- wlug - list.wlug.org.nz

Meet dark_nexus, quite possibly the most potent IoT botnet ever
by Peter Reutemann 10 Apr '20

10 Apr '20

'A newly discovered botnet that preys on home routers, video recorders, and other network-connected devices is one of the most advanced Internet-of-things platforms ever seen, researchers said on Wednesday. Its list of advanced features includes the ability to disguise malicious traffic as benign, maintain persistence, and infect devices that run on at least 12 different CPUs. Researchers from antivirus provider Bitdefender described the so-called dark_nexus as a “new IoT botnet packing new features and capabilities that put to shame most IoT botnets and malware that we’ve seen.” In the three months that Bitdefender has tracked it, dark_nexus has undergone 30 version updates, as its developer has steadily added more features and capabilities.' -- source: https://arstechnica.com/information-technology/2020/04/meet-dark_nexus-quit… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Chinese Cybercriminals Target High-Value Linux Servers With Weak Defenses: BlackBerry
by Peter Reutemann 10 Apr '20

10 Apr '20

'Linux malware is real and Advanced Persistent Threat (APT) groups have been infiltrating critical servers with these tools for at least eight years, according to a new report from BlackBerry. From a report: In "Decade of the RATs: Cross-Platform APT Espionage Attacks Targeting Linux, Windows and Android," security researchers found that these groups have attacked companies around the world and across all industries with goals ranging from simple cybercrime to full-blown economic espionage. The RATs report describes how five APT groups are working with the Chinese government and the remote access trojans (RATs) the cybercriminals are using to get and maintain access to Linux servers. According to the report, the groups appeared to be using WINNTI-style tooling to take aim at Linux servers and remain relatively undetected for almost a decade. These groups are targeting Red Hat Enterprise, CentOS, and Ubuntu Linux environments for espionage and intellectual property theft. The APT groups examined include the original WINNTI GROUP, PASSCV, BRONZE UNION, CASPER (LEAD), and a newly identified group BlackBerry researchers are tracking as WLNXSPLINTER. The BlackBerry researchers think all five groups are working together, given the distinct similarities in their preferred tools, tactics, and procedures.' -- source: https://linux.slashdot.org/story/20/04/09/1538218 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google Launches Braille Keyboard for Android Devices
by Peter Reutemann 10 Apr '20

10 Apr '20

'Google today announced the launch of a virtual braille keyboard for Android that's designed to enable those with low vision or blindness to type on their phones without additional hardware. From a report: The tech giant says it collaborated with braille developers and users to create it, and to ensure it can be used anywhere a user would normally type -- including social media, text messaging, and email apps. According to the World Health Organization, at least 2.2 billion people globally have a vision impairment or blindness. To address their needs, Google previously developed and released BrailleBack, an accessibility service for Android that helps users make use of braille devices, but BrailleBack didn't offer on-screen typing.' -- source: https://tech.slashdot.org/story/20/04/09/1831238 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Windows 10 Is Getting Linux Files Integration In File Explorer
by Peter Reutemann 09 Apr '20

09 Apr '20

'Microsoft is planning to fully integrate Linux file access into the built-in File Explorer. The Verge reports: A new Linux icon will be available in the left-hand navigation pane in File Explorer, providing access to the root file system for any distros that are installed in Windows 10. The icon that will appear in File Explorer is the famous Tux, the penguin mascot for the Linux kernel. Microsoft is testing the Linux File Explorer integration in a new build of Windows 10 that's available for testers today. Previously, Windows 10 users would have to manually navigate to a UNC path to get access to Linux files from the Windows Subsystem for Linux (WSL). If you have WSL enabled, then the Tux will appear in File Explorer, and Microsoft is now seeking feedback on the integration before it's finalized as part of a future Windows 10 update. The software maker will ship this update to all Windows 10 users later this year. ' -- source: https://linux.slashdot.org/story/20/04/08/2146226 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

corp.com Saved From Falling Into The Wrong Hands
by Lawrence D'Oliveiro 09 Apr '20

09 Apr '20

Seems that early versions of Windows Active Directory would offer a default path name of “corp” during setup. Back in the days before the Internet became a part of everyday life, many admins accepted this without thinking too much about it. But once you start connecting servers to the Internet, they are liable to do DNS lookups on names like this, and accidentally connecting to something like “corp.com”. So to avoid such a name from coming under the control of less-than-savoury elements, Microsoft has bought it over <https://www.theregister.co.uk/2020/04/08/microsoft_active_directory/>. One of the reader comments links to this old Microsoft blog post <https://devblogs.microsoft.com/oldnewthing/20061013-05/?p=29393>, which explains that example/default names like “Contoso” and “Fabrikam” used in Microsoft’s documentation and products were actually created by their legal department, after a careful vetting process to ensure that they are indeed entirely fictitious.

1 0

Cryptominer Linux Malware Infecting Docker Containers
by Lawrence D'Oliveiro 09 Apr '20

09 Apr '20

Seems some people are not properly securing their Docker setups <https://www.theregister.co.uk/2020/04/08/docker_malware_attacks/>, allowing the “Kinsing” malware to gain entrance and hijack your CPU time to do cryptocurrency mining.

1 0

Longtime Mozilla Leader Mitchell Baker is Now CEO
by Peter Reutemann 09 Apr '20

09 Apr '20

'On Wednesday, Mozilla chair and longtime leader Mitchell Baker was named permanent CEO of the company that makes the Firefox web browser. >From a report: Mitchell became interim CEO of Mozilla in December 2019, after former CEO Chris Beard resigned. The company conducted an external candidate search over the last eight months, and concluded the Mitchell is the right leader for Mozilla at this time, according to a company blog post published Wednesday. "Increasingly, numbers of people recognize that the internet needs attention," Baker said in another Mozilla blog post Wednesday. "Mozilla has a special, if not unique role to play here. It's time to tune our existing assets to meet the challenge. It's time to make use of Mozilla's ingenuity and unbelievable technical depth and understanding of the "web" platform to make new products and experiences. It's time to gather with others who want these things and work together to make them real."' -- source: https://tech.slashdot.org/story/20/04/08/1720218 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

2 1

Chrome 81 Arrives With Web NFC Origin Trial, AR Features, and Mixed Images Autoupgraded To HTTPS
by Peter Reutemann 09 Apr '20

09 Apr '20

'Google today launched Chrome 81 for Windows, Mac, Linux, Android, and iOS. Chrome 81 includes an Origin Trial of Web NFC for mobile, early Augmented Reality support, mixed images autoupgraded to HTTPS, TLS 1.0 and TLS 1.1 deprecated, and more developer features. With over 1 billion users, Chrome is both a browser and a major platform that web developers must consider. In fact, with Chrome's regular additions and changes, developers have to stay on top of everything available -- as well as what has been deprecated or removed. Among other things, Chrome 81 removes the "discard" element and FTP support.' -- source: https://slashdot.org/story/20/04/08/1641238 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Tails, the Security-Focused OS, Adds Support For Secure Boot
by Peter Reutemann 09 Apr '20

09 Apr '20

'Tail OS, an operating system optimized for privacy and anonymity, has released version 4.5 this week, the first version that supports a crucial security feature named UEFI Secure Boot. From a report: Secure Boot works by using cryptographic signatures to verify that firmware files loaded during a computer's boot-up process are authentic and have not been tampered. If any of the firmware checks fail, Secure Boot has the authority to stop the boot process, preventing the operating system from launching. The feature has been available as part of the UEFI specification for almost two decades but is rarely used. The reason is because not all firmware vendors cryptographically sign their files, leaving the door open to verification errors that -- when Secure Boot is enabled -- block many operation systems from launching.' -- source: https://it.slashdot.org/story/20/04/08/1712239 Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0

Google makes seamless update support mandatory in Android 11
by Peter Reutemann 09 Apr '20

09 Apr '20

'Google is putting new rules in place for Android 11: it's going to make support for Android's "seamless update" feature mandatory for devices launching with the new OS. The news comes to us via an Android source code commit first spotted by XDA Developers, which reads, "Require Virtual A/B on R launches." In English, this means the seamless update system, which requires two partitions (labeled "A" and "B"), will be required on Android R, aka Android 11. Android's seamless update system was introduced in Android 7.0 Nougat (it was actually borrowed from Chrome OS) as a way to reduce the downtime caused by OS updates and to offer a recovery mechanism in case an update applies incorrectly. Applying an update to an operating system usually means taking the OS offline for an extended period of downtime. On Android, before seamless updates, the phone would boot into recovery and could be stuck on the "Installing System Update" screen for as much as 25 minutes. That's a lot of downtime, and during this time you can't run any apps, see any text messages, or get any phone calls. The downtime happens because updating the system files requires taking the system partition offline, but the seamless update system fixes this by just having a second copy of the system partition.' -- source: https://arstechnica.com/gadgets/2020/04/google-makes-seamless-update-suppor… Cheers, Peter -- Peter Reutemann Dept. of Computer Science University of Waikato, NZ +64 (7) 858-5174 http://www.cms.waikato.ac.nz/~fracpete/ http://www.data-mining.co.nz/

1 0