ByThoinot Arbeau-January 11, 2018.575 Online streaming services have won the battle with traditional broadcasters so far. And their fight doesn’t stop there as they also have to wage wars within their own ranks. For now, the paid-streaming network is facing pressure from the ad-supported services that are free to the user. One of the kind Tubi Tv has spent $35 M in the latest effort to get an advantage over the others. The company’s Ceo Tubi Tv now has 20 M active users, according to Farhad Massoudi. Additionally, the content attracts millions of other monthly active users. One thing is that it is the only ad-supported streaming service with a custom recommendation engine.
.576.576 Consumer habits have changed from linear consumption to Vod streaming in recent years. The Vod services ‘ greatest challenge has become the creation of appropriate content. In this region, Tubi Tv stands out by launching its own content customization engine. This engine is based on machine learning and tailors each custom library to any particular user. This way the platform only offers content that is important to the user’s preferences. This program helped to skyrocket Tubi Tv in the playfield of the Avod (Video-On-Demand based vertisement). Tubi has also started another process aimed at quickly following a new customer into this personalized experience and helping him find relatable cTravelex is still working to get its systems back up after hackers have compromised a disastrous network. Despite the warnings, the foreign exchange firm has failed to update their Vpn solution for more than six months. Hackers infected Sodinokibi on Travelex ‘ network and also stole confidential customer data. On 31 December 2019, Travelex fell victim to a Revil / Sodinokibi infection and all of its websites remain offline for the time being. The London-based foreign exchange company is now held hostage by ransomware actors who are seeking $3 million in Bitcoin payment. The malicious actors even threaten to release some of Travelex ‘ customer data to the public in order to increase the pressure, so this is a tragedy for the company. The company is currently working with the National Crime Agency (Nca) and the Cybercrime branch of the London Metropolitan Police to investigate the incident. Travelex operates in more than 70 countries, and has 1200 branches of retail. It’s global banking partners that include the Bank Tesco and Virgin Money from Barclays First Direct Hsbc Sainsbury so the negative effects of this assault on foreign currency exchange are global. Since there are no clarifications or deadlines for restoring the systems to regular operational status, we can not say for sure whether Travelex plans to pay the ransom or restore backups. According to unnamed sources, the actors managed to encrypt the firm’s entire network and also copied more than 5Gb of customer personal data including social security numbers and birth dates for credit card details. The issue here is that in fact, Travelex has not taken the responsibility of protecting its customers very seriously irrespective of what they are now telling the public. As it appears the hackers exploited a vulnerability of Pulse Secure Vpn identified since August 2019 and analyzed in depth by Devcore researchers back then. Carrying the identifier “Cve-2019-11510” the exploited bug was already patched when it was released, but the researchers found that since then hackers have been targeting unpatched systems. According to further reports Travelex was warned on September 13, 2019 that they once again remained vulnerable and they did nothing about it again. On 13 September 2019 we told Travelex of their insecure Pulse Safe Vpn servers. No comment. Pic.twitter.com / lCjk7Iy3Om Bad Packets Study (@bad packets) January 4, 2020 Chris Morales, Vectra’s head of security analytics, provided us with the following comment: “Any flaw in remote network access is a big deal. The security industry ranks vulnerabilities based on ease of exploitation and the effect of exploit with a score from 1-10. In the case of a Vpn vulnerability if it was remotely exploitable from the internet and provided the same level of access to an intruder as an authorised remote user then this would have been rated a high priority and should have been fixed right away. But it’s a shame that vulnerability management and patching are still hard to do. “Efs-based Ransomware is a real and tangible danger
ByBill Toulas-January 21, 2020.580 SafeBreach created new ransomware that uses the Windows Efs framework. The team tested their formation against three Av devices, and the threat was not identified by all. The Windows Efs (Encryption File System) is a feature that allows users to enforce encryption at the filesystem level and enjoy higher levels of protection from malicious actors. What if someone is able to use this function and turn it against the user using Ransomware based on Efs? This is just what the minds were talking about at SafeBreach Labs and they developed this new type of ransomware to test it against three commonly used Av devices. Their ransomware targets specific files and folders just as a standard strain would do to do the dirty work using a unique key but depending on the Efs encryption mechanism. More precisely the SafeBreach ransomware produces a key with the “vApi32!” CryptGenKey “and then generate a” Crypt32 “certificate for this key. The Efs encrypts the selected data through a sequence of invokes and measures, and then cleans the unencrypted originals. Likewise, the temporary files used in “EncryptFile” will also be removed after completion of the operation. The ransomware eventually encrypts the main file using a shared asymmetric key that is hard-wired into the malware, and then sends the encrypted data to the attacker. Since only the actor holds the key the only hope of the victim to recover the encrypted files lies in paying the ransom. The team tested their design on Windows 10 64-bit versions 1803 1809 and 1903 and it worked on all of them as anticipated. Considering that the Efs ransomware resides at a deep level of the kernel encryption files at the Ntfs driver level, no admin privileges are needed and no user interactions are required. The team believes that their development will fit well on Windows 8.x Windows 7 and Vista as well as 32-bit systems. When the Efs ransomware was tested using Av tools and security solutions, the researchers found that none could detect and stop it. More precisely, they tested Business 4.0.0.861(a) and Microsoft Windows 10 Secure File Access (build 17763) for Eset Internet Security 12.1.34.0 Kaspersky Anti Ransomware Software. Based on this SafeBreach decided to send the PoC to all major Av device vendors to allow them time to add malicious Efs encryption detection to their products. Those who claim to have patched their products and are now able to detect and avoid the Efs ransomware are: Avast / Avg Eset F-Secure (which has already been detected) Iobit Kaspersky Panda Security ByBill Toulas-January 18 2020.581 Apple reveals who demanded user or system data as many times as possible. Spain Usa and Germany top the related lists while Uae has demanded hundreds of removals of devices. Apple accepted most of the requests, as the reasons behind them were extreme. Apple has released a detailed report detailing how many data requests it got between January 1 and June 30, 2019. This is very important since we can get an idea of which entities are requesting user data as to the reasons behind the requests and which governments won last year’s world nose-poking competition. As Apple says, they have only replied to requests for data which are accompanied by the proof documentation linking the request to some form of legal action (criminal or civil proceedings). No matter who the submitter was, everything else has been denied. If Apple receives a request of this kind the tech giant will also alert the consumer that is affected by it. However, Apple clarifies that they can provide data to the authorities without sending a notice to the user in some situations where the legal process may be affected. This is particularly the case in situations involving a risk of harm to children or when the computer is being robbed. The following lists will give you an idea (top five in each category) of what happened during H1 2020: Device Requests: Germany 13558 (81% approved) Usa 4796 (84% approved) Spain 1616 (78% approved) Singapore 1445 (87% approved) Financial Identifier Requests: Germany 1072 (85% approved) Usa 918 (81% approved) Taiwan 206 (91% approved) France 199 (72% approved) Government Account Requests: Usa 3619 (90% approved) Germany 459 (75% approved) Taiwan 395 (89% approved) United Kingdom 364 (85% approved) Emergency Government Requests: United Kingdom 259 (87% approved) Usa 206 (90% approved)Russia 16 apps (15 apps have been removed) Turkey 2 apps (2 apps have been removed) In conclusion we may claim that Germany unexpectedly tops the lists that say something about how the law handles new technology there. Interestingly, Spain was pretty high and the fact that their acceptance rates were not very good means that many of the data requests were poorly substantiated.Russia 16 apps (15 apps have been removed) Turkey 2 apps (2 apps have been removed) In conclusion we may claim that Germany unexpectedly tops the lists that say something about how the law handles new technology there. Interestingly, Spain was pretty high and the fact that their acceptance rates were not very good means that many of the data requests were poorly substantiated.