcasting rights of the main soccer competitions, invites its customers to enjoy every week of soccer, the 10 matches that are played every day, including all Real Madrid and FC Barcelona matches in 4K resolution. In this case, to watch LaLiga on Orange TV we must be subscribed to one of the three Orange packages that include soccer: Love Total, Love Total Plus, or Love Total Plus 4. How to watch LaLiga via streaming? If due to location, mobility, or any other reason we prefer to watch LaLiga via streaming instead of on TV, we also have several options at our disposal. As we said before, Movistar+ offers the possibility of watching soccer on your devices, wherever and whenever you want, even from abroad. To access the service, you only need to have a Fusión package that includes soccer, activate your user, and access Movistar+ with your passwords on any of the compatible devices connected to the Internet (former Yomvi service). Thus, as long as we are subscribed to a package that includes the match, we will be able to watch it on all our devices, including the Smart TV. And if we are away from home we will be able to do it on smartphones, computers, and tablets. Where to watch the Spanish League from the United States and Canada? All LaLiga matches in the United States are broadcast live on ESPN+, the subscription-based sports platform owned by Walt Disney Direct-to-Consumer & International, which offers live streaming coverage and on-demand replays of LaLiga Santander matches. ESPN+ has broadcast rights to the Spanish league for eight seasons in the United States and also in Canada, where it offers full coverage of LaLiga matches to Canadian viewers through TSN.ca, RDS.ca, and the TSN and RDS apps. In addition, watching the Spanish Premier League in Latin America is possible through ESPN 2 in most countries and through some platforms such as Fox Sports Web or Now Net and Claro in Brazil. Browse the Internet safely and securely
[ ... ]
European companies are facing million-euro losses due to connectivity issues
12/06/2023A study by Cradlepoint reveals that European businesses could be losing milions of euros every week as a result of connectivity problems. According to the State of Connectivity in Europe report, conducted in collaboration with Censuswide, 74% of companies experience at least 2 hours of connectivity loss each week. One hour of downtime can be valued at 332,600 euros, according to Statista. These connectivity issues have also generated additional operating costs for 47% of the surveyed companies, and 33% have missed out on business opportunities due to these problems. Furthermore, the education sector is affected, as 80% of respondents state that poor connectivity hinders the development of skills necessary to thrive in a modern economy. The study also highlights that 21% of European companies have lost talent due to connectivity issues. The findings also conclude that improving connectivity is considered crucial for 90.5% of the surveyed companies, as it would help them better manage potential economic, social, and political challenges and increase their resilience to future disruptions.
[ ... ]
The United States accelerates the digital dollar
23/11/2022After US President Joe Biden ordered this past week to urgently evaluate the creation of the digital dollar, the Federal Reserve Bank and companies such US Bank, Citi, HSBC and Wells Fargo have announced a pilot prove to test the new currency. The digital Dollar will be issued centrally and its regulated liability network (RLN) will be tested for twelve weeks, during which the participating banks will operate in a simulated way, using tokens that will act as deposits from their clients that will be settled in a central reserve in a shared distributed ledger. This will be use to evaluate its security and operation in financial transactions and agreements. In parallel, China continues to promote the Digital Yuan and the European Central Bank (ECB) is also advancing in the creation of the digital euro, a project that the latest information indicates it cab be already viable in 2025. And while all this is happening, the information that ensures an imminent regulation for cryptocurrencies increases.
[ ... ]
Google presents its new augmented reality search experiences
21/11/2022Google presents its new augmented reality search experiences From this week, Google users in London, Los Angeles, New York, Paris, San Francisco and Tokyo will be able to enjoy the new Live function on their Android and iOS terminals, View Live, an immersive augmented reality (AR) experience that offers to explore the environment that surrounds us from our mobile. With Live View, Google has explained, users will be able to use their mobile phones to discover the shops and other establishments that they have around, from which they we will receive information about their open hours, type of sale, etc. To do this, it is necessary to install the application, which will soon be available in more cities than those included in this first launch, and focus the mobile camera on the buildings and stores that we have in view. Then, the information available for each one will appear. Google has also announced the global launch of a functionality that is currently only operational in Australia, Japan, the United Kingdom and the United States, which reports on accessibility to shops and other establishments and premises for people with reduced mobility. The accessible places are marked with a wheelchair icon and the users can access to relevant information is displayed, such if that place have adapted bathrooms, if interior mobility in a wheelchair is possible, or if they have accessible parking spaces. The third novelty announced by Google is a new tool for electric vehicle drivers, with real-time information on the nearest charging stations.
[ ... ]
Google Maps introduces new search opcions of ecological routes
21/09/2022Google will incorporate in Google Maps , new ecological routes that will be able to guarantee a lower impact from vehicles on the environment and, also, minimize fuel consumption.This new functionality of more sustainable itineraries will be implemented in Europe during next weeks, after having been successfully tested in the United States and Canada, where, according to Google in a statement sent to Europa Press, they have contributed to avoiding more than half a million tons of carbon emissions, in only one year.To suggest the best ecological route, Google Maps will ask the user about the type of engine of the vehicle that is going to use and then will show the driver all his available itinerary options and an accurate estimate of the consumption efficiency of the vehicle.Additionally, the package of new Google Maps features also incorporates the option to activate the display of charging points for electric vehicles; new bike routes, and Live View option, to supervise streets in real time.
[ ... ]
Google Health will be use to study the impact of mobile phones on our mental health
01/06/2022Spaniards spend an average of 3 hours and 40 minutes a day connected to the mobile. This time multiplied from Monday to Sunday is the same as more than 25 hours a week, according to the Digital Consumer by Generation report. To analyze the impact of all this time of digital consumption on our mental health, a group of researchers from the University of Oregon (United States) has just announced that they will use the Google Health app to analyze how users use their smartphones and discuss how in the future, digitals products and devides can make people happier, without falling into dependency. In their work, they will measure factors such as sleep or physical activity, for which they will also use the data collected by Fitbit, the activity bracelets owned by Google. One of the researchers, Dr. Nicholas Allen, stressed that "some studies similar to the one that we are going to start, usually condem the technology based on their conviction that it must be bad for mental health and well-being." . For this reason, he believes that is not positive to focuses only on the potentially harmful effects of the use of the devices, and also is important to takes into account the benefits that they offer.
[ ... ]
How to know if Pegasus has infected our mobile
05/05/2022The news of recent weeks, in which it is claimed that the Pegasus espionage program has been used to enter the mobile devices of Spanish politicians, has put a lot of people on alert. Pegasus is a malicious software that, once introduced on a device, has the ability to collect information and transmit it to an external entity without the consent or knowledge of the owner of the device, be it a mobile phone, a computer or a tablet. Pegasus also erases its trail after it is installed. Among its main features, it also stands out that Pegasus is capable of detecting who the owner of the device has been with. Pegasus also, can send and recive messages autonomously and recording conversations by manipulating the attacked mobile, computer or tablet. The two ways that this spy program uses to enter on a devices is through an SMS or a fraudulent link and, according to experts, despite the fact that it is a very difficult spyware to detect, there are some signs that can make us suspect that we have been infected. Overheating or slowdown of the system are two of the main ones, but also the fact that the battery life is decreasing or that there is excessive data consumption when we are not using the device. How to make it difficult for Pegasus To try to avoid being infected by Pegaus or by any other malware, the director of Systems Engineering at Fortinet from Spain and Portugal, José Luis Laguna, in statements collected by Europa Press, recommends taking extreme precautions and a make a double-checking when personal and confidential information is provided. In addition, the Fortinet expert explains that instead of clicking on the link that we have received, to verify that it is legitimate, it is recommended to write the address of the site in the web browser, even though this means taking an additional step and not accessing directly to this service. Using protection 'software' based on behavior - EndPoint Detection and Response (EDR) -, keeping the system updated, avoiding public Wi-Fi connections and checking the permissions granted to applications, are other precautions that are also recommended.
[ ... ]
Meta would abandon cryptocurrencies to bet on tokens
13/04/2022The Financial Times has published that Meta, the company that owns Facebook and Instagram, is working on a new digital currency that, at least internally, has already been baptized as "Zucks Bucks", in a clear reference to its founder and CEO, Mark Zuckerberg. After the two failures of Meta related to cryptocurrencies, Diem and Libra, it seems that the new project would focus on the development of tokens that could be used in the company's Apps to acquire presentations or advantages. In parallel, Meta is also studying the integration of NFT in Facebook, a beta version of which could be ready in a few weeks, in mid-May.
[ ... ]
Island Browser for Business Reaches $1.3 Billion Value
06/04/2022Just some weeks after its launch, Island, the webbrowser focused in enterprise and security, has just reached a $1.3 billion valuation. Island browser is based on chromium and has been developed by two former Symantec executives, who were looking for an option configured to the web security needs of companies and not conventional users. The new browser, in addition to limiting the add-ons that many often some people install on company computers and that sometimes cause significant security breaches, incorporates specific tools to prevent this type of actions, protect SaaS applications, identify incidents and prevent data theft. Depending on the level of security required by each company, Island Browser allows, for example, to download content or not, disable or enable the copy and paste option or deny access to certain domains, among other options. From Island, also insist that their project is based on the utility and not on the consumer, so that the characterization level of Island browser it offers the minimum.
[ ... ]
VPN connections in Russia are growing more than 11.000%
29/03/2022The virtual private networks (VPN) demand in Russia has not stopped increasing for weeks, and according to data from Google Play and the Apple Store, in just one day, on March 14, when the blocking of Instagram took effect in In that country, VPN installations in Russia grew by 11,000%. Until now, the Kremlin has already blocked Instagram, Facebook and Twitter, bringing up the demand for VPNs by Russian citizens to record highs, with the intention of being able to connect to their social networks. VPN connections allows to use internet, preserving the anonymity of the user and his location. The VPN services, connect us to the Internet through intermediate servers, in which our original IP address is "impersonated" by the IP address and location of the VPN server. This makes us appear with a permanently different IP, making it seem that we are in a city or even in a different country than the one we actually are in. VPNs also have the added advantage that encrypts all data from start to finish of the communication, making it 100% guaranteed to be untraceable.
[ ... ]
Fear of China spying on athletes' smartphones during the Beijing Olympics
21/01/2022A few weeks before the start of the Beijing 2022 Winter Olympic Games, February 4 to 20, the media in the Netherlands and the United Kingdom have confirmed that the Olympic committees of their countries have asked their athletes not to take their Smartphones and computers with them. The reason, they said, is the fear of Chinese espionage. For these reason, both sports organizations will equip all their athletes and other support personnel with new devices so that they can be connected during their stay in China, without exposing their personal data at risk. The decision by the Netherlands Committee was known in an interview in the Volkskrant newspaper, which appeared earlier this week. Geert Slot, the spokesman for the Netherlands Olympic Committee, explained that "Cybersecurity has become a much bigger topic in recent years, and China is a very special case." In addition to the Netherlands and England, Australia is known to have made a similar recommendation to its athletes, and also the United States.
[ ... ]
SQUID, the cryptocurrency of "The Squid Game" collapses
08/11/2021In just over a week, SQUID, the cryptocurrency that was launched on the market at the pull of "The Squid Game" has seen its value plummet after it was reported that his anonymous founders had withdrawn the cryptocurrency and all the earnings of the people who had invested in it. SQUID launched on October 26th at prices of $ 0.01 and reached its record price of $ 2,856.64 on November 1st. At that time, according to the users affected, the website created for this cryptocurrency was not working anymore and users could no longer sell their SQUIDS, or protect their Investments. According to the first investigations, the creators of the cryptocurrency of "The Squid Game", charged all their coins for real money, depleting the liquidity fund of the exchange that cannot sustain its value. The platform through which this cryptocurrency was traded did not have any official endorsement.
[ ... ]
Google tests parcel delivery drones from shop's roofs
18/10/2021Google is testing a new drone product delivery system in Australia, with launch platforms from the store's roofs. To carry out the test, Google have the collaboration of the Vicinity’s shopping centres. Their customers can buy their products online and a drone waiting on the store's roof will take the items to the delivery address. In addition, Google tests the same take-off system from the store itself and not from the distribution centres, in Logan, United States, where more than 2,500 deliveries have already been made successfully with this system. As a curiosity and according to these results, the most demanded products by this system are teas, shakes, sushi and food. In the next weeks the system will be also prepare to delivered medicines and beauty and personal hygiene products.
[ ... ]
Ransomwhere, new platform to track cyberattack payments
13/07/2021This week was made known the unveiling of Ransomwhere, a new collaborative data platform born with the intention of being able to track 'ransomware' ransom payments to cybercriminals wallets. The platform launched by cybersecurity researcher Jack Cable, allows data to be entered into the Ransomwhere website in an open and transparent format, so that users can easily report on the cryptocurrency wallets used in their ransomware attack payments, often included in the ransom notes of the attacks, and through this data the figure obtained in extortion payments to cybercriminals is obtained. As these payments are made with cryptocurrencies, the transactions can be traced as they are opened by the use of the blockchain or Blockchain. According to the first data obtained in these first weeks of operation, Ransomwhere has reported that it has already recorded more than $33 million paid this past year in ransomware and accumulated data of about $28 million more satisfied previously. This information also shows that the ransomware with the highest income so far is Netwalker, with more than 27 million dollars, followed by REvil / Sodinokibi, with more than 11 million.
[ ... ]
Macro cyber-attack affects more than 350 companies worldwide
07/07/2021The number of companies that have suffered from the REvil macro cyberattack now exceeds 350 organizations worldwide from which the cybercriminals are demanding 70 million in bitcoins to provide them with a universal decryptor to restore their data. The attack was conducted through the update system of IT services software company Kaseya, which REvil exploited to spread and hide ransomware. The virus was leaked to TI Kaseya resellers and from there has reached all end customers using their software. The official data provided by TI Kaseya sets the number of affected companies at 350, although other sources such as the cybersecurity company ESET talk about more than 1,000, including some Spanish organizations, although no names have been disclosed. It has been made public that one of the companies most affected by the cyberattack has been the Swedish supermarket chain Coop, which has had to close its more than 800 points of sale for a few days due to the impossibility of using its cash registers or charging customers. Based on Sophos threat intelligence, REvil has been active in recent weeks and is currently the dominant ransomware gang involved in Sophos' defensively managed threat response cases. Prior to this latest attack, they were also responsible for the one suffered by meat company JBS, which forced the cancellation of all work shifts at the company's slaughterhouses in the US. JBS paid up to 11 million to restore normal operations. These macro cyber-attacks are in addition to other recent and highly significant ones, such as the one perpetrated by the hacker group DarkSide, which forced the preventive shutdown of the largest oil pipeline network in the United States, Colonial Pipeline, endangering the supply of fuel in a large part of the country, or the one suffered by the SEPE and the Ministry of Labor in Spain a few weeks ago.
[ ... ]