Newly discovered Titanium backdoor employs clever ways to go undetected

Malware hides at every step by mimicking common software in long multi-stage execution.

Newly discovered Titanium backdoor employs clever ways to go undetected

Enlarge (credit: https://de.wikipedia.org/wiki/Benutzer:Alchemist-hp#/media/Datei:Titan-crystal_bar.JPG)

One of the world’s most most technologically advanced hacking groups has a new backdoor that’s every bit as sophisticated as its creators.

Dubbed Titanium by the Kaspersky Lab security researchers who discovered it, the malware is the final payload delivered in a long and convoluted attack sequence. The attack chain uses a host of clever tricks to evade antivirus protection. Those tricks include encryption, mimicking of common device drivers and software, memory-only infections, and a series of droppers that execute the malicious code a multi-staged sequence. Yet another means of staying under the radar is hidden data delivered steganographically in a PNG image.

Named after a password used to encrypt a malicious archive, Titanium was developed by Platinum, a so-called advanced persistent threat group that focuses hacks on the Asia-Pacific region, most likely on behalf of a nation.

Read 4 remaining paragraphs | Comments

Watch this beautifully disgusting liver fluke parasite explore man’s innards

He went to the doctors complaining of fatigue.

These are the only worms we'll welcome (and if you want 'em flat, you can smash 'em). If you want to see a large image of the flatworm in this story, however, <a href='//cdn.arstechnica.net/wp-content/uploads/2019/11/Screen-Shot-2019-11-08-at-3.53.01-PM.jpg'>here you go</a>.

Enlarge / These are the only worms we'll welcome (and if you want 'em flat, you can smash 'em). If you want to see a large image of the flatworm in this story, however, here you go. (credit: Photo OP / Getty Images)

Doctors in California found a throng of flatworm parasites overrunning a man’s innards—and they caught one of the little beasts on a horrifying video.

The case began innocently enough: a 40-year-old man arrived at an emergency room complaining of fatigue that had progressively gotten worse over a three-month period.

Doctors ran blood tests that determined that the man was anemic. They also found that he had high levels of white blood cells called eosinophils, which usually indicate an infection or some other type of disease. Last, they noted elevated alkaline phosphatase levels, which can be a sign of liver trouble.

Read 6 remaining paragraphs | Comments

Six arrested for selling Chinese gear to military as “Made in America”

Cameras and other gear were sold to military marked “Made in America.” They weren’t.

Six arrested for selling Chinese gear to military as “Made in America”

Enlarge (credit: Jan-Stefan Knick / EyeEm / Getty)

In August 2018, an Air Force service member noticed something strange about a body camera being used by security personnel at an Air Force base: Chinese characters on the screen. A subsequent investigation found numerous indications that the camera—and two dozen others in the same shipment—had been made in China.

Investigators found three telling logos in the camera's firmware: an Air Force Logo, the logo of the Chinese company that made the camera, and the logo of China's ministry of public security. Forensic analysis indicated that all three images had been loaded on the camera at the same time by someone in a Chinese time zone. This suggested that not only was the camera made in China, but the Chinese knew that the body camera would be shipped to an Air Force facility.

How did a Chinese-made digital camera wind up at a US Air Force base? In a criminal complaint unsealed Thursday, federal prosecutors blamed Aventura, a New York-based company that has been fraudulently re-selling Chinese-made gear for more than a decade. On Thursday, six of the company's founders and senior officials were arrested and charged with fraud and other crimes.

Read 12 remaining paragraphs | Comments

Black Friday 2019 Mobile Tech Deals

Black Friday 2019 is November 29th and, as usual, device makers and retailers are expected to offer some of their best prices of the year on mobile devices and accessories. Not everything you want will be on sale. But if you’re looking for a chea…

Black Friday 2019 is November 29th and, as usual, device makers and retailers are expected to offer some of their best prices of the year on mobile devices and accessories. Not everything you want will be on sale. But if you’re looking for a cheap tablet, laptop, Bluetooth speaker or smart speaker to give as a […]

The post Black Friday 2019 Mobile Tech Deals appeared first on Liliputing.

Leaked Goldeneye 007 documentary suggests it nearly launched on Xbox after all

Thirty minutes of inside stories in Rare Replay format: Was Microsoft close to a launch?

Goldeneye 007 is arguably the biggest example of a late-'90s gaming sensation that has remained trapped in its era. Unlike other hits from the same period, which have received remasters and digital-download options ad nauseum, this 1997 Rare game has laid dormant on the N64, likely due to a tangled web of licenses and company-ownership issues.

Three years ago, however, we finally saw hard proof of what many had suspected: that original developers Rare worked on, and nearly re-released, an Xbox 360 remaster of the 1997 original. (Don't get that confused with the ho-hum Goldeneye "reimagining" on the Wii in 2010.) We took a hard look at a 2016 leak, which confirmed the Xbox 360 project's existence. At the time, we had ourselves a hard cry and moved on.

But this week, a massive video leak has reopened the wound of wondering what could have been—and the lack comes during arguably the most amicable period that license holders Microsoft and Nintendo have ever shared.

Read 6 remaining paragraphs | Comments

Tech Companies Warn U.S. Against Harmful Copyright Laws Worldwide

Major tech companies including Google, Facebook and Twitter are concerned about harmful copyright legislation being created around the world. Industry groups warn that these developments, including the EU Copyright Directive, harm the interests of US companies, while conflicting with various free trade agreements.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

In recent years many countries around the world have tightened their copyright laws to curb the threat of online piracy.

These new regulations aim to help copyright holders, often by creating new obligations and restrictions for Internet service providers that host, link to, or just pass on infringing material.

Rightsholders are happy with these developments, but many Silicon Valley giants and other tech companies see the new laws as threats. This was made clear again this week by the Computer & Communications Industry Association (CCIA) and the Internet Association.

The two groups both submitted stark warnings to the US Trade Representative (USTR). The submissions were sent in response to a request for comments in preparation for the Government’s yearly report on foreign trade barriers.

The CCIA, which includes prominent members such as Amazon, Cloudflare, Facebook, and Google, lists a wide variety of threats, several of which are copyright-related.

One of the main problems is the increased copyright liability for online intermediaries. In the US, online services have strong safe harbor protections that prevent them from being held liable for users’ infringements, but in other countries, this is no longer the case, CCIA warns.

“Countries are increasingly using outdated Internet service liability laws that impose substantial penalties on intermediaries that have had no role in the development of objectionable content. These practices deter investment and market entry, impeding legitimate online services,” CCIA writes.

These countries include France, Germany, India, Italy, and Vietnam. In Australia, for example, several US platforms are excluded from liability protections, which goes against the U.S.-Australia Free Trade Agreement, CCIA notes.

Another major point of concern is the new EU Copyright Directive, which passed earlier this year. While individual member states have yet to implement it, it’s seen as a looming threat for US companies and users alike.

“[T]he recent EU Copyright Directive poses an immediate threat to Internet services and the obligations set out in the final text depart significantly from global norms. Laws made pursuant to the Directive will deter Internet service exports into the EU market due to significant costs of compliance,” CCIA writes.

“Despite claims from EU officials, lawful user activities will be severely restricted. EU officials are claiming that the new requirements would not affect lawful user activity such as sharing memes, alluding to the exceptions and limitations on quotation, criticism, review, and parody outlined in the text.”

The Internet Association also warns against the EU Copyright Directive in its submission. According to the group, which represents tech companies including Google, Reddit, Twitter, as well as Microsoft and Spotify, Europe’s plans are out of sync with US copyright law.

“The EU’s Copyright Directive directly conflicts with U.S. law and requires a broad range of U.S. consumer and enterprise firms to install filtering technologies, pay European organizations for activities that are entirely lawful under the U.S. copyright framework, and face direct liability for third-party content,” the Internet Association writes.

Aside from the EU plans, other countries such as Australia, Brazil, Colombia, India, and Ukraine are also proposing new “onerous” copyright liability proposals for Internet services. In many cases, these plans conflict with promises that were made under U.S. free trade agreements, the Internet Association writes.

“If the U.S. does not stand up for the U.S. copyright framework abroad, then U.S. innovators and exporters will suffer, and other countries will increasingly misuse copyright to limit market entry,” the group warns.

Both the CCIA and the Internet Archive urge the US Government to push back against these developments. They advise promoting strong and balanced copyright legislation, which doesn’t put US companies at risk when following US law.

While it makes sense that the US would back its owns laws and policies abroad, the comments made by both groups come at a time where changes to intermediary liability are on the agenda of local lawmakers as well.

Copyright holders see these foreign developments as inspiration, as they want increased liability for intermediaries. As such, MPAA recently asked lawmakers not to include current safe harbor language in future trade agreements.

This is also the advice of the House Judiciary Committee. While the committee isn’t taking a position on a future direction just yet, it wants to await current developments before porting current US liability exceptions into international deals.

The CCIA’s submission to the USTR is available here (pdf) and the Internet Association’s submission can be found here (pdf).



Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Sony has a PlayStation Now problem

Poor branding, lack of first-party exclusives drag down Sony’s subscription service.

Sony has a PlayStation Now problem

Enlarge (credit: Aurich Lawson)

Today, every major gaming company and its subsidiary cousin is aiming to be the "Netflix of games" in some form or another. Xbox Game Pass, Apple Arcade, Google Play Pass, Ubisoft's UPlay+, EA Access, and even Nintendo's Switch Online all bundle together access to dozens or hundreds of games for one low monthly fee.

And then there's PlayStation Now. Sony's service started offering monthly subscription game bundles back in the beginning of 2015, long before most of the competition. But a mix of confused marketing and limited access to Sony's own first-party catalog has left the service to languish with just one million subscribers (compared to a reported 9.5 million monthly subscribers for Xbox Game Pass) [Update: Replaced outdated 700,000 subscriber number for PS Now from May]. Despite its head start, PlayStation Now runs the risk of being lapped by the subscription competition in the market and the public consciousness.

When PS Now was PS Then

Many of PlayStation Now's problems can be traced back to its launch. Back in 2014, the service introduced itself by charging ridiculously high, single-game, time-limited rental rates for streaming access to a small selection of PS3 classics. After just a few months, that changed to an all-you-can-stream subscription model that included functional streams of 100 PS3 games for $15 to $20 a month.

Read 15 remaining paragraphs | Comments

Why 168,149 Valentine’s day text messages arrived in November

Vendor’s text-message server failed on February 14, got reactivated yesterday.

Why 168,149 Valentine’s day text messages arrived in November

Enlarge (credit: Aurich Lawson / Getty)

Did you get a Valentine's Day text message on November 7? If so, you can blame a company called Syniverse, which provides text-messaging services to major mobile carriers.

Syniverse helps deliver text messages via its intercarrier messaging service and boasts that it is "Connected to more than 300 operators" and processes 600 billion messages per month.

Syniverse says it delivers 99.8% of messages within one second. But a server failure caused many messages—exactly 168,149, according to The Washington Post—to be delivered nearly nine months late.

Read 12 remaining paragraphs | Comments

Vitamin E acetate found in all lung fluid samples tested from injured vapers

For the first time, a potentially toxic substance is found at the site of lung injury.

Vitamin E acetate found in all lung fluid samples tested from injured vapers

(credit: Ecig Click)

All 29 samples of lung fluids tested from vaping device users with severe lung injuries contained the oily additive vitamin E acetate, according to data published by the Centers for Disease Control and Prevention on Friday.

“These new findings are significant,” Anne Schuchat, CDC principal deputy director, told reporters in a press conference. It is the first time that a potentially toxic substance has been found directly at the site of injury in the lungs of vaping device users.

The severe lung injuries have puzzled health officials for months as a nationwide outbreak of the vaping-related illnesses erupted. Health officials now refer to the condition as EVALI, or “e-cigarette, or vaping, product use–associated lung injury.”

Read 9 remaining paragraphs | Comments

Review: Doctor Sleep joins IT as one of the best Stephen King adaptations yet

Haunting of Hill House‘s Mike Flanagan was the perfect choice to adapt King’s novel.

Horror master Stephen King continues to have a banner year in Hollywood. We've had the release of a (disappointing) Pet Sematary remake earlier this year, IT: Chapter 2 in September, the Netflix adaptation of In the Tall Grass last month, and a new season of Castle Rock currently airing on Hulu. Closing out this annus mirabilis is Doctor Sleep, adapted from King's novel of the same name, a sequel to The Shining. Along with 2017's spectacular IT, Doctor Sleep is one of the best film adaptations of a King novel yet.

(Major spoilers for The Shining—film and book—below; mild spoilers for Doctor Sleep.)

King published The Shining in 1977. It became his first hardback bestseller and was adapted into a film by Stanley Kubrick in 1980, starring Jack Nicholson as struggling alcoholic and aspiring writer Jack Torrance. Initial reviews weren't particularly favorable—King himself was not a fan of the film, going so far as to produce his own adaptation in a 1997 miniseries—but it's now considered a horror classic.

Read 11 remaining paragraphs | Comments