By Waqas
If it is connected, it is vulnerable; in this case, a Toyota RAV4 model was stolen within two minutes.
This is a post from HackRead.com Read the original post: Cybercriminals Exploit CAN Injection Hack to Steal Cars

**Experts have warned that criminals have been exploiting a vulnerability to use the CAN injection method for stealing connected cars.**

Automotive cybersecurity experts have uncovered a security vulnerability that allows criminals to steal vehicles using the CAN injection method.

The investigation was initiated by Ian Tabor, an automotive cybersecurity expert from EDAG Group, and Ken Tindell, CTO of Canis Automotive Labs after Tabor’s own Toyota RAV4 was stolen in 2021 and suffered suspicious damage to its headlight housing and front wing.

The security experts assigned a CVE identifier (CVE-2023-29389) to the Toyota RAV4 hack. Tabor observed that the arch rim and front bumper of his stolen car were pulled off, and the headlight wiring plug was removed. There were screwdriver marks and damage on the car’s paint, malfunctioning headlamps, and missing moulding cups. A few days later, the car was stolen.

Tabor analyzed the data logs from Toyota’s MyT app and discovered that the electronic control units (ECUs) in his RAV4 had detected malfunctioning and were logged as diagnostic trouble codes (DTCs) before the theft occurred. Tindell noted that Tabor’s car had “dropped a lot of DTCs.”

Further investigation revealed that the thieves gained access to the car’s system bus through the smart headlamp’s wiring. Tindell discovered the theft was carried out using a Controller Area Network (CAN) injection hack. The CAN bus is present in almost all modern vehicles and is used by microcontrollers to communicate between different systems and perform their functions.

In this type of attack, cybercriminals gain network access and send bogus messages on behalf of the smart key receiver in the car. These messages trick the car’s security system into unlocking the vehicle and disengaging the engine immobilizer, allowing the thieves to steal the car. This vulnerability exists because internal messages in most car models are not protected by any security mechanism, and the receivers trust them blindly.

The hackers gain network access through various methods, such as breaking open a headlamp and sending messages using its connection to the CAN bus, and then manipulating other systems to steal the car.

Watch as crooks steal a Toyota RAV4 in two minutes:

The attackers cannot directly connect to the smart key ECU but must reach it via the wires connected to the headlight only when both are on the same CAN bus. The hacking device is connected to the wires and validates the key by sending a bogus CAN message to the ECU and another message to the door ECU to unlock it and steal the car.

This discovery highlights the need for enhanced security measures to protect against CAN injection attacks and prevent vehicle theft through this method. Automotive manufacturers and cybersecurity experts are urged to address this vulnerability and implement necessary safeguards to secure communication networks and systems in modern vehicles.

1.  Bluetana app detects gas pumps card skimmers
2.  Smart cars can be hacked to gridlock major cities
3.  Remote Keyless System Flaw Expose Cars to Theft
4.  App Flaw Allowed Cars Hack by Knowing VIN Number
5.  How Hackers Can Remotely Unlock/Start Honda Cars

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Cybercriminals Exploit CAN Injection Hack to Steal Cars

By Owais Sultan
Android OS is available on 3.3 billion devices in 190 countries across the globe, making Android app development…
This is a post from HackRead.com Read the original post: How to Create a Mobile Application for Android OS Step by Step?

**Android OS is available on 3.3 billion devices in 190 countries across the globe, making Android app development a task of responsibility.**

The Android platform is commonly used today for developing mobile applications, and it is maintained by the Open Handset Alliance (OHA), which is a consortium formed by Google after the purchase of Android Inc.

Android provides simplicity and convenience in using and configuring the system while also protecting data from viruses due to its high functionality when using the Internet. Additionally, it supports Adobe Flash applications, provides convenient e-mail exchange, and offers a wide variety of connectivity options, such as Bluetooth, Wi-Fi, EDGE, GPRS, and 3G.

**Android Mobile App Development Steps You Should Follow**

Mobile apps for the Android OS are typically developed on a general-purpose PC that has more resources available compared to a mobile device. Once the app is developed, it can be downloaded to the target personal mobile device for debugging, testing, and further use.

To achieve effective mobile app development, it is recommended to hire Vue.js developers who can implement your idea at the highest level. Below are the steps you must go through to develop an Android application:

**Target Audience Analysis**

The main task of this stage is to determine the ultimate goal of developing an Android mobile application and think about how it will be used by the target audience.

**Development of a Consistent Solution**

Before starting the development process, you need to obtain a technical task. Then, you can start prototyping and creating user profiles to evaluate the capabilities of the final product. Finally, you can begin the app-creation process based on the designer’s vision, business assessment, and agreement on the details of the terms of reference.

**Code Writing and Technology Implementation**

Developers begin dealing with an app with a ready-made design. Next, they must generate a mobile app based on frameworks, programming languages, and various technologies.

**Testing**

Pay attention that testing is mandatory at different stages of app development, both on simulators and on real devices. You must ensure that the interaction of the application you develop with the Android mobile device platform is exactly as expected during the prototype stage.

**Creation of a Pre-Release Version**

As a result of various tests and improvements, a working version of the mobile application should be obtained, which will then be added to the App Store and offered to a wide audience.

**Application Publishing**

The final stage of work is the publication of a mobile application in the store. It may also include additional services, such as technical support, further releases of new versions, as well as a marketing promotion.

**Basic Strategies Used in Mobile Application Development**

The development process is usually based on creating the software part of the information system as a mobile application. On the one hand, it must comply with the requirements for specific architectural solutions of the information system.

On the other hand, it must correspond to the requirements of those interested in its creation. First, the mobile app development strategy must be defined as part of this process. The complexity and scale of the project determine its choice.

Such basic mobile application development strategies as waterfall, incremental, and evolutionary are widely used today. However, they differ in the way of going through the main stages of creating the software part of an information system.

The waterfall strategy involves a single pass without refining the originally established requirements. It has the following advantages:

*   Ease of use
*   High quality of the result in the absence of strict time and budget constraints.

The disadvantages of a waterfall development strategy include the following:

*   The high complexity of requirements;
*   Inability to use intermediate states of a software solution.

The incremental strategy involves multiple passes without clarification of the originally established requirements with a planned result improvement. Its benefits include:

*   The ability to use intermediate states of a software solution, which reduces the risk of failure;
*   Involvement of stakeholders in the process of developing a software solution.

The main disadvantage of the strategy is the high complexity of the application.

The evolutionary strategy involves multiple passes with clarification of requirements. It has the following advantages:

*   Ability to refine requirements at each development cycle and implement flexible development;
*   High level of stakeholder involvement in the software solution development process.

The evolutionary strategy’s disadvantages include the application’s complexity and the need for active participation of stakeholders in the project.

The development of mobile apps is relevant in many areas, including transport services, restaurants, cafe chains, online stores, magazine businesses, and the organization of corporate communication.

Therefore, it is not surprising that many people wonder what steps should be taken to create a quality Android mobile application from scratch. It is a difficult process that requires a careful approach, specific knowledge, and skills. However, you can be sure that you will succeed if you go through all the development stages described in this article and choose one of the effective strategies that best suits the goals of your project.

1.  How to Dual Boot Android and Windows Easily
2.  Using Flutter for Cross-Platform App Development
3.  Smartphone Discounts Set To Rocket As Market Slumps
4.  What is a parental control app and what are your options
5.  10 Android Educational Apps That Collect Most User Data

How to Create a Mobile Application for Android OS Step by Step?

By Owais Sultan
You’re sitting with your iPhone in hand, gazing at the screen with annoyance, fury, and helplessness. You need…
This is a post from HackRead.com Read the original post: How to Create and Manage Groups on iPhone

You’re sitting with your iPhone in hand, gazing at the screen with annoyance, fury, and helplessness. You need to send an email to multiple people, but this fancy gadget seems to fall short – you can’t create groups on the iPhone.

You sigh, wondering what’s the point of having such a fancy phone if it can’t help you. But hold on! Before you toss your phone in frustration, listen to some good news. We have a solution for you! This article will guide you on how to create groups on your iPhone.

While the iPhone itself doesn’t have a built-in feature to create groups, you can use iCloud or third-party apps to achieve the same result. Once you create a group in your Contacts, managing your contacts becomes much easier. Not only does it help you organize scattered contacts, but it also allows you to send emails to multiple people in the group with just a few taps. No more scrolling through a long list to find the right contacts!

And that’s not all! Even with the ‘Do Not Disturb‘ mode on, people in the group can still reach out to you in case of emergencies. Exciting, right? So, if you’re eager to create and manage your very first group on your iPhone, let’s dive into the steps below.

**How to Make a Group**

Follow the steps below to create a group and reap the benefits of this feature:

**1** **First Create a Group on iCloud.com**

When you create an account, it is generally added to an All Contacts group in alphabetical order. However, you can send a message or email to a specific group of people.

*   To create a special group in iCloud.com, click the plus sign + in the sidebar.

*   Now a group will be created with an option to name it.

**2** **Type a Name**

Type the group’s name in the text field, and then click “Enter”.

*   To change the Group’s name, double-click, and you can also change the name. 

**3** **Add Contacts to Form a Group**

Once you have made a group, adding a name to that group is a simple process.

*   Drag the names from the All Contacts Group and add them to the newly created blog.

*   You can put names in as many groups as you want through a simple drag-and-drop process. 

**4 The process to Remove a Contact**

Contact can be easily deleted through a simple process. No rocket science is required.

*   Just select the contact and delete it from the group. Simple! 

**5** **Delete a Group**

Deleting a group is also a simple method, not a brainy formula.

*   In iContacts.com Contacts, select the Group you want to delete and press the Delete Key. The special contact group will be gone.

**6** **Restoring Accidentally Deleted Contacts**

If you accidentally delete a contact, it is easier to recover it. There are two ways:

*   You can again drag and drop the contact from the main All Contacts group. 

*   In case the whole group gets deleted, you can restore the archived store. 

**Important Points to Remember**

Making a group on iPhone is easier, and you can enjoy various benefits of this functionality. However, there are some important points to remember:

1.  You can use a laptop or tablet to access iCloud.com
2.  Once you remove a name from the group, it remains in the main Contacts group.
3.  Similarly, removing the whole group doesn’t impact the contacts in the main group.
4.  You can make as many groups as possible. 
5.  It is possible to place the same name in different groups at a time.
6.  iCloud.com has the capacity to accommodate a large group of special groups, so it is best suited for businesses and people who deal with multiple individuals.

**How to Access the Group?**

Now, you know how to create and manage groups on an iPhone. Next, you might be wondering how to access the group. Don’t worry, this blog will shed light on that as well.

Follow these steps to access the group:

1.  First, open the Contacts app.
2.  Second, look at the upper-left corner and tap ‘Groups.’
3.  Once the Groups tab opens, it will show all the Groups you have created. 
4.  Type the name of the group you want to open.
5.  It will reach you to the required group.

**How to Manage Contacts in Groups?**

After creating Groups on the iPhone, it is easier to manage contacts in a group. You can manage alphabetically, either by the first name’s alphabet or the second name’s alphabet.

Here are steps to choose the alphabet:

1.  First, go to Settings. 
2.  Now, select ‘Contacts.’
3.  You will have two options: sort order or display order. 
4.  Sort Order: Sort alphabets by first or last name.
5.  Display Order: sort the first name either before or after the last name

It makes managing and searching alphabets easier for the owner.

The Contact Groups feature on an iPhone provides an efficient and convenient way to manage and communicate with multiple contacts simultaneously, saving time and improving organization.

1.  How to fix iPhone keeps restarting issue
2.  iPhone Calendar Events spam: Here’s how to get rid of it
3.  How to fix the iPhone boot loop and iPhone black screen
4.  How to transfer data between iPhone and computer safely
5.  MobileTrans: Transfer Whatsapp data from iPhone to Android

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

How to Create and Manage Groups on iPhone

By Waqas
In addition to phishing activities, researchers have observed a rise in Telegram channels being used to sell online banking credentials.
This is a post from HackRead.com Read the original post: Phishers Now Actively Automating Scams with Telegram

**The malicious use of Telegram is not surprising as the platform has been referred to as the “New Dark Web” in a previous report.**

Cybersecurity experts at Kaspersky have identified a new trend in phishing techniques, with threat actors increasingly utilizing **Telegram** to automate their activities and provide various services.

In a recent **advisory**, Kaspersky web content analyst Olga Svistunova revealed that phishers create Telegram channels to educate their audience about phishing and share links to these channels via YouTube, GitHub, and phishing kits. Many of these channels offer tools to automate malicious workflows, such as generating phishing pages or collecting user data.

While the phishing kits used in these campaigns are relatively basic, typically consisting of a script that captures user credentials and forwards them to a **bot**, Svistunova noted that they are still effective. For example, victims clicking on links promising incentives like 1000 likes on TikTok may be presented with a convincing login form that resembles the real thing.

A free phishing script and a ready-made phishing page for KFC sold on a Telegram channel (Image: Kaspersky)

Kaspersky also observed Telegram channels used for selling online banking credentials, with scammers extracting and selling account balances, charging higher prices for accounts with higher balances.

Additionally, some Telegram channels were found to be advertising phishing-as-a-service operations, offering subscriptions with customer support for regular updates on phishing tools, anti-detection systems, and links generated by **phishing kits**.

The malicious use of Telegram is not surprising as the platform has been referred to as the “New Dark Web” in a **report** from 2021 from Cyware. Furthermore, there have been numerous reports highlighting how Telegram groups have become a central hub for selling malware, bots, and ransomware, as well as announcing attacks by criminal gangs.

Despite the various techniques employed by phishers on Telegram, Kaspersky highlighted that there are ways to identify them, such as detecting malicious sites generated by phishing bots that are hosted in the same domain or share parts of HTML code. Since the emergence of these domains, Kaspersky has detected a total of 1483 attempts to access pages located within them.

The growing use of Telegram by phishers highlights the need for continued vigilance and awareness of evolving phishing techniques in the cybersecurity landscape.

**Protection against phishing attacks**

While common sense is a valuable defence against phishing scams, here are 5 effective ways to protect yourself and your organization from falling victim to phishing attacks:

*   **Be cautious with emails:** Do not click on any suspicious links or download any attachments from unknown senders. Verify the legitimacy of emails, especially those requesting sensitive information, by double-checking the sender’s email address and looking for signs of phishing, such as misspelled words or unusual requests.
*   **Avoid sharing personal information:** Do not share sensitive information, such as passwords, social security numbers, or credit card details, over email or other communication channels unless you are certain of the recipient’s identity and the security of the communication channel.
*   **Keep software up-to-date:** Regularly update your operating system, web browsers, and all software installed on your devices. This helps to patch security vulnerabilities that can be exploited by phishing attacks.
*   **Enable multi-factor authentication (MFA):** MFA adds an extra layer of security by requiring additional authentication, such as a fingerprint, a text message code, or a hardware token, in addition to your password. This can significantly reduce the risk of falling victim to phishing attacks.
*   **Educate yourself and be vigilant:** Stay informed about the latest phishing techniques and trends. Be wary of unexpected emails or messages, especially those that create a sense of urgency or ask for immediate action. Think twice before clicking on links or providing personal information, and report any suspicious emails or messages to your IT department or the relevant authorities. Always practice vigilance and scepticism when dealing with online communications.

1.  Scammers Pose as ChatGPT in New Phishing Scam
2.  Hackers turn to Telegram to assist Iranian protestors
3.  Hackers using USBs to drop malware in ongoing attack
4.  50% of malicious docs downloaded through Google Drive
5.  New YouTube phishing scam using authentic email address

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Phishers Now Actively Automating Scams with Telegram

By Habiba Rashid
The use of cameras on Tesla vehicles has come under scrutiny after reports revealed that some employees have…
This is a post from HackRead.com Read the original post: Tesla Employees Allegedly Shared Customers’ Private Videos and Photos

The use of cameras on Tesla vehicles has come under scrutiny after reports revealed that some employees have shared sensitive photos and videos captured by the cameras with each other over the span of several years.

Former employees told Reuters that images were shared in group chats and one-on-one communications between 2019 and last year. The report alleges that videos were shared among employees that were filmed inside the garages of Tesla owners, including a video featuring a white Lotus Esprit submersible from the James Bond movie The Spy Who Loved Me, which Tesla CEO Elon Musk’s bought in 2013.

The sharing of this footage was a breach of privacy, and former employees admitted that they would not buy a Tesla after witnessing how the company treated customer data. Tesla has claimed that its camera system is designed to protect user privacy, and even if owners opt to share camera recordings with Tesla for “fleet learning” purposes, the recordings are supposed to remain anonymous and unlinked to specific vehicles or owners unless received due to a safety event, such as a crash or airbag deployment.

Interviews conducted with former Tesla employees have revealed that sharing private and potentially embarrassing video footage of customers captured by their own cars without their consent was quite common.

Tesla Model X

Employees reported that hundreds, if not thousands, of private video clips from customers’ Tesla cars, were regularly viewed by staff from 2019 through the middle of 2022, and possibly longer.

While some of the videos were harmless, others exposed Tesla owners and their loved ones in humiliating, compromising, and even hazardous situations. Some employees claimed they had to watch the footage to recognize objects in people’s garages, which would assist the cars in safely reversing while using Tesla’s Autopilot feature.

One former employee stated, “There was just definitely a lot of stuff that like, I wouldn’t want anybody to see about my life.”

Former Tesla workers recounted videos showing various incidents such as naked car owners, individuals stumbling and falling, reckless driving, accidents, confrontations on the road, and even a scene where someone appeared to be forcibly taken into a vehicle.

Former Tesla employees have disclosed that videos depicting disturbing and shocking incidents, including a child being hit by a car while riding a bike, were shared among employees as entertainment.

These videos were often edited with annotations, slowed down, and transformed into memes, and were constantly circulated through Tesla’s internal messaging system in private chats, emails, or small groups.

According to the former Tesla employees, the company’s managers occasionally enforced privacy policies and prohibited the sharing of videos, but they mostly chose to ignore it.

The sharing of this footage has raised concerns about the privacy of Tesla owners and the potential misuse of data captured by the cameras. Owners may be worried that their personal information could be at risk of being shared with others or used for unintended purposes.

Additionally, the sharing of this footage could have legal consequences for Tesla, as it may be a violation of privacy laws. As of now, Tesla has not responded to the allegations.

It is crucial for companies to prioritize the privacy of their customers and ensure that their data is protected. While the use of cameras in cars is becoming increasingly common, it is essential for companies to ensure that these cameras are not being misused to violate people’s privacy.

Customers should be aware of the risks involved in using cameras in their cars and take steps to protect their privacy, such as being cautious about what they share with the manufacturer or disabling the cameras altogether if they are not comfortable with them.

Companies like Tesla must also take steps to ensure that their employees are properly trained on privacy and data protection policies and respect the data made available to them.

1.  Telegram Shared User Data With Germany
2.  3rd-party flaw allowed a teen to track Tesla cars
3.  Russian hacker guilty of Tesla Gigafactory malware
4.  ProtonMail shared an activist’s IP with Swiss police
5.  Grindr shared user HIV, location data with 3rd-parties

I’m a student and cybersecurity writer. On a random Sunday, I am likely to be figuring out life and reading Kafka.

Tesla Employees Allegedly Shared Customers’ Private Videos and Photos

By Waqas
The Money Message ransomware group has reportedly demanded a ransom of $4 million from MSI.
This is a post from HackRead.com Read the original post: New Money Message Ransomware Gang Hits MSI, Threatens of Data Leak

**Recently surfaced Money Message ransomware group has claimed responsibility for targeting not only MSI but also several other companies across different countries including the US, the UK, and Bangladesh.**

Micro-Star International or MSI, a Taiwanese multinational information technology corporation, has fallen victim to a ransomware attack by a relatively new group called Money Message.

The attack has been confirmed by MSI through postings on their website and the Taiwanese stock exchange. Money Message is now demanding a ransom of $4 million to prevent the leaking of MSI’s confidential data.

MSI’s press release, however, seems to downplay the severity of the situation, stating that the affected systems have resumed normal operations with no significant impact on financial business.

Regardless, Money Message currently claims to hold critical information about MSI’s hardware, including the BIOS source code for motherboards. If the ransom is not paid, the group has threatened to leak this data, which could have serious repercussions for MSI in the future.

The screenshot leaked by the Money Message ransomware group to prove the authenticity of its attack (Image: Hackread.com)

The Money Message ransomware group, responsible for the recent attack on MSI, has made additional claims of compromising other companies. The following entities are reportedly among the victims:

*   Hawaii Self Storage, USA
*   Mid-American Glass, USA
*   Biman Bangladesh Airlines
*   LPA Group Plc, United Kingdom
*   Golden Bear Insurance Company, USA
*   Pharmerica.com & BrightSpring Health Services

Money Message has set a countdown timer for over 100 hours on their website, indicating that they plan to release the 27GB of data to the public once the timer ends.

MSI has 84 hours according to the timer on the Money Message’s website (Image: Hackread.com)

Money Message is a relatively new group, with their first major hack being reported by Zscaler’s Threat Labs on March 29th, 2023, just a day before MSI’s attack. The group’s website boasts a list of seven pages of successful ransomware attacks on various targets, ranging from small businesses to large firms, and even a Bengali airline.

It remains unclear whether Money Message will follow through with its threat to leak MSI’s data, or if MSI intends to pay the ransom. In the meantime, MSI has urged users to only download software from official links on their website, indicating heightened caution in the aftermath of the attack.

The situation continues to unfold, and MSI’s response to the ransomware attack will be closely watched by the cybersecurity community.

1.  LockBit Ransomware Hits SpaceX Contractor
2.  New Rorschach Ransomware Targeting US- Firms
3.  Hackers Exploit MSI Afterburner to Deliver Coin Miner
4.  UK Criminal Records Office Hit by Ransomware Attack
5.  Western Digital Breach – Hackers Enter Internal Systems

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

New Money Message Ransomware Gang Hits MSI, Threatens of Data Leak

By Deeba Ahmed
Cobalt Strike is a legitimate post-exploitation tool designed by Raphael Mudge of Fortra for adversary simulation but it has also been abused by cybercriminals.
This is a post from HackRead.com Read the original post: Microsoft and Fortra to Take Down Malicious Cobalt Strike Infrastructure

**The U.S. District Court for the Eastern District of New York permits Microsoft to seize malicious Cobalt Strike infrastructure used in global malware and ransomware attacks.**

The U.S. District Court for the Eastern District of New York has granted permission for the seizure of domain names used by threat actors to store and share malicious versions of **Cobalt Strike**.

This action follows legal and technical efforts by Microsoft, Health ISAC (Health Information Sharing and Analysis Center), and cybersecurity firm Fortra to prevent the abuse of Microsoft software and the Cobalt Strike exploitation tool.

It is worth noting that in 2019, Microsoft employed a similar approach to **seize 50 domains utilized** by North Korean hacker groups Thallium and APT37 for large-scale cyberattacks.

According to the lawsuit, cybercriminals are utilizing cracked, legacy copies of the post-exploitation tool and Microsoft software to distribute malware and ransomware.

Cobalt Strike, originally **provided by Fortra** for adversary simulation, is a legitimate post-exploitation tool. Despite Fortra’s efforts to prevent abuse, hackers continue to create cracked versions of older product versions and exploit them.

The recent court order enables these organizations to notify and seize IP addresses hosted in the United States that are hosting malicious versions of these tools. The domains will be taken down immediately, and the court order also allows for the ongoing seizure of such domains in the future, as cybercriminals are likely to develop new infrastructure.

Additionally, Microsoft will be notifying hosting providers in the European Union and Latin America to prevent the abuse of **manipulated versions of Cobalt Strike** by taking down host domains.

Microsoft has also stated that its APIs and SDKs have been abused by threat actors in the development and distribution of malware. Therefore, Fortra and Microsoft have obtained temporary restraining orders against the copyright violators of their programs to ensure that malicious versions are shut down and seized.

It is important to note that Cobalt Strike is frequently **used in ransomware attacks**, particularly those targeting the healthcare sector, which is why Health ISAC has been involved in the court proceedings.

An email claiming the Kaseya patch drops Cobalt Strike malware

Recently, the tool has been observed in at least 68 ransomware attacks against healthcare organizations in 19 countries. Profit-driven criminals also use malicious versions of Cobalt Strike to launch ransomware attacks, and state-sponsored actors linked with Russia, China, Vietnam, and Iran are also actively exploiting it.

The action against the abuse of Cobalt Strike and Microsoft software involves disrupting the attackers’ infrastructure, including hosting servers and **domains**. The court order was issued on March 31, and with the assistance of CERTs and ISPs, Microsoft and Fortra have successfully taken down attacker infrastructure and blocked cybercriminals’ access to compromised devices.

In their **lawsuit**, the companies have named sixteen John Does as the plaintiffs, without revealing their identities. The complaint has disclosed that these individuals are members of the Conti, LockBit, and BlackCat ransomware gangs, as well as the Evil Corp cybercrime group.

“Disrupting cracked legacy copies of Cobalt Strike will significantly hinder the monetization of these illegal copies and slow their use in cyberattacks, forcing criminals to re-evaluate and change their tactics,” Microsoft’s Digital Crimes Unit GM, Amy Hogan-Burney stated.

1.  UpdateAgent malware mimics legitimate macOS software
2.  Legitimate tool used in compromising Cloud-based assets
3.  Hackers Using BRc4 Red Team Pentest Tool in Cyberattacks
4.  What Makes External Attack Surface Management Essential?

Microsoft and Fortra to Take Down Malicious Cobalt Strike Infrastructure

By Owais Sultan
In today’s world, censorship and suppression of free speech are rampant in many parts of the globe. Governments…
This is a post from HackRead.com Read the original post: Meet Anthalon, fighting for freedom of the press

In today’s world, censorship and suppression of free speech are rampant in many parts of the globe. Governments and non-governmental organizations (NGOs) are constantly struggling to get their message across to audiences in these areas, where traditional communication channels are restricted or non-existent. Enter Anthalon, a new company that vows to fight censorship and stimulate freedom of the press.

Anthalon enables governments and NGOs to deploy information in virtually any country, communicating with and gathering intelligence from audiences while fighting censorship and stimulating freedom of the press.

The company has developed a unique platform that allows them to serve ads in hard-to-publish places anywhere in the world. These ads are for example intended to, through intelligence gathering, find missing and wanted people.

One of the noticeable features of Anthalon’s platform is its broad range of high-end technology that it is capable of. By deploying programmatic advertising techniques, the company can detect user patterns and identify device IDs. This technology makes it possible for Anthalon to target its ads more precisely and efficiently, and gather intelligence more effectively.

In some cases, Anthalon serves as an intermediary for parties that offer rewards to encourage people to provide information. For instance, they may offer a reward for information leading to the reunification of a missing person with their families or the capture of a wanted criminal. This approach has proven highly effective in many cases, as it incentivizes people to come forward with valuable information that they may otherwise be hesitant to share.

Anthalon says its mission is to promote freedom of the press and human rights around the world. By enabling governments and NGOs to get their message out in areas where traditional communication channels are restricted, Anthalon wants to create a more open and transparent society.

Moreover, by gathering intelligence and targeting ads more precisely, the company is making it possible to find missing and wanted people more quickly and efficiently.

In conclusion, Anthalon can be a game changer for freedom of the press and human rights. With its innovative platform, the company is empowering governments and NGOs to fight censorship, stimulate freedom of the press, and gather intelligence more effectively.

One can only hope that more companies follow in Anthalon’s footsteps, and work to create a more open and transparent world for all. Visit anthalon.com for more information or read its founder, Isua Botman’s interview with FOX 40.

_Editor’s note: This article was contributed by Anthalon._

1.  How Internet Censorship Affects You – Pros and Cons
2.  WhatsApp Subverts Censorship with New Proxy Feature
3.  Top 10 worst countries for Internet freedom & censorship
4.  Researchers develop AI tool to evade Internet censorship
5.  Geneva tool bypasses censorship by merely doing nothing

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

Meet Anthalon, fighting for freedom of the press

By Owais Sultan
In today’s fast-paced digital world, mobile advertising has become an essential tool for businesses looking to engage with…
This is a post from HackRead.com Read the original post: Targetoo’s Precision Targeting Vows to Transform Mobile Advertising

In today’s fast-paced digital world, mobile advertising has become an essential tool for businesses looking to engage with their target audience effectively. Enter Targetoo – a cutting-edge mobile advertising platform that is transforming the way companies connect with consumers. With its innovative technology, Targetoo aims at helping businesses achieve unprecedented success in the world of mobile marketing.

**Precision Targeting with Targetoo**

What sets Targetoo apart from other mobile advertising platforms is its commitment to precision targeting. By leveraging advanced technology and data-driven insights, Targetoo enables businesses to reach their desired audience with pinpoint accuracy. Their platform allows advertisers to target users based on a wide array of criteria, including demographics, interests, location, and even real-time behaviour.

This level of precision targeting means that businesses can ensure their marketing efforts are reaching the right people at the right time, ultimately leading to increased engagement and higher conversion rates. With Targetoo’s platform, gone are the days of wasted ad spend and generic, irrelevant ads. Instead, businesses can deliver highly personalized and engaging content that resonates with their target audience.

**The Power of Programmatic Advertising**

Targetoo specializes in programmatic advertising, which involves the automated buying and selling of ad space in real time. This approach to advertising allows businesses to streamline their marketing efforts, optimize their budget, and improve overall efficiency.

By embracing programmatic advertising, Targetoo helps businesses tap into a vast network of ad inventory across various channels, including mobile apps, websites, and social media platforms. With access to premium ad placements and a wide range of targeting options, businesses can easily reach their desired audience and achieve their marketing objectives.

**Expertise and Support**

Targetoo’s team of experienced professionals is dedicated to providing exceptional support and guidance to their clients. With a wealth of knowledge in mobile advertising and programmatic buying, Targetoo’s team works closely with businesses to develop and execute successful marketing campaigns that drive results.

From planning and strategy to creative development and optimization, Targetoo’s comprehensive suite of services ensures that businesses have the resources and expertise needed to excel in the competitive world of mobile advertising.

**Measurable Success**

One of the standout features of Targetoo’s platform is its robust analytics and reporting capabilities. By providing businesses with detailed insights into the performance of their campaigns, Targetoo allows them to make informed decisions and continuously refine their marketing strategies. This data-driven approach ensures that businesses can maximize their return on investment and achieve their marketing goals.

**Conclusion**

With its innovative technology, precision targeting, and commitment to client success, Targetoo has established itself as a leader in the mobile advertising industry. By harnessing the power of programmatic advertising and providing unparalleled support, Targetoo is helping businesses of all sizes unlock their full potential and thrive in today’s digital landscape. To learn more about how Targetoo can revolutionize your (mobile) marketing efforts, visit targetoo.com for more information.

_Editor’s note: This article was contributed by Targetoo._

1.  Advertising Strategies For PaaS Services
2.  Meet Anthalon, fighting for freedom of the press
3.  4 Things About Performance Analytics Technology
4.  The Importance of Data Security for Digital Signage
5.  How Businesses Benefit from Using Instagram Reels

Owais takes care of Hackread's social media from the very first day. At the same time He is pursuing for chartered accountancy and doing part time freelance writing.

Targetoo’s Precision Targeting Vows to Transform Mobile Advertising

By Waqas
The Criminal Records Office (ACRO) of the United Kingdom has acknowledged the cyberattack but did not confirm whether it was a ransomware attack.
This is a post from HackRead.com Read the original post: UK Criminal Records Office Crippled by Potential Ransomware Attack

Top cybersecurity figures, such as ESET’s Global Security Advisor Jake Moore and Kevin Beaumont, Head of Security Operations Centre at Arcadia Group Ltd, believe that ACRO has suffered a ransomware attack.

The UK Criminal Records Office (ACRO) has experienced a cybersecurity incident that forced it to take down its customer portal, thereby disrupting several operations, including police certificate procurement processing, which is crucial to process visa applications.

ESET’s global security advisor, **Jake Moore**, suspects that the agency might have become a victim of a ransomware attack, adding that the attackers likely wanted to steal data. On the other hand, Kevin Beaumont, Head of the Security Operations Centre at Arcadia Group Ltd, also **believes** that the cyber attack on ACRO is a ransomware attack.

This is what the ACRO’s website shows right now (Image: Hackread.com)

**What is ACRO?**

ACRO is the UK’s primary policing agency responsible for managing criminal records data and verifying those citizens who want to live or work abroad. The agency also exchanges these records with foreign governments for processing visa applications, as well as sharing information with British police and businesses.

The agency’s data input includes a decade’s worth of names, extended family details, and address histories. In addition, it includes new foreign addresses, passport information, legal representations, photos, data PIN cautions, convictions or charges, arrests, and reprimand-related information.

Furthermore, it checks individuals for cautions, prosecutions, and convictions, which is helpful to companies looking for employees and embassies processing visa applications. The information is extracted from the UK’s Police National Computer, as the agency has an agreement with the Cabinet Office.

**ACRO Confirms Security Breach**

ACRO was targeted by cybercriminals on January 17, 2023, and the compromise continued until March 21, 2023. The agency had been hinting at cybersecurity issues since January. On February 19th, it claimed a technical issue caused its website to go offline. Fifteen days later, ACRO stated that it couldn’t process police certificates properly.

On March 21st, the agency blamed essential website maintenance for the website outage and asked its customers to remain patient while it resolved technical issues.

The latest statement from ACRO

During the two months, its website was impacted by the security breach, and user data was compromised. This week, ACRO sent an email to the affected people, stating that although there was no evidence of a data breach, the agency suspected some data, including identification and criminal conviction information, had been compromised.

Since its website is down, the agency has to process police certificate applications manually by email. ACRO stated that it is working with national agencies to probe the incident, revealing that as soon as it realized the security breach it took the customer portal offline.

1.  Breach exposed OKC Police’s rape kit data
2.  Hackers leak DC police data as negotiations fail
3.  Ukraine National Police site down after cyberattack
4.  UK Police deleted 150k arrest records in software glitch
5.  Police lose evidence to ransomware attack; suspects walk free

I am a UK-based cybersecurity journalist with a passion for covering the latest happenings in cyber security and tech world. I am also into gaming, reading and investigative journalism

Source

HackRead