Researchers unearth malicious Google Play apps linked to active exploit hackers

Apps used a variety of tricks to covertly install well-written espionage software.

Researchers unearth malicious Google Play apps linked to active exploit hackers

Enlarge (credit: portal gda / flickr)

Researchers have found more malicious Google Play apps, one of which exploits a serious Android rooting vulnerability so the app can take screenshots and collect other types of sensitive user information.

Camero exploits CVE-2019-2215, a potent vulnerability discovered in October by Google’s Project Zero vulnerability research group, researchers from Trend Micro reported on Monday. The use-after-free flaw makes it easy for attackers to gain full root privileges on Pixel 1 and Pixel 2 phones and a host of other Android models. Google patched the vulnerability in October, a few days after Project Zero researcher Maddie Stone reported it was likely under active attack by either exploit developer NSO Group or one of its customers. All three apps are no longer available in Play.

Camero connected to a command and control server that has links to SideWinder, the code name for a malicious hacking group that has been targeting military entities since at least 2012. The app then downloaded attack code that exploits CVE-2019-2215 or a separate exploit in the MediaTek-SU driver that installs an espionage app called callCam. callCam collected a variety of sensitive user data including:

Read 4 remaining paragraphs | Comments

Super Retro Champ handheld game system plays SNES and Sega Genesis carts

Last year the folks at My Arcade introduced a handheld game console at CES called Retro Champ that let you play classic 8-bit NES games… by plugging in NES carts. This year, the company is following up with the Super Retro Champ. As the name indi…

Last year the folks at My Arcade introduced a handheld game console at CES called Retro Champ that let you play classic 8-bit NES games… by plugging in NES carts. This year, the company is following up with the Super Retro Champ. As the name indicates, the new model lets you play 16-bit Super Nintendo carts… […]

The post Super Retro Champ handheld game system plays SNES and Sega Genesis carts appeared first on Liliputing.

Lenovo’s new ThinkPad X1 foldable PC to debut this year, starting at $2,499

Plus a new, dual-screen ThinkBook with an E-Ink panel on the cover.

Let's talk about the look and feel of the device first: final images of the ThinkPad X1 Fold look nearly identical to the prototype we saw last year. It's a 13-inch tablet with chunky black bezels that measures 7.8mm thick when laid flat and 27.8mm thick when folded. Weighing less than 2.2 pounds, it's not a particularly svelte device when compared to other flagship laptops and tablets, but it's not cumbersome, either. When opened, the prototype device I spent a few minutes with felt like a slightly thicker-than-usual tablet, and while the thick bezels are jarring to look at, they serve a purpose on a device that's meant to be moved and folded often.

The final display on the ThinkPad X1 Fold is a 13.3-inch, 2048×1536, pOLED panel with a 4×3 aspect ratio that Lenovo partnered with LG to include on the device. Since this device falls under the ThinkPad umbrella, Lenovo made a point to emphasize that the Fold has been put through the usual ThinkPad durability tests in addition to folding cycle tests. Supporting the foldable display is a multi-link torque hinge that Lenovo developed to make the opening and closing of the Fold as seamless as possible.

Lenovo is billing the ThinkPad X1 Fold as a device for those who frequently use a laptop, tablet, and smartphone and want a device that can combine some of the features of all of those devices into one. You can use the device as if it were any one of those devices—it acts as a tablet or a large smartphone when open, or as a makeshift laptop when folded in a 90-degree angle (there's an integrated kickstand on the back to better support it in this laptop-esque mode).

Read 8 remaining paragraphs | Comments

Project Limitless: Lenovos Yoga 5G nutzt einen Snapdragon 8cx

Mit dem Yoga 5G hat Lenovo ein erstes Convertible, das 5G beherrscht. Auf dem Snapdragon-System mit Touch-Screen und Stift-Unterstützung läuft Windows 10 on ARM, die Akkulaufzeit soll 24 Stunden betragen. (Lenovo, Nano-SIM)

Mit dem Yoga 5G hat Lenovo ein erstes Convertible, das 5G beherrscht. Auf dem Snapdragon-System mit Touch-Screen und Stift-Unterstützung läuft Windows 10 on ARM, die Akkulaufzeit soll 24 Stunden betragen. (Lenovo, Nano-SIM)

Thinkpad X1 Fold: Lenovos Falt-Notebook kommt mit Windows 10X

Lenovos faltbares Thinkpad X1 Fold ist nicht nur äußerlich ungewöhnlich. Es wird auch mit dem noch kaum bekannten Windows 10X laufen und dafür Intels Lakefield-CPU nutzen. Der Akku ist erfreulich groß und das Format erinnert an ein iPad. (Lenovo, Note…

Lenovos faltbares Thinkpad X1 Fold ist nicht nur äußerlich ungewöhnlich. Es wird auch mit dem noch kaum bekannten Windows 10X laufen und dafür Intels Lakefield-CPU nutzen. Der Akku ist erfreulich groß und das Format erinnert an ein iPad. (Lenovo, Notebook)

Movie Companies Sue YTS Users, Including One Who Hid Behind a VPN

The operator of YTS recently ‘settled’ a lawsuit that was filed by the US. movie company Wicked Nevada. Soon after, the same movie company joined other filmmakers to sue several users of the notorious torrent site. According to the complaint, the rightsholders know the email addresses that the defendants used to register with at YTS, as well as the VPN IP-address of one user. This raises some questions.

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Last week we reported that the operator of YTS, one of the most visited torrent sites, resolved a piracy lawsuit that was filed against it by movie outfit Wicked Nevada.

In a consent judgment, the YTS admin agreed to pay $150,000 in damages. In addition, he promised not to share torrents of the film “Extremely Wicked, Shockingly Evil, And Vile.”

What is most unusual about the agreement is that the torrent site itself remains operational. This means that, aside from the hefty damages award, YTS can continue its business as usual. However, that doesn’t mean that its users can’t be targeted.

Soon after our coverage, we noticed that Wicked Nevada filed a new lawsuit together with several other movie companies including Dallas Buyers Club, Bodyguard Productions, and Rambo V Productions. This complaint is also related to YTS, but targets alleged users of the site over alleged copyright infringement.

The movie companies list a group of Doe defendants and a Hawaiian man named Harry Beasor. According to the complaint, all defendants registered an account with the YTS website using their email address. In addition, their IP-addresses were linked to pirating films of the movie companies that filed the suit.

While lawsuits against alleged BitTorrent pirates are not new, this complaint stands out and raises quite a few concerns.

Apparently, the movie companies know the email addresses for some registered YTS users. Not only that, but they also know which torrents were downloaded from the site using the accounts and what IP-addresses were used, as the complaint makes clear.

“Defendant Harry Beasor used the YTS website to download torrent files associated with Plaintiffs’ Works from Internet Protocol (‘IP’) address 91.207.175.82 associated with his VPN service,” it reads, specifically mentioning the movies London Has Fallen, Mechanic: Resurrection, and I Feel Pretty.

“Defendant Harry Beasor used the IP address of the VPN service because he knew that he was copying the Works without a valid license and therefore in violation of Plaintiffs’ exclusive rights,” the complaint adds.

The movie companies point out that YTS openly advertises the use of a VPN. According to the torrent site, it’s a good option for users to protect themselves from expensive lawsuits.

TorrentFreak reached out to the attorney of the filmmakers, Kerry Culpepper, to find out how this private user information was obtained from the site. He informed us that, at this moment, he cannot comment on the matter in public.

This leaves us with little more than speculation. A likely scenario is that the YTS operator gave up the user information as part of the negotiations. This would not be unprecedented, as the developer of the app CotoMovies shared similar information with the film companies in the past.

We contacted YTS for a comment on this possibility, but at the time of writing, we have yet to hear back.

What is clear is that the movie companies linked emails that were used to register with YTS to actual IP-addresses. All the Doe defendants are users of the ISP Spectrum, who the copyright holders hope to expose through a subpoena. Mr. Beasor used a VPN, which appears to have been Private Internet Access, but the rightsholders already have his name and no additional subpoena is requested.

The complaint doesn’t make it clear how the movie companies tracked down the name of Mr. Beasor. The most likely scenario is that the email address gave this away, but we were unable to confirm this independently.

While clear details are not available, the lawsuit shows that using a VPN is not very helpful if there are other leads that point to one’s identity. If someone uses an easily identifiable email which can be linked to a VPN address that was used with the same account, even the best VPN doesn’t protect one’s privacy.

That said, the movie companies’ case is certainly no shoo-in. People who register an account with YTS don’t have to confirm their email address, so anyone can sign up with a random address, including those of other people.

In addition, most VPN IP-addresses are used by dozens or hundreds of people at once, so it’s impossible to prove without a doubt that one person shared a single file at any given point in time. Especially since many VPN providers don’t keep logs that could help to identify a single user.

That said, the fact that the movie companies are going after YTS users, claiming to have access to details that are only supposed to be available in the torrent site’s user database, is quite worrying, to say the least.

A full copy of the complaint, filed by Fallen Productions, Inc., Criminal Productions, LHF Productions, Millennium Funding, Bodyguard Productions, Hunter Killer Productions, HB Productions, Rambo V Productions, TBV Productions, Colossal Movie Productions, Venice PI, Colossal Movie Productions, Headhunter, Dallas Buyers Club, Definition Delaware, and Wicked Nevada, obtained by TorrentFreak, is available here (pdf)

Source: TF, for the latest info on copyright, file-sharing, torrent sites and more. We also have VPN reviews, discounts, offers and coupons.

Daily Deals (1-06-2020)

CES gets underway this week and PC makers have already unveiled some sleek new Chromebooks and Windows laptops. But for the most part they’re not available for purchase yet, and when they do hit the streets they’ll cost a pretty penny. But …

CES gets underway this week and PC makers have already unveiled some sleek new Chromebooks and Windows laptops. But for the most part they’re not available for purchase yet, and when they do hit the streets they’ll cost a pretty penny. But you know what’s dirt cheap right now? Some of last year’s laptops. Right […]

The post Daily Deals (1-06-2020) appeared first on Liliputing.

Dynabook’s new Tecra A laptops coming soon for $400 and up

While the 1.9 pound Portégé X30L is the most impressive laptop Dynabook is unveiling at this year’s Consumer Electronics Show, it’s also the most expensive, with a $1600 starting price. But the PC maker formerly known as Toshiba Client Solu…

While the 1.9 pound Portégé X30L is the most impressive laptop Dynabook is unveiling at this year’s Consumer Electronics Show, it’s also the most expensive, with a $1600 starting price. But the PC maker formerly known as Toshiba Client Solutions is also bringing some more affordable notebooks to CES. The new Dynabook Tecra A series […]

The post Dynabook’s new Tecra A laptops coming soon for $400 and up appeared first on Liliputing.

Samsung’s $1,000 Galaxy Chromebook is the new Chrome OS standard-bearer

Samsung builds a spiritual successor to the Pixelbook.

Google took a step back from making premium Chromebooks when it updated the Pixelbook line with the less premium Pixelbook Go, but it looks like Samsung is picking up the "Premium Chromebook" mantle at CES 2020. Meet the Samsung Galaxy Chromebook, a $1,000 laptop that is looking like the hottest Chrome OS device on the market.

The Galaxy Chromebook is the first Chromebook with a 4K, OLED display. It's the first Chromebook with a 10th-gen Intel processor. At just 9.9mm thick, this aluminum-bodied device is the thinnest Chromebook on the market. The display hinge folds all the way around for a tablet mode, and there's pen support with a stowable pen. There's a backlit keyboard and even a fingerprint scanner, a surprising rarity for Chrome OS devices.

The display is a 13.3-inch, 3840×2160 (16:9) OLED touchscreen with just a 3.9mm bezel around the top and sides. The processor is a 10th Gen Intel Core i5 Comet Lake U-Series with integrated graphics and a fanless design. You get up to 16GB of RAM, up to 1TB of SSD storage, Wi-Fi 6 support, and a 49.2Wh battery.

Read 4 remaining paragraphs | Comments

This box with an E Ink shipping label can be reused up to 1,000 times

The rise of e-commerce means there are an awful lot of cardboard boxes making one-way trips before maybe ending up in a recycling bin under the best of circumstances. A startup called LivingPackets wants to shake things up with the aid of reusable pack…

The rise of e-commerce means there are an awful lot of cardboard boxes making one-way trips before maybe ending up in a recycling bin under the best of circumstances. A startup called LivingPackets wants to shake things up with the aid of reusable packaging. The company has announced a new reusable shipping box with an […]

The post This box with an E Ink shipping label can be reused up to 1,000 times appeared first on Liliputing.