Amazon offers to buy 60 percent stake in India's Flipkart: CNBC-TV18

(Reuters) - Amazon.com Inc has made a formal offer to buy a 60 percent stake in Indian online retailer Flipkart, CNBC-TV18 reported on Wednesday, citing sources.


from Reuters: Technology News https://ift.tt/2KwkxIX

WhatsApp Group Video Call and Instagram Video Chat Are Coming Soon

Facebook announced a whole lot of new features at its 2018 Facebook F8 developers conference, including Dating on Facebook, letting users clear their web browsing history, real-time language translation within Messenger, and many more. Besides announcing exciting features for its social media platform, Facebook CEO Mark Zuckerberg also gave us a quick look at the features Facebook introduced


from The Hacker News https://ift.tt/2rfUgWn

Along with Dating, Here’s a List of New Features Coming to Facebook

Facebook announced a whole lot of new features at its 2018 Facebook F8 developers conference, along with the keynote by its CEO Mark Zuckerberg addressing concerns from app developers after Facebook paused 3rd-party app review in the wake of the Cambridge Analytica scandal. Here are some big takeaways from Zuckerberg's keynote on Day 1 of Facebook F8, held for two days, May 1 and 2, at the


from The Hacker News https://ift.tt/2I7Jex6

Facebook to play cupid in online dating debut

SAN JOSE, Calif. (Reuters) - Facebook Inc is entering the dating game, Chief Executive Mark Zuckerberg said on Tuesday, planning a dating service to matchmake millions of people on the world's largest online social network and nudge them into spending more time there.


from Reuters: Technology News https://ift.tt/2w5Kb4c

Apple beats profit expectations, plans $100 billion cash return boost

(Reuters) - Apple Inc on Tuesday beat revenue and profit expectations in its March quarter as it sold 52.2 million iPhones, barely below Wall Street targets and showing some resilience as global demand for smartphones wanes.


from Reuters: Technology News https://ift.tt/2I1JuOb

Snap shares sink as redesign weighs on results

(Reuters) - Snap Inc missed Wall Street forecasts for first-quarter revenue and regular users after a redesign of its Snapchat messaging app turned off some long-time fans and advertisers, sending its shares sharply lower on Tuesday.


from Reuters: Technology News https://ift.tt/2jj0UI6

Apple beats financial expectations, plans $100 billion cash return boost

(Reuters) - Apple Inc on Tuesday beat revenue and profit expectations in its March quarter as it sold 52.2 million iPhones, barely below Wall Street targets and showing some resilience as global demand for smartphones wanes.


from Reuters: Technology News https://ift.tt/2Ks6KDm

Snap's user growth misses analyst forecasts, shares plunge

(Reuters) - Snap Inc's user and revenue growth fell short of analysts' expectations for the first quarter after a widely panned redesign of its Snapchat messaging app, sending its shares tumbling more than 10 percent.


from Reuters: Technology News https://ift.tt/2rbnFSK

Safaricom pilots messaging app linked to mobile money

NAIROBI (Reuters) - Safaricom, Kenya's biggest telecoms company, is piloting a social messaging app that will link to its mobile money platform in an attempt to move the company into the application business, the company said on Tuesday.


from Reuters: Technology News https://ift.tt/2Fx5qvj

Facebook to play matchmaker in first dating service

SAN JOSE, Calif. (Reuters) - Facebook Inc will offer its first dating service, Chief Executive Mark Zuckerberg said on Tuesday, signaling the entry of the world's largest social network into a growing market that sent shares of established dating site operators tumbling.


from Reuters: Technology News https://ift.tt/2JJQV9E

Facebook to offer first dating feature, rival shares tumble

SAN JOSE, Calif. (Reuters) - Facebook Inc will offer its first dating service, Chief Executive Mark Zuckerberg said on Tuesday, signaling the entry of the world's largest social network into a growing market that sent shares of established dating site operators tumbling.


from Reuters: Technology News https://ift.tt/2w2UiXj

Facebook to offer dating service for first time

SAN JOSE, Calif. (Reuters) - Facebook Inc plans to add a dating service, Chief Executive Mark Zuckerberg said on Tuesday, marking the first time the world's largest social media network has actively tried to help people form romantic relationships.


from Reuters: Technology News https://ift.tt/2rccBo2

Facebook to use augmented reality to draw ads to Messenger app

MENLO PARK, Calif. (Reuters) - Facebook Inc's Messenger app launched an augmented reality feature on Tuesday to allow people to see products they are shopping for as if they already have them, such as a car parked in a driveway, in a move aimed at drawing in potential advertisers.


from Reuters: Technology News https://ift.tt/2FweG2P

SiliVaccine: A Special Report Into North Korea’s Anti-Virus

Revealed: In an exclusive piece of research, Check Point Researchers have carried out a revealing investigation into North Korea’s home-grown anti-virus software, SiliVaccine.          One of several interesting factors is that a key component of SiliVaccine’s code is a 10-year-old copy of one of Trend Micro’s, a Japanese company, software components.

 

A Suspicious Email

This investigation began when our research team received a very rare sample of North Korea’s ‘SiliVaccine’ anti-virus software from Martyn Williams, a freelance journalist with a focus on North Korean technology. Mr. Williams had himself received the software as a link in a suspicious email sent to him on July 8th 2014, by someone going by the name of ‘Kang Yong Hak’. This sender’s mailbox has since been rendered unreachable.

 

The strange email sent by ‘Kang Yong Hak’, supposedly a Japanese engineer, contained a link to a Dropbox-hosted zip file that held a copy of the SiliVaccine software, a Korean language readme file instructing how to use the software and a suspicious looking file posing as an update patch for SiliVaccine.

 

Trend Micro’s AV Scan Engine

 

After detailed forensic analysis of SiliVaccine’s engine files (the software component that provides the core file scanning capability of the anti-virus), our research team discovered exact matches of SiliVaccine and large chunks of 10+-year-old anti-virus engine code belonging to Trend Micro, a completely separate Japan-based provider of cybersecurity solutions. For this to happen, the developers who built SiliVaccine could have had access to a compiled library from any of Trend Micro’s commercially released products, or, theoretically, source code access.

 

Of course, the purpose of an anti-virus is to block all known malware signatures. However, a deeper investigation into SiliVaccine found that it was designed to overlook one particular signature, which ordinarily it would be expected to block, and which is blocked by the Trend Micro detection engine. While it is unclear what this signature actually is, what is clear is that the North Korean regime does not want to alert its users to it.

 

Bundled Malware

 

As for the supposed patch update file, this was found to be the JAKU malware. This was not necessarily part of the anti-virus but could have been included in the zip file as a way to target journalists such as Mr. Williams.

 

In brief, JAKU is a highly resilient botnet forming malware that has infected around 19,000 victims, primarily by malicious BitTorrent file shares. It has however been seen to target and track more specific individual victims in both South Korea and Japan, including members of International Non-Governmental Organizations (NGOs), engineering companies, academics, scientists and government employees.

 

Our investigation found though that the JAKU file was signed with a certificate issued to a certain ‘Ningbo Gaoxinqu zhidian Electric Power Technology Co., Ltd’, the same company that was used to sign files by another well-known APT group, ‘Dark Hotel’. Both JAKU and Dark Hotel are thought to be attributed to North Korean threat actors.

 

The Japanese Connection

 

Japan and North Korea do not enjoy friendly political or diplomatic relations, which makes is strange that the initial email containing the copy of SiliVaccine appeared to have been sent by a

 

Japanese national.  However the unlikely connection does not end there, as other connections with Japan were also found by our researchers.

 

During our investigation, we discovered the names of the companies that are thought to have authored SiliVaccine, PGI (Pyonyang Gwangmyong Information Technology) and STS Tech-Service.

 

STS Tech-Service is known to have worked with other companies, including ‘Silver Star’ and ‘Magnolia’, both of which are based in Japan and have had previous cooperation with the KCC (Korea Computer Center), a North Korean government entity.

 

Trend Micro’s Response

 

Our team reached out to notify Trend Micro of their detection engine being used in SiliVaccine, who responded promptly and were highly cooperative. Their response was as follows:

 

“Trend Micro is aware of the research by Check Point on the “SiliVaccine” North Korean anti-virus product, and Check Point has provided us with a copy of the software for verification. While we are unable to confirm the source or authenticity of that copy, it apparently incorporates a module based on a 10+ year-old version of the widely distributed Trend Micro scan engine used by a variety of our products. Trend Micro has never done business in or with North Korea. We are confident that any such usage of the module is entirely unlicensed and illegal, and we have seen no evidence that source code was involved. The scan engine version at issue is quite old and has been widely incorporated in commercial products from Trend Micro and third party security products through various OEM deals over the years, so the specific means by which it may have been obtained by the creators of SiliVaccine is unknown. Trend Micro takes a strong stance against software piracy, however legal recourse in this case would not be productive. We do not believe that the infringing use at issue poses any material risk to our customers.”

 

Trend Micro’s indication that a widely licensed library was misappropriated may be behind SiliVaccine’s use of a 10+ year-old version of their scan engine is backed up by an additional analysis our team made of an older version of SiliVaccine, too. This suggests that this is not a one-time occurrence.

 

Summary

 

This revealing exploration into SiliVaccine may well raise suspicions of authenticity and motives of the IT security products and operations of this hermit kingdom.

 

While attribution is always a difficult task in cyber security, there are many questions raised by our findings. What is clear, however, are the shady practices and questionable goals of SiliVaccine’s creators. Our investigations point to yet another example of state-sponsored technologies being used in the fifth generation of the cyber threat landscape.

 

For a more technical look inside SiliVaccine, please check out Check Point Research’s findings.

The post SiliVaccine: A Special Report Into North Korea’s Anti-Virus appeared first on Check Point Blog.



from Check Point Blog https://ift.tt/2HErHwV

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

Cybersecurity researchers have uncovered a new phishing campaign that exploits social media private messages to propagate malicious payloads...