Saturday, June 12, 2021

Would make a great April Fool story, unfortunately..

https://gizmodo.com/this-shockingly-invasive-malware-stole-data-from-3-25-m-1847079897

This Shockingly Invasive Malware Stole Data from 3.25 Million Windows Computers

Between 2018 and 2020, [No one noticed? Bob] a mysterious strain of malware infected and stole sensitive data from approximately 3.25 million Windows-based computers—taking with it a horrifying amount of intimate information about the users of those devices.

The data includes login credentials—both usernames and passwords—for dozens of online platforms, as well as billions of browser cookies, millions of user files stolen right off of infected desktops and, in some cases, pictures of the device’s user taken with the computer’s own webcam.

The malicious epidemic was uncovered recently when a large database of the stolen information was spotted on the dark web, reports NordLocker in a new analysis of the incident.

The compromised login information includes 1,471,416 Facebook credentials; 261,773 Twitter credentials; 145,436 PayPal credentials; 87,282 Dropbox credentials; 1,540,650 Google account credentials, and so on. Other compromised accounts include Coinbase, Blockchain, Outlook, Skype, Netflix...you get the picture.

On top of this, the malware also apparently took screenshots of the desktops it had infected, which retroactively helped researchers piece together just how much information had been compromised. To get a better idea of how extensive the damage is, here is a little breakdown:

2 billion cookies

26 million login credentials

6.6. million files (apparently stolen off of desktops)

Upwards of 1 million images (696,000 .png and 224,000 .jpg files)

More than 650,000 Word documents and .pdf files

You can check out a more detailed breakdown of all of the stolen files here.



(Related)

https://threatpost.com/supply-chain-attack-airlines-state-actor/166842/

Monumental Supply-Chain Attack on Airlines Traced to State Actor

A monster cyberattack on SITA, a global IT provider for 90 percent of the world’s airline industry, is slowly unfurling to reveal the largest supply-chain attack on the airline industry in history.

The enormous data breach, estimated to have already impacted 4.5 million passengers, has potentially been traced back to the Chinese state-sponsored threat actor APT41, and analysts are warning airlines to hunt down any traces of the campaign concealed within their networks.





Politics for fun and profit? Would Machiavelli approve?

https://www.csoonline.com/article/3621774/nation-states-cyberconflict-and-the-web-of-profit.html#tk.rss_all

Nation States, Cyberconflict, and the Web of Profit.

HP recently announced the findings of a new study – Nation States, Cyberconflict, and the Web of Profit – showing that nation state cyberattacks are becoming more frequent, varied, and open, moving us closer to a point of “advanced cyberconflict” than at any time since the inception of the internet.

Download the report: Nation States, Cyberconflict and the Web of Profit

Download the infographic: Nation States, Cyberconflict and the Web of Profit Infographic



(Related) Frustration is rising.

https://www.theregister.com/2021/06/11/uk_ungge_cyber_norms_submission/

UK tells UN that nation-states should retaliate against cyber badness with no warning

Britain has told the UN that international cyber law should allow zero-notice digital punishment directed at countries that attack others' infrastructure.

A statement made by UK diplomats to the UN's Group of Governmental Experts on Advancing Responsible State Behaviour in the Context of International Security (UN GGE) called for international law to permit retaliation for cyber attacks with no notice.

"The UK does not consider that States taking countermeasures are legally obliged to give prior notice (including by calling on the State responsible for the internationally wrongful act to comply with international law) in all circumstances," said the British submission to the UN GGE, made in advance of the G7 heads of government meeting in Cornwall this week.





What is likely, doable or at least possible?

https://www.globalgovernmentforum.com/human-rights-and-ai-interesting-insights-from-australias-commission/

Human rights and AI: interesting insights from Australia’s commission

The conundrum is one that many governments face: how do you make the most of technological advances in areas such as artificial intelligence (AI) while protecting people’s rights? This applies to government as both a user of the tech and a regulator with a mandate to protect the public.

Australia’s Human Rights Commission recently undertook an exercise to consider this very question. Its final report, Human Rights and Technology, was published recently and includes some 38 recommendations – from establishing an AI Safety Commissioner to introducing legislation so that a person is notified when a company uses AI in a decision that affects them.





Price fixing, government style.

https://arstechnica.com/tech-policy/2021/06/ny-cant-force-isps-to-offer-15-low-income-broadband-plans-judge-rules/

NY can’t force ISPs to offer $15 low-income broadband plans, judge rules

On Friday, the broadband industry won a court order that prohibits New York from enforcing a state law that would require ISPs to sell $15-per-month broadband plans to low-income households.

Lobby groups for ISPs sued New York to block the law that was scheduled to take effect on June 15 and received a preliminary injunction today from US District Court for the Eastern District of New York. The state law is preempted by federal law, US District Judge Denis Hurley wrote in the order. While the case will continue, Hurley found that the industry is likely to succeed in its lawsuit.





Future war?

https://www.c4isrnet.com/opinion/2021/06/11/drone-wars-new-book-wonders-who-will-be-the-next-drone-superpower/

Drone Wars’: New book wonders who will be the next drone superpower

Victory in the next major conflict could very well depend on the effectiveness of drones — from their swarm capabilities to their surveillance and artificial intelligence technologies. In “Drone Wars: Pioneers, Killing Machines, Artificial Intelligence, and the Battle for the Future,” author and Defense News correspondent Seth J. Frantzman wonders: Who will be this victorious drone superpower?





Tools & Techniques. Forgery made easy?

https://about.fb.com/news/2021/06/ai-can-now-emulate-text-style-in-images-in-one-shot-using-just-a-single-word/

AI Can Now Copy Text Style in Images Using Just a Single Word

Today, we’re introducing TextStyleBrush, the first self-supervised AI model that replaces text in existing images of both scenes and handwriting — in one shot — using just a single example word. The work will also be submitted to a peer-reviewed journal.





Tools & Techniques.

https://www.makeuseof.com/tag/how-to-record-a-phone-call-on-iphone/

How to Record Phone Calls and Conversations on iPhone

As a result of country and state-specific laws, Apple has not created a built-in phone recording option. Apple's impeccable privacy settings are one reason it has attracted so many worldwide customers. However, you can still record iPhone phone calls using some workarounds.



No comments: